santiano.mad.rad.diplomatie.gouv.fr

Issued by Gandi Standard SSL CA 2

About this certificate

This digital certificate with serial number 6d:39:e1:d6:ed:21:b1:54:f1:4f:63:4f:54:42:40:86 was issued on by Gandi.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=santiano.mad.rad.diplomatie.gouv.fr

Gandi

Organization: Gandi
State / Province: Paris
Locality: Paris
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:39:e1:d6:ed:21:b1:54:f1:4f:63:4f:54:42:40:86
Serial Number (int): 145186393031868594305243101059279372422
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6a:65:93:98:3f:e0:d0:23:61:31:cf:2c:44:6d:62:9c:0a:32:39:e4
AuthorityKeyId: b3:90:a7:d8:c9:af:4e:cd:61:3c:9f:7c:ad:5d:7f:41:fd:69:30:ea

Fingerprint (sha1): 50:70:7a:a7:c7:a9:04:73:fc:de:fa:2e:b4:29:94:47:de:31:9f:9b
Fingerprint (sha256): 1e:03:fd:28:58:f3:a8:c1:7a:2e:b0:dd:ef:59:b0:a1:cd:d7:71:1a:75:6b:c9:ed:c3:87:ea:89:90:fa:61:33

Issuing Certificate URL: http://crt.usertrust.com/GandiStandardSSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/GandiStandardSSLCA2.crl

Check the revocation status for certificate santiano.mad.rad.diplomatie.gouv.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for santiano.mad.rad.diplomatie.gouv.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

santiano.mad.rad.diplomatie.gouv.fr
www.santiano.mad.rad.diplomatie.gouv.fr

Other certificates including the domain name diplomatie.gouv.fr

(limited to 100 certificates)
grandformat.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
dev.grandformat.diplomatie.gouv.fr
forge.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
monconsulat.diplomatie.gouv.fr
smacano.mad.diplomatie.gouv.fr
blog.diplomatie.gouv.fr
fecito.mad.diplomatie.gouv.fr
enrolement.portail.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
smtp1.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
fecito.mad.rad.diplomatie.gouv.fr
latitudefrance.org
apps.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
votefae.diplomatie.gouv.fr
www.diplomatie.gouv.fr
latitudefrance.org
apk.diplomatie.gouv.fr
monconsulat.diplomatie.gouv.fr
cncd.diplomatie.gouv.fr
idppastel.diplomatie.gouv.fr
ariane.diplomatie.gouv.fr
escano.mad.rad.diplomatie.gouv.fr
escano.mad.rad.diplomatie.gouv.fr
api.diplomatie.gouv.fr
apk.diplomatie.gouv.fr
escano.mad.rad.diplomatie.gouv.fr
grandformat.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
pm.dpad.rad.diplomatie.gouv.fr
monconsulat.diplomatie.gouv.fr
grandformat.diplomatie.gouv.fr
epoc.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
latitudefrance.org
apps.diplomatie.gouv.fr
latitudefrance.org
basedoc.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
portalis.diplomatie.gouv.fr
blog.diplomatie.gouv.fr
vuedemafenetre.diplomatie.gouv.fr
santiano.mad.rad.diplomatie.gouv.fr
grandformat.diplomatie.gouv.fr
pm.dpad.rad.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
grandformat.diplomatie.gouv.fr
micore.dpad.rad.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
escano.mad.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
cic-lp.diplomatie.gouv.fr
fecito.mad.diplomatie.gouv.fr
portalis.diplomatie.gouv.fr
latitudefrance.org
vuedemafenetre.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
blog.diplomatie.gouv.fr
pm.dpad.diplomatie.gouv.fr
pastel.diplomatie.gouv.fr
latitudefrance.org
vuedemafenetre.diplomatie.gouv.fr
pastel.diplomatie.gouv.fr
grandformat.diplomatie.gouv.fr
blog.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
catalogue.api.diplomatie.gouv.fr
*.reseau21.diplomatie.gouv.fr
bibliotheque-numerique.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
blog.diplomatie.gouv.fr
portalis.diplomatie.gouv.fr
pm.dpad.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
epoc.diplomatie.gouv.fr
ariane.diplomatie.gouv.fr
vuedemafenetre.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
mail.diplomatie.gouv.fr
webdocs.diplomatie.gouv.fr
portail.diplomatie.gouv.fr
micore.dpad.diplomatie.gouv.fr
apk.diplomatie.gouv.fr
stendhal.diplomatie.gouv.fr
pastel.diplomatie.gouv.fr
apps.diplomatie.gouv.fr
blog.diplomatie.gouv.fr
escano.mad.diplomatie.gouv.fr

Certificate

The complete raw certificate details for santiano.mad.rad.diplomatie.gouv.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 145186393031868594305243101059279372422
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'santiano.mad.rad.diplomatie.gouv.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 861590189903708718041362600715660878076088765215471054967833689505427476807770896394863537846424895718143514811382279296477488533980573721083985878342207515178108035731882271928372454123389753710963166723121195952526782978068723964725495333854088669475346426862405450832489588088893066389323563970475004016950033959916775125126556808730804597917192451254891362245292796153643147934272198476114439217328549076130398944912927536143955265385752342904577535436677526758771302483358607998633377269913666295675393834692780428486378182383350736379964769119919857813170872885106743574965229216150173693309052691615468476523198157112549778336343373062120301147976460767476710527483853569369559534053408580764439814794833110939379373626198078244241684382469881459117007123578148172392068248115753614133254232896774458824615500796659679406828495963832095233394244353587290719732822998979719751683461957603833172052170450440456741655569806154692627462990754028880800061549641811925068381143031786989552231129207188904576825341861618309108630174565894204897491136187908010253830651010773324933198904069611979197998605489686768158285535843639407348004718296155372218059506258609183802278434337589842743254146727296075498246483207722472635038251749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b390a7d8c9af4ecd613c9f7cad5d7f41fd6930ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a6593983fe0d0236131cf2c446d629c0a3239e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GandiStandardSSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GandiStandardSSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santiano.mad.rad.diplomatie.gouv.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santiano.mad.rad.diplomatie.gouv.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000177b7ebeb58000004030047304502202a6602d8afe3cb3560448f83d00610a76eb052889e80425bf32187963f1db928022100bb29404586fcda112a342b1a8093fdccc9c196bfdc8472124befb991d429d8e4007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000177b7ebecb00000040300483046022100b7c47d22d52685761eb061adfc34b49daa9bf8129541821d6b63bb74cd3896a0022100bac5f14d5ee149fe23cf3a3cbaafa7787cb64ce5c617b43b3fc1ce53c4c468d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0003b38faa5e22d73de8fa8ee9b3c7f6f50416a9b8158e4f245e3dd298bdcc880f1d7536bc23138c9ee2dd6bb5b9df877b8a175598ea61396e28c28ab8fc16dd1d11fef1b91647432a29d97843ea6d7caf5acea84ae806ca5de1afaa3763c41d46a50d1510689c9a8f239c1fae4d1aa4341861b9220993a924d000b2cae68066b5f27384abd85b1865fd4a99ae29ccb8f703b1eed55fbf8e9693a49c716edd3e658168131131ac55bf2daada8884b1cb02b1a673dc56ef0566239464dcce5e1ef6fb4540c45a112ec06d7c74d1dadbe34921578f4f4d3328f4467175fbc9f592c3bc4493cd0e40bffd0860534436ce0a2e0be3c4f9b358449c4f2e56c6fddf4cc1