www-cadarache.cea.fr

- COMMISSARIAT A L'ENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVES -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 8e:a1:72:28:f4:16:0e:2b:ff:b8:f4:3b:59:58:3b:bf was issued on by GEANT Vereniging.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

COMMISSARIAT A L'ENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVES

Organization: COMMISSARIAT A L'ENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVES
State / Province: Paris
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 8e:a1:72:28:f4:16:0e:2b:ff:b8:f4:3b:59:58:3b:bf
Serial Number (int): 189588650635044483750743066563577396159
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 01:7f:c4:b7:3b:7f:a9:44:3d:0d:6f:d8:a5:4c:2d:fc:30:1f:4c:26
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 1a:c2:68:d6:c3:cc:f7:36:5b:b1:1d:73:06:09:58:25:db:cf:23:f0
Fingerprint (sha256): 1f:27:a4:a0:49:60:9b:4f:ab:64:61:43:f2:98:cd:2e:d1:57:0a:a4:a9:5f:95:f1:2f:1f:80:59:96:bb:6c:f2

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www-cadarache.cea.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www-cadarache.cea.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www-cadarache.cea.fr

Other certificates including the domain name cea.fr

(limited to 100 certificates)
joliot.cea.fr
projet-si-map.cea.fr
projet-sip.cea.fr
drf-internet.extra.cea.fr
p-shfj-gera-bdd.partenaires.cea.fr
sogreen-project.cea.fr
veille-dem.cea.fr
compta-dev.admin.ccc.cea.fr
lha-dmt2.cea.fr
projet-thermacem.cea.fr
infos-salaries.cea.fr
www-centre-saclay.cea.fr
agueil.eole.ccc.cea.fr
naiades-project.cea.fr
maintenance-digiteo.cea.fr
irig.cea.fr
q4-hilumi.cea.fr
www.mobilite-interne.cea.fr
afh.cea.fr
ged-extra-sacm.cea.fr
eu-aims.cea.fr
vpn.cea.fr
drf-upsac.cea.fr
hg2epx.cea.fr
vpn.cea.fr
projet-li2cem.cea.fr
montchretien02.admin.ccc.cea.fr
www.theses-postdocs.cea.fr
baudelaire02.admin.ccc.cea.fr
sarmenti-proposal-project.cea.fr
letsense.cea.fr
qflag.cea.fr
vpn.cea.fr
cirse-smtp-out.extra.cea.fr
talk3.extra.cea.fr
afh.cea.fr
events-list.partenaires.cea.fr
lotus.cea.fr
activage-intervention.cea.fr
communaute-lacrs.cea.fr
www-plat4m.cea.fr
anastasia2-project.cea.fr
instn.cea.fr
modsecaero.cea.fr
talents.cea.fr
e-i2ir-test.cea.fr
www-ged-demeterres.cea.fr
herschel-project.cea.fr
wiki.admin.ccc.cea.fr
bioproj.cea.fr
madmax.cea.fr
partage-dpad.cea.fr
chat.admin.ccc.cea.fr
gopv-project.cea.fr
www.emploi.cea.fr
webmail-e.cea.fr
transmil-project.cea.fr
integral-project.cea.fr
projet-li2cem.cea.fr
webmail-ext.qualif.cea.fr
sfcg-nuvia.cea.fr
spica-b-bop.cea.fr
rapport-scientifique-leti.cea.fr
projet-optifroid.cea.fr
integral-project.cea.fr
p-i2ipp-racine-collab.qualif-p.cea.fr
bts-frama-c.cea.fr
datadrf.cea.fr
webconfgre.cea.fr
p-i2i-test.partenaires.cea.fr
imagen2.cea.fr
garbin.eole.ccc.cea.fr
modsecaero.cea.fr
nectarcam-irfu.cea.fr
eu-aims.cea.fr
projet-labo-commun-masen.cea.fr
jobs.eurotalents.cea.fr
gouvernance-ca.cea.fr
www-cad.cea.fr
these-is.cea.fr
projet-entech-se.cea.fr
p-i2i-personnes.partenaires.cea.fr
www-leti.cea.fr
qgp-admin.cea.fr
solhyshare-project.cea.fr
compta-rct.admin.ccc.cea.fr
codev-tuleap.cea.fr
jacob.cea.fr
www-fr.ccc.cea.fr
projet-altess.cea.fr
i-id.cea.fr
farou.eole.ccc.cea.fr
com-mar-collab.cea.fr
projet-comepos.cea.fr
cbrn.partenaires.cea.fr
www-cadarache.cea.fr
oaasis.cea.fr
s2lam.cea.fr
www-dmt-rm2-far.cea.fr
phoenix.cea.fr

Certificate

The complete raw certificate details for www-cadarache.cea.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2OmvUU+ujfUn2MMvbt/
C/zPbPXKWYE3dZTVXJ5NHVgkVVEQpIUJzm8UN/QUydJYe+eryoxizOEwLPVlDWlK
qfQulY//kUpUkewLVJh8yoEDTgw3kD1CGRn7M2Hzzrn/ni/vZ0wE8BnZlnwV3+HV
UaDrZnPvIwpOw+yRes3wrrBiDW01O0GIEX/o6i7E817ZobuK23V+avn5DBJyxcPs
Grirb5+8v1cOJDyPB2dpcbp6SLvtcSYkT5zjVEDgWp/EEd+2UsWZeMr2ZLPgpWJS
kDQtebaDm6HlDM2kfm3u1hO3P9bBveAU2b7zJNss6FN3NcrlbhFefGYHyFrM+Jlw
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 189588650635044483750743066563577396159
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMMISSARIAT A L'ENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-cadarache.cea.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25170562588337837190564137772878014301555923592385461092269438610754346816741524869382545193224885395572248801677388537586574377922696839700460278101258796812558234456638585691038806541370559021003721250303033435347872614268616017859940963493977087487011344078766139926798473452446457742039462958213373770169883512965433391876047676343744190647831637385162435163715109751644522947378120072440697179567999823564668012067866119948449728983700036899888134308666853025919158411642627298533660855809711937815906386304218447120656420483084770226160850521057701587140095330675904185143339972062318596117728431214388777152553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							017fc4b73b7fa9443d0d6fd8a54c2dfc301f4c26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000188e077e171000004030046304402207862b3e46cbd3f43817bb7072b09e8b6e3b767302ceb36b39505520d90ea161e0220061bfe626a6785e869acfbee1bfced0e29d0ee445327a45b565b3c01c35c83dc007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000188e077e1e90000040300483046022100dfae427602108fb1d0d96a453c0048d8c7031099b55de98739c109844a2e4e6b0221009671e2c394d0b95802f8f3fd8fd29ac9fc050f61f0beff782963d7b069cfeede007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000188e077e19e00000403004730450220521f1f137d48df17e7791464514227b6c8d71f883ba033d9577c10e83108d6c80221008e25ebc798833823668b61f97dfaf2d52a3bed4077e4b362571fb4ea37045b40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cadarache.cea.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		001cd7c33b16d3a19a615082670fea0d91b174990a1b1eff59cec6f6f74233e5a2409de104849dee1178dcda849e91f5f694a5be491d087140130b13b56c509ea611c75d2cf8889d6b462f84ebe1685b51e76bcbb74e211d8a69fa7437b7b7dba1ec87a234a4abfa79368e649f862c7040297e97d43daf0054198efa4c2703f2af7882cebb86efdf1ab1fbc53dbfb443c439cc0fc14e8462ea42c908cb481c0579467532465be576f91eb59c99651dcadc18b7559955fdfa3de000875dca67ce46b46201b026080f3080e9a2777ff1142a3184effda063598d681c2bcea836a35a80a3d2cb8c265b91e5ba52199a37ecd5c9f4733d0c55683178f208b424cb2d99c1e2b5e2c85bc4d67ba9e760d76dcdd4b850f4b371bc388a01425bf6a3c0edd814a4789166fa164c8aa7b10860c471cb88fab4c9daff915b3aad9f1d77c0248850aaba232caf8e4d615e0a2431bbe87ffce84d3d622945a3364052aab854cf0c7184cb89e8b2f2abc913cd77cf214fdc02c1ee61fa72c3f38bee2ed7cf52dc68b27066a86a21b20c534a92e5181e0e1c21b3a3398d5eb521d365f0e268d09a820e9aa3c05180323f33a3b2bd4849e897baf5d6b5eb7041475671e0d6f392de5530c853da61890eafc8bf74693b5108f615b4eea418b7e9c91f2f35321a1bb398e487880554f7edf739457c81430c540da279395e7d57beb409fcc93334c1701d