project.ifak.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:81:10:c2:8d:26:62:bf:b4:2b:13:42:4f:78:62:e0:63:ca was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=project.ifak.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:81:10:c2:8d:26:62:bf:b4:2b:13:42:4f:78:62:e0:63:ca
Serial Number (int): 305255560944465901714215596182292245013450
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6b:8a:35:16:ed:92:5d:0e:3e:3c:ac:61:f8:71:01:18:05:38:ea:79
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1b:f3:15:0b:3d:1f:c4:03:b1:dd:c5:44:b3:43:7b:4f:ee:79:17:4b
Fingerprint (sha256): 21:28:3e:34:8e:f3:25:36:f9:5f:87:ff:6c:3b:7f:ba:6f:60:b9:ce:c8:19:55:da:4b:38:d3:0f:49:bb:28:cf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate project.ifak.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for project.ifak.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

project.ifak.eu

Other certificates including the domain name ifak.eu

(limited to 100 certificates)
service.ifak.eu
ifak.eu
www.ifak-ts.com
project.ifak.eu
simba.ifak.eu
project.ifak.eu
exchange.ifak.eu
exchange.ifak.eu
project.ifak.eu
ifak.eu
project.ifak.eu
mx.ifak.eu
exchange.ifak.eu
ifak.eu
zebra.ifak.eu
www.ifak-ts.com
nextcloud.ifak.eu
zebra.ifak.eu
fw01.ifak.eu
service.ifak.eu
fast.ifak.eu
project.ifak.eu
project.ifak.eu
service.ifak.eu
exchange.ifak.eu
zebra.ifak.eu
exchange.ifak.eu
nextcloud.ifak.eu
service.ifak.eu
service.ifak.eu
mail.ifak.eu
www.ifak.eu
www.ifak.eu
nextcloud.ifak.eu
project.ifak.eu
nextcloud.ifak.eu
ifak.eu
fw01.ifak.eu
project.ifak.eu
mail.ifak.eu
mx.ifak.eu
project.ifak.eu
www.ifak.eu
ifak.eu
nextcloud.ifak.eu
zebra.ifak.eu
project.ifak.eu
nextcloud.ifak.eu
ifak.eu
ifak.eu
ifak.eu
nextcloud.ifak.eu
nextcloud.ifak.eu
zebra.ifak.eu
project.ifak.eu
project.ifak.eu
zebra.ifak.eu
www.ifak-ts.com
www.ifak-ts.com
mx.ifak.eu
service.ifak.eu
zebra.ifak.eu
project.ifak.eu
www.ifak-ts.com
zebra.ifak.eu
exchange.ifak.eu
service.ifak.eu
service.ifak.eu
project.ifak.eu
nextcloud.ifak.eu
ifak.eu
nextcloud.ifak.eu
zebra.ifak.eu
service.ifak.eu
ifak.eu
project.ifak.eu
nextcloud.ifak.eu
ifak.eu
service.ifak.eu
www.ifak-ts.com
service.ifak.eu
ifak.eu
ifak.eu
nextcloud.ifak.eu
zebra.ifak.eu
project.ifak.eu
mx.ifak.eu
www.ifak-ts.com
www.ifak-ts.com
www.ifak.eu
ifak.eu
project.ifak.eu
project.ifak.eu
ifak.eu
www.ifak-ts.com
service.ifak.eu
*.ifak.eu
www.ifak.eu
project.ifak.eu
zebra.ifak.eu

Certificate

The complete raw certificate details for project.ifak.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVjCCBT6gAwIBAgISA4EQwo0mYr+0KxNCT3hi4GPKMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMjQwNDQ3MjRaFw0x
OTA1MjUwNDQ3MjRaMBoxGDAWBgNVBAMTD3Byb2plY3QuaWZhay5ldTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBALl17hipNifpGQR38ahDSAelwJ6paEKP
IVvanGRdk2Jc7Du3T9gjW5pZtpjHwF7Vy3fLWAmQWy5XipiqRKxDVvawbnhfxd1Y
C4b0fdSYcywchKRuU6KJlfTtQxg4eW5Qj28SyI7zkJgohkJaN8nAzNk9gZn6c/kB
B5dbZ//3vUyddQeKKB5zpYp7JW22zDsmf2eNI2PSfpImGdBApYeVdriUj3PaDws6
oeB8Zpi8k84pfaZy5jY1GIqnIemOEto32R4YhOpy6MdxQcsALl3bFZ/aymx1u6IW
zX+4KGDcwBFp81t3K+i41wOloKNkyT+QeV8U/O0nmwp2GTzKBHiahhNMtYte3dxH
St6HDKbt46sf/TE0j9bRD8nfC9hMK8vL1GRxeZrCaDKi4AOxPBPHNEejAm/Haowm
vmPfmj2TE7HMAUUp94ffA3iZJZsCBhi+AtXQgLPSADkLHAgu13UZ6s40QW2S0iOa
P+nBoT37YtTrefy+DJ3XaY+/dz1e77tGCKN4Ij3wTDv6IWEDIXP/W+q6YD9vcMf/
ebriOa5m3Z874TwIy1nd0czJ+rwDxtNL7eu8R1ZP/fblmaMdGRQlO6D1dpzkv6EI
XoGoz8Dbf7lARZUiW+uoQ2D5USWvzj+jwhIwqBrNEh1tbp61CNE2p2238ZwEFOSu
yWc8S0VyNQdZAgMBAAGjggJkMIICYDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGuK
NRbtkl0OPjysYfhxARgFOOp5MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPcHJvamVjdC5pZmFrLmV1
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB
9QSB8gDwAHYAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFpHgsy
1QAABAMARzBFAiEAhjwqaWcwTf5oYLGoSf4BJMSkYFBDZEIY1NIT8C/Y9zQCIAlj
OSYLayTub3cpaAJCO4vfZA86vCpjdQe+AhwNPGrrAHYAKTxRllTIOWW6qlD8WAfU
t2+/WHopctykwwz05UVH9HgAAAFpHgsy1gAABAMARzBFAiB/2Iv+9F8XYANYFMEK
sP1asl4rdvuTeXhAho00XSZlhgIhAJBSaJYzj1Fe22SSO+zSNndCVGqnCKTWfoYN
FuzBQh9QMA0GCSqGSIb3DQEBCwUAA4IBAQB8mCdVmlVluYHiyUC2XGz0DNypb+M0
JMPpbQFGljPDHBAsbCxtzeCvjdhuiU+/ZE+vOpEU5VxdkZ/VhdCvTVeyoCNAhq6Z
YgtOTRhe9lP19lxp/rhH/OT5OV47gYoi+9K/MCkR9Y2EgS9DkI8Dl/HDW42MI92J
ts4A9YGaRdnY4uKF//SKn9PXjpeyLgeqPx5r02Sio7l0+a1ImukZGTcfZc8F8jNk
qg9+2Vl76DGmTts4HQF9wUvZkSkMWFEPmKPWDqnn2zRpUQ1EeoZU2+vXj8MbKM4b
DkuHVDLYaQIOOOraORWrYlohkDrWTXclCYKTjeKDpo24sAmoNO1s3k8i
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305255560944465901714215596182292245013450
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-24 04:47:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 04:47:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'project.ifak.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756613499010323379008383923355445859285124316978449160449781841798627395208162617783537750267150761389820885543956187591876500551311422257301386989243529010390102916970018868168348665005334251833657240149734696848819832832673217152260653314012508072213513845998152935841700467830033315393108515921548205344132165427631272738876616386502421173939485354550482833143634402529684075867294040715896605502788020095833266096522906934719201729830982828120614564585607913996129925437846816856280963551215760395936240922536374045471706359664552929228430088283374150118174967322954273493000018182404137506780800032960816408255605204272973259843691476387582753961398569293888237155673920644879854733176565763227001642129944597426664517023149236867126254108154271868726347866705884073671752979027346967768601569588335845620922681092542956232594802993142421704773197271565735020154470685016499924576997396351576289401499055432803795370985551970667621099506118909540120479385100169528103820716627389956244452996664694617185868245086421038482749919076710727573344325827028073764862637657705631597027070835831739232474833212072975934937540898631911233705948988126745459469183764756453887630383891675563822509306748620950895401563336560527623476021081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b8a3516ed925d0e3e3cac61f87101180538ea79
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project.ifak.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001691e0b32d50000040300473045022100863c2a6967304dfe6860b1a849fe0124c4a4605043644218d4d213f02fd8f7340220096339260b6b24ee6f77296802423b8bdf640f3abc2a637507be021c0d3c6aeb007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001691e0b32d6000004030047304502207fd88bfef45f1760035814c10ab0fd5ab25e2b76fb93797840868d345d26658602210090526896338f515edb64923becd2367742546aa708a4d67e860d16ecc1421f50
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007c9827559a5565b981e2c940b65c6cf40cdca96fe33424c3e96d01469633c31c102c6c2c6dcde0af8dd86e894fbf644faf3a9114e55c5d919fd585d0af4d57b2a0234086ae99620b4e4d185ef653f5f65c69feb847fce4f9395e3b818a22fbd2bf302911f58d84812f43908f0397f1c35b8d8c23dd89b6ce00f5819a45d9d8e2e285fff48a9fd3d78e97b22e07aa3f1e6bd364a2a3b974f9ad489ae91919371f65cf05f23364aa0f7ed9597be831a64edb381d017dc14bd991290c58510f98a3d60ea9e7db3469510d447a8654dbebd78fc31b28ce1b0e4b875432d869020e38eada3915ab625a21903ad64d77250982938de283a68db8b009a834ed6cde4f22