lu312004.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 38:e3:92:bd:ef:1f:d0:06:4a:12:e2:fd:d7:ba:21:79:9f:22:d4:d7 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lu312004.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 38:e3:92:bd:ef:1f:d0:06:4a:12:e2:fd:d7:ba:21:79:9f:22:d4:d7
Serial Number (int): 324778535351165521298265398114163553836376184023
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: d5:e6:9b:a3:e7:9c:f6:e9:f4:0d:75:f7:96:84:8f:db:7e:fb:bb:17
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): b3:c1:fb:be:a9:4e:b6:78:25:ec:bd:ab:8c:89:68:32:5e:5c:54:ec
Fingerprint (sha256): 1e:76:30:ce:0a:80:d0:e4:75:74:35:5c:85:85:3c:47:26:9f:5c:3f:ee:ca:e3:4c:cd:1f:bb:51:1f:bb:c3:58

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate lu312004.lucorp.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lu312004.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lu312004.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for lu312004.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx6gMQ68qv5bUOp2EgP8t
WIK790dhqLpv+TxWXCU4kLYUY2PRJ8QHZYQx5dh+i1dWr4w/zMs5kyxjhNMKTFLd
DPV+oM2ZaiF9ueyfZX2dHBBiVGI1qiXFmRBIP3eA+LqzTCyBYiksEk5DnUG4tUgh
n9ladz45LhkMFH9C+fkswlQdaT3fkP6ZKEOdTORFIUmlevhjT/7wOvtuk0sNWUia
J2GWnQyszHHypA8cjmHmINqJBGJd3mAY1PeIt/FXawrIJCyOaTiNIjxfM8Pmx4Be
z9J803BBnPR3x57WQV7zm+LMr5qbRR7xc/OoInhDwzdRG36kuMfvIapImpYJthSp
i8BPYGEPejh2wLvBzI811rv1T4+mRaWxo010wkesERtvNxobQLgpKDDtWH6EyyoW
efPOMbSpHEzk9PZ63L+we///TbvM84bOAyPhS/zXKNwGII9FiswkyW8+3lMasNMp
/K1KW4qtFhFGUvfIvgn1nOsrHq1vs2DVOeZ2YFyr6kOSqArhRGncFKc7flDVlqAI
81cu9EmYJ7niiBlm52KuHysgEkh0D+pNYCrTRvQ9emkgB+ITiu436C5ZrBEJW/EA
S/69R8hyyVVNw98gzU3X/hjrwY+HMREJQ4hlrLtvACZlNB6flbYDnZs84SjJutCU
8xcuQhw6HZfVvmSs6/H/SrsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324778535351165521298265398114163553836376184023
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 16:03:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-27 16:03:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lu312004.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814527199419272353902572212781510963442468240850155026144365642435073222264890751279367164144988931007177962149616492284351378987061268636153751210000686933080026662723128400944100234424490054418963719889335809256690062425292879518880435111073161501045435360687803428592390346239517740150930016738177350689828612022391379383149942768092081948773612495570093889630527970596005011433836136426101567891219229364974744800257135558314468383745041671277462625480188776056573822225887213547711978433279001218911302276132005718154901181711072039239782090153794827704485450432191989222792869564529517535723136068178165430155823036005450074386903808175744384918719731986339003251108463086697864273519175617101931710123789836654623286333160876792132294108468319818797853820926817914597283113180799832063722859026688701512178346273554829204727611652294704786585874422452081610536650432052854687442568867607658115785405961384567257525844776571684652928401114703673002890994515478314982365491364388319108174209246684347614616652735606961069356177843310258171379999650726527248382505446841822169496037600855640080203435980006532976512914929323058939946191791275403427690809015430329553915893865912821031413522998096529211554015968577032923861961403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lu312004.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5e69ba3e79cf6e9f40d75f796848fdb7efbbb17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		004897531b5edf48f61971ce6e07520aa13e9a8d02ab992f56173eda27fbc451207b787dc17f94b7fd82fa0d793f8e9bbbad6b2c10a6acb2a7fb7567601aa1f271400a2f542ef789f8005623d976e756efbe9bd4c837025b66166bacbb8c79ddf7e6dd1bff163a440061b49ad3e91a80282151b1562f64e9052bf3cd1887e7ab101105577c096b0cee20bfc651d8b2821d5a36d4f27992e859bcf98b8e99a8b9654b18a9f40b65d1b0fff431cd54583009756ee22d25158b4312068280d23443277b8635e48a56b2d3cc957b8c12c2ea562dbc6e562985e31820fa45dd60d492eb5752eb56c3975536b9213522b943f8add1108b8862ae39570878f539ce692cfb90917761f8c72a7d68c8798b58550c8f037bebe1513cf335ecf134b8c4e04eb0432415c187d4f7729e983c9b4c926be8c8948620b22ad0a7ee3ee1e761c39219ce8abcadc3ae88c2bc3e204d3f67704b68addda942bc4ed7b21db2d05b1659e14e2a86ad082e4be64a6960c82f65d29578a030ac1046b88f6a0198ed3e43f62678e6caed61b630a1a44a51a35fb74fe4ac52e9ff005b3283b6c5313d93bd5e4ce977d1cd0f4e6fa53055f4c70ef90954f4c84e328a2762f5d26dac6c8e42ecb28639d4ebaa6883af49975d883bc389d42f4e144e9061f4820a6ec0eda1b6bf88a088bc7f239e20412537d98e35ca1d3ce4c089e5afacf048c6487955715977e8