sspr.unibocconi.it

- Università Commerciale Luigi Bocconi -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number b8:67:58:c3:f1:ff:24:58:17:69:5c:e3:1a:14:5a:04 was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Università Commerciale Luigi Bocconi

Organization: Università Commerciale Luigi Bocconi
Organization unit: Technology
State / Province: Lombardia
Country: IT

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): b8:67:58:c3:f1:ff:24:58:17:69:5c:e3:1a:14:5a:04
Serial Number (int): 245114558177284754569722013774458935812
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e5:7e:6e:e9:35:6f:d9:72:d8:cf:88:23:0c:8b:ec:be:7f:20:1c:75
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 59:eb:1b:87:0d:82:6e:ca:5f:1f:20:11:f6:8f:a4:3f:71:37:9e:2c
Fingerprint (sha256): 22:89:4b:dd:70:56:60:05:3e:80:14:24:16:28:71:3e:ae:26:44:a7:c0:3e:91:28:cc:36:47:90:86:74:ce:89

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate sspr.unibocconi.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sspr.unibocconi.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sspr.unibocconi.it

Other certificates including the domain name unibocconi.it

(limited to 100 certificates)
liferay-test.unibocconi.it
app-public.unibocconi.it
mdm.unibocconi.it
www.unibocconi.it
eventi.unibocconi.it
zimbra.unibocconi.it
donaora.unibocconi.it
proc231.unibocconi.it
idgov-dev.unibocconi.it
www.mindlike.de
forms.unibocconi.it
zcm02-srvr.sm.unibocconi.it
paytool.unibocconi.it
virtualoffice.unibocconi.it
val.unibocconi.it
moodle.unibocconi.it
*.unibocconi.it
gradsurvey.unibocconi.it
exrec.unibocconi.it
kaltura.unibocconi.it
ciscovcs-e02.unibocconi.it
bocconigallery.unibocconi.it
mdm01.sm.unibocconi.it
ks3-admiss-test.sm.unibocconi.it
login.unibocconi.it
idp.unibocconi.it
webmail.phd.unibocconi.it
zcm01-srvr.sm.unibocconi.it
paytool.unibocconi.it
mdm01.sm.unibocconi.it
elearning.unibocconi.it
imaps.unibocconi.it
app.unibocconi.it
bsp2030.unibocconi.it
webmail.master.unibocconi.it
zcm01-srvr.sm.unibocconi.it
*.unibocconi.it
imaps.phd.unibocconi.it
val.unibocconi.it
hosting.bluera.com
ciscovcs-e01.unibocconi.it
sspr.unibocconi.it
asso.unibocconi.it
employers-test.unibocconi.it
vpn.unibocconi.it
esse3pa.unibocconi.it
libbook.unibocconi.it
michaelmoyles.ie
www.pb.unibocconi.it
elearning.unibocconi.it
webmail.unibocconi.it
vd.unibocconi.it
donaora.unibocconi.it
mykoriak.com
portalehr-ext.unibocconi.it
badge.unibocconi.it
webmail.master.unibocconi.it
sas.unibocconi.it
cloud.unibocconi.it
apps-srvr.unibocconi.it
*.unibocconi.it
ks3-mobile.unibocconi.it
hr-onlinechallenge.unibocconi.it
bit.unibocconi.it
esse3pa.unibocconi.it
poll.unibocconi.it
www.pb.unibocconi.it
sts.unibocconi.it
www.rassegnastampa.unibocconi.it
ctxweb.unibocconi.it
hosting.bluera.com
www.knowledge.unibocconi.it
www.unibocconi.it
dondena.unibocconi.eu
concepteventtest.unibocconi.it
w20.unibocconi.it
donaora.unibocconi.it
sspr.unibocconi.it
donaora.unibocconi.it
admissions.unibocconi.it
aziende.unibocconi.it
sas.unibocconi.it
admin-blackboard.unibocconi.it
regimefiscale.unibocconi.it
*.unibocconi.it
*.lib.unibocconi.it
employers.unibocconi.it
owa.unibocconi.it
hosting.bluera.com
lib.unibocconi.it
lib.unibocconi.it
giving.unibocconi.it
info.unibocconi.it
ciscovcs-c02.unibocconi.it
b4i.unibocconi.it
exchange.unibocconi.it
idp.unibocconi.it
hosting.bluera.com
wordify.unibocconi.it
pmserver12.unibocconi.it

Certificate

The complete raw certificate details for sspr.unibocconi.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hDCRThIj1O3HRjigUHH
2DZYblrzK+tXpYKQas4ae542SgpTx8CKIsOJF9joCl/F0fgluBOf8VFqJq5ErA93
CtIJnad67S0LJtlRwZcrDT5CHVE8ty6LcXl7y7PI3Mz3rYIvWgayMmVMozOUaiKd
4X7gnnGzxVnQT7dFhBZYtzvREVOSio/WxdjxY/P1GVmqQEBUDBOK8bJ96cFl6gJ5
ycC4RdHvEmY1JefgqL2hQ7Q8cUKBZXMIYSudgEORc48UxuFNDTFUCgFu0k7rKWVK
P3LKxMa8qANuvLJFZsFUVafVZuU8laZLw8v63xtHoVtdJuejcf0But5Evp0aeU0l
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 245114558177284754569722013774458935812
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lombardia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Università Commerciale Luigi Bocconi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sspr.unibocconi.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30557933907955134052169389273279693705207003339121385460055270487975648046590221709577443268849195190171627835338216445894458103766070528993467356389742342741967984501614997284059971177527586291410187187829845774359223505385493638145567784120076431349051164793321107657369825756741356588496293884430875942418487846721335264354631047113767109319991081004598782652449433454037137816225631778081583743616133936655750314262418249808100769197140250734258199262921426038204493171842772934029770766019074363001760144519463472975194102114133883785725901167494016370517505138737643997766020009041540806380031620780838609561059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e57e6ee9356fd972d8cf88230c8becbe7f201c75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sspr.unibocconi.it'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00a3e3d5493265d9fff2923eeb41cde7140dee203d9a17f4f03f6e6c54a0231f2cf56e607ea26be4356428858b2fc4f405503b524d959bda3ffedc737ed3eb77092a12866684dbb9f84575929b2950ba5a3b2d01d9154f445f4ae56116ec3eb36a1d9c3e30ad8d99f4fbac96f09ec823575acdc944d173fa0dca449a741a30989b46ecaf34562bb05bd8b1067959be4b6c4c482e2a306a43d45f731075e6601769744f0169682e1b371ab3eee3190944f635afa03cc0a2579066bf011b193af46b57f4fd49eef61ce476ecfcf4393f42ae1abed7cc71cfe506877a66a22ae738f24ae9a2e11e24d9b92cb3ae92edd00921281a10324fd531c21e4c86d4e8643f81e4e1cb12e2bf061f70528ab60ad9bf8cb9ba2bc15a79ee5fa8129bd975bfb142a7706652a92b2121cd672352cbf26f20725192ea96bf2ee7fbb94b0e0be4b534484b36ab3f893ff5d9df2077831bcdb9d47148b789541dcc62c0a3277001ccf18ed97f0d71c1b3deadf1c7b97d50091c20a28081bd39a6fecfcaf4ef5c930ad8c53654b611e1155b1f9cf942fde5256109c982cc02d60be3fe105fbb7c699b8fd8a9dd3a68734c4faee248751eea5ef738f3062a7beed346df4b78bf8edf21387ad278656e0596db034c6eb6fb3157de4773b269df2d168fc658ebb9c199f2460481bc03a76e7ae12c9cdde2c804bb34478cf1c9c256c2f6af54e56d306876fb