eservices.cma-cgm.com

- CMA CGM S.A. -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0f:8e:1d:18:3f:73:79:34:4f:45:78:c9:fe:14:1e:20 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CMA CGM S.A.

Organization: CMA CGM S.A.
State / Province: Provence-Alpes-Côte d'Azur
Locality: Marseille
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:8e:1d:18:3f:73:79:34:4f:45:78:c9:fe:14:1e:20
Serial Number (int): 20676316201677244316882478354352315936
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 96:56:d7:19:c4:20:1f:be:dd:b6:9a:b6:65:2d:25:32:1a:21:c5:fc
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 1f:8c:5d:38:dd:86:3f:b6:5f:b2:32:57:e0:5c:22:11:d9:c8:23:d9
Fingerprint (sha256): 22:45:e9:f6:3d:df:ae:cb:59:ec:1b:1a:15:d2:3b:59:83:26:e4:2f:6f:67:7b:8e:bf:45:ca:d2:29:eb:12:ba

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate eservices.cma-cgm.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eservices.cma-cgm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eservices.cma-cgm.com

Other certificates including the domain name cma-cgm.com

(limited to 100 certificates)
eye.cybersecurity.cma-cgm.com
cdrsharepoint.cma-cgm.com
www.quantil.com
departments.mira-ng.cma-cgm.com
mrs-vs-00588.cma-cgm.com
inlandtariffs.cma-cgm.com
cart.cma-cgm.com
*.quantil.com
brsaoccw-vepe01.america.cma-cgm.com
dcs.cma-cgm.com
www.quantil.com
www.cma-cgm.com
LINES.MIRA-NG.CMA-CGM.COM
teamsite.cma-cgm.com
*.cma-cgm.com
mta.survey.cma-cgm.com
lisa.m.cma-cgm.com
sapdatamig.cma-cgm.com
mail.usa.cma-cgm.com
stackingperiod-id.cma-cgm.com
lyncpool.im.cma-cgm.com
join.cma-cgm.com
edi-ac-uat.ws.cma-cgm.com
LINESERVICES.CMA-CGM.COM
ecampus.cma-cgm.com
www.apl.com
realestate.cma-cgm.com
*.usa.cma-cgm.com
lines.mira-ng.cma-cgm.com
tsg-app-pre.cma-cgm.com
laragrm.cma-cgm.com
www.quantil.com
projets-fondation.cma-cgm.com
cme.cma-cgm.com
teamsite.cma-cgm.com
digital-services-apis.cma-cgm.com
laragrm.cma-cgm.com
edi-ac-pre.ws.cma-cgm.com
eservices.cma-cgm.com
cma-cgm.com
extid.cma-cgm.com
hybrid1.cma-cgm.com
agency.cma-cgm.com
cmamail.cma-cgm.com
apps.asia.cma-cgm.com
www-orig.anl.com.sg
tsg-app-prd.cma-cgm.com
eye.news.cma-cgm.com
www.cma-cgm.com
C-ME.CMA-CGM.COM
wac2013.cma-cgm.com
freddie.cma-cgm.com
auth-pre.cma-cgm.com
CMAHK-EE.asia.cma-cgm.com
www.quantil.com
www.quantil.com
www.quantil.com
beta.cma-cgm.com
signing-auth.cma-cgm.com
c-me.cma-cgm.com
demadminrh.cma-cgm.com
cdrsharepoint.cma-cgm.com
jobme.cma-cgm.com
ebusiness.cma-cgm.com
*.cma-cgm.com
cmaid.cma-cgm.com
lineservices.cma-cgm.com
eservices.cma-cgm.com
www.quantil.com
signing-auth-pre.cma-cgm.com
dcs.cma-cgm.com
usorfccw-snm002.usa.cma-cgm.com
csg02.cma-cgm.com
ext-tw.cma-cgm.com
tsg-euroinfo-saa-uat.cma-cgm.com
*.usa.cma-cgm.com
cmaedi.cma-cgm.com
vegapps.cma-cgm.com
www.quantil.com
projets-fondation.cma-cgm.com
mira-group.cma-cgm.com
others.mira-ng.cma-cgm.com
realestate.cma-cgm.com
shiptracking.cma-cgm.com
camp.cma-cgm.com
www.cma-cgm.com
bna-sv-cucc1.usa.cma-cgm.com
realestate-test.cma-cgm.com
tariff.apl.com
mtl-webmail.usa.cma-cgm.com
camp.cma-cgm.com
lisa-uat.m.cma-cgm.com
imars.cma-cgm.com
hybrid1.cma-cgm.com
tsg-euroinfo-saa-pre.cma-cgm.com
auth.cma-cgm.com
www.quantil.com
shiptracking.cma-cgm.com
join.cma-cgm.com
demadminrh.cma-cgm.com

Certificate

The complete raw certificate details for eservices.cma-cgm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaewnr0kJzwjBPlmy50N
Pvcazd/hz8NJ0E49NdCyVrKxIOhLfnQp+BFtSB0yLzMzD5NYfepyd1MxKt8C9XEs
Uuv78umxrUQaV6khxfWinV/tgb1E4lPBgzr32liAapVuVlP3DuuK6mMb4dBD+w2h
qp2gVfBo8zeNTzJz3DvWX71gVFIyao3QVVLO13GDDtjxkOWSISkc4RtQavfaGGNN
zmjE74QJy6SwrLScWyqRXi4yo0hAaYFeL/kKZl8quZEtZfvdHG17dwF7V8ELieHU
v9J774oqgXS3buTwYoxULA95dZ8WFfyV/Ii848N4/sAVAc6UaJKAwXbFV/xkuuu4
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20676316201677244316882478354352315936
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-30 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Provence-Alpes-Côte d'Azur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Marseille'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CMA CGM S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eservices.cma-cgm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25456590280731171977760088222234654040845073216384046823314861011770776270779870279118101229608399252569390734187851900982137503342027036580940869993278255943642201691358140772947416297634467261555216809009625613187948576123599217599148194599114358034068993018791090632247740088322416505963305807539173405339798797981230175527460183502794433730115125758912831840899630001416242469414723040402091808103756802572781002785208450809810516832576767862140069198481633739845127991556730699412118571059259002430452449878264995444406464797561698206731264940703473005188683909116042177549210986824507216050670551887001758185723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9656d719c4201fbeddb69ab6652d25321a21c5fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices.cma-cgm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008513ddd3da5df71bf361ec9e5f0910c087f97f23f5e65dc24a27db892127d4e1bd03df323a6a2988658bb8bab900e354988cc53e40713ab7c6510ca0baaf4704dde5c09caa7b5e15ba872481a8103eb732b2b68e05c2bd1616e55014003b04726d2376be2fbf5971aff8bf0c80033ae358baed33822b6df2578e6c4223a59c2c1301bd67cf08e71508d89792632d623c954a585e4ea1d92f3b8c3feb274926a40cc7be5bedb6ffd7c02b9c50f6076b7f789691db6f1c3bf82323223e6826626d7a838ff336488926325d2cb1153139dc46c93255aeb10dda302987002a16ff8aa29a93543b1d00ba80be49d99048e334cde55f0c1c0f51bc4596d3b42f2c5db7