suap03.impresainungiorno.gov.it

Issued by Actalis Domain Validation Server CA G3

About this certificate

This digital certificate with serial number 52:97:3c:e8:93:b4:c3:a4:71:8f:ce:fd:f1:ee:f2:31 was issued on by Actalis S.p.A..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=suap03.impresainungiorno.gov.it

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 52:97:3c:e8:93:b4:c3:a4:71:8f:ce:fd:f1:ee:f2:31
Serial Number (int): 109781967851224609945753575087183688241
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: fa:0f:03:81:3d:92:1c:73:18:46:92:71:cd:19:cc:71:cd:c7:b8:01
AuthorityKeyId: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (sha1): b3:0c:6e:28:0f:01:82:bd:47:af:ae:79:6a:54:c7:67:c6:7e:42:75
Fingerprint (sha256): 1c:6c:9b:12:0b:a8:f5:d8:85:48:eb:9d:65:9c:de:72:ce:6e:c2:2b:f5:7a:fa:4c:69:b0:4f:f6:62:5a:ab:8e

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate suap03.impresainungiorno.gov.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for suap03.impresainungiorno.gov.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

suap03.impresainungiorno.gov.it

Other certificates including the domain name impresainungiorno.gov.it

(limited to 100 certificates)
suap03.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapservices.impresainungiorno.gov.it
coll.impresainungiorno.gov.it
suapnewcl.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
pa-demo.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
www.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
pacl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapservicescl.impresainungiorno.gov.it
suapservicescl.impresainungiorno.gov.it
api.impresainungiorno.gov.it
suapnewcl.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapservices.impresainungiorno.gov.it
suapservices.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suapservicescl.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapservicescl.impresainungiorno.gov.it
suapnew.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
adminsuapcl.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
subf.impresainungiorno.gov.it
adminsuap.impresainungiorno.gov.it
adminsuapcl.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
coll.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
comunicazionireaws.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
api.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapnew.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
test.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
coll.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapnew.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
adminsuap.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
test.impresainungiorno.gov.it
pa.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suapservices.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it

Certificate

The complete raw certificate details for suap03.impresainungiorno.gov.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4TpC6WFR5D5zQqS5oy/
NCERMQNoFbl7GvtLYJPDJpjoHVdgj+/wFYAKyQFrcn06P0l0OerCi5nM5n17bxhI
gFGS8BgzOsCAY42k2+W+j9svZ8O0j7v/nboCI/fmYv+taK7EYRsrFp67QWK4lOy5
uirwxhPMYlsntCCSI5/hRQK8i6VD/DsF2QQtb1EyB7uoYYyYpRf+B4kYyv2hoyZN
jQ6Davx4oBzlZ4YdEN7ja4DEO7JYUtypksufi05bravKYf+3TEqZC2W2QQCqaAes
DhTYZJf7bgWvY8c1a2DXucFQm+Mi0ty+urOeUOcFBestf2DZcW6ZSvFojqA95XpC
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 109781967851224609945753575087183688241
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-11 07:44:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-11 07:44:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'suap03.impresainungiorno.gov.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26196869656379978368363853116858991076682070222770633529763043607751738793716711550369300437580116325840657346181342226065373253680576419289817504187523120168564059962160400914047757845798433328476419297973851925184829992865763378027834562342212989141854283529222722784443093849212692915733127988650269049232549112470655790531900534233181041369600217221318235487106494580608977599158674206297325933775958383511025380980444638379231418464109683832748978642500340044707283149471627222774868091008675337641728943029764748841854566376752351039539888529456514869829505288203831806863898979229172120733597209705461180940833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suap03.impresainungiorno.gov.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.22.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa0f03813d921c7318469271cd19cc71cdc7b801
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000181ec4065b300000403004730450221008b009a5b536934281fb816bef3ad2f2616a5365fd8bebd464db9de5ea72da660022051cd3af52ee0b074e5e04a55b536eac8ff85ca9ac260619cadfc529329b26c9f0077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000181ec4065e2000004030048304602210080a8f93961fca1950c0d09d5e6b6365a7b72baa54668b92452f5a11029b89fc4022100ac4432d4b840b4f0f1f92790a40df3ac251758a41c97622d44f277eb02b3577e0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000181ec4065bc0000040300463044022071f070e86f4bb3fea827d542f5896da95cf4faad17255d988f4a5e8f6e0f43bf022049c822c09dbca907340d5551c4a55365cb4de35a9c82f98e66fed8da7411e708
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		003594780ccd5a84b2216225b610ef29081fa3a6ea2b07b4518a8e000152f9d5db5deebfd83b5ddf2134fa0fb5a9d757f64a73557c35cd2ab02550463544a14090109e5d00aa4b6c2019114dbe47e0b14f24f670c7d3d6574dc769438f3654a8ec8ec5d4736cd243de6caf620b636edc2cd1af11c0ef513e542248495f5ff34f0a6c183fc185b88f6a885da537ac21e33ed31999fd3309a486b05d4cac350d088cd9b92cd3aa6a21cf6943a7ef9eae6db740a4d18fd6505043dbca9406af2093c7826420160d9528ef113c264ae5e8e19682e29039cf0f43549525f5fc62f322a6a6e0f3b97f8f70672ff787f1bd09777c7fc401a377d716bf8e2acbe895561642fba12a450f2e40b15022845ece62e6097a3c223e40dea062574f06b58f97b90fff234ba52bd35880ff273b22c5056f3cb0b66ad0730f3933b9e2cbbccba8e21805676350903ffe0672a80142d7fef42517f2b2592bf64c81b79b23b1a262cd597e96fdd4859f62510291e23455cd9f77889914c88c8d7a2220a70d84ac2c77069226748f78d18fb69e216bb1d1e7fe4704db894ece13c9b332faef3a48c111f76cd5a6828af9a4b1d4fa76abb51f54a41bffc429a2fcfaa0d904260bb7a6ebb8fb9c77a866b88fbbf9f23882fe17d005dd05dc7be600f30332e58d60fca2b3d36df7d9efecdd59e71e36e85093bdbfc77fc8ba8388042eaa5fe738bb908757ce