gitlab.intra.s-pankki.fi

- S-Pankki Oy -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:60:42:52:3b:89:15:12:62:aa:3c:cc:cb:7d:39:1b was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

S-Pankki Oy

Organization: S-Pankki Oy
Locality: Helsinki
Country: FI

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:60:42:52:3b:89:15:12:62:aa:3c:cc:cb:7d:39:1b
Serial Number (int): 16450541602006839032701934213219039515
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 08:14:17:5a:c3:06:4d:cc:ad:7f:fc:32:c3:1b:25:15:37:3d:f9:33
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): de:c9:86:ca:bc:62:e7:3c:48:6c:ba:0d:6d:f4:f7:1c:be:dc:80:d9
Fingerprint (sha256): 23:03:ef:af:d6:52:c8:dc:b8:f8:d9:23:04:23:bd:e4:96:bd:db:a6:03:c5:d1:b0:93:7a:33:eb:4e:47:3e:6b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate gitlab.intra.s-pankki.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gitlab.intra.s-pankki.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gitlab.intra.s-pankki.fi
registry.gitlab.intra.s-pankki.fi

Other certificates including the domain name s-pankki.fi

(limited to 100 certificates)
bi-test.intra.s-pankki.fi
test.partner.api.s-pankki.fi
hakemukset.s-pankki.fi
dokumentit.s-pankki.fi
mapvi-test2.intra.s-pankki.fi
mobile.s-pankki.fi
*.stage.inet.s-pankki.fi
asko-em.test.intra.s-pankki.fi
view.email.s-pankki.fi
chat.inet.s-pankki.fi
aml.intra.s-pankki.fi
tunnistus.s-pankki.fi
openbanking.s-pankki.fi
chat-stg1.stage.inet.s-pankki.fi
asko2-em-int.intra.s-pankki.fi
ajanvaraus-test.intra.s-pankki.fi
splunk-collector-test.intra.s-pankki.fi
api.s-pankki.fi
asko2-em.test.intra.s-pankki.fi
www.s-pankki.fi
cloud.email.s-pankki.fi
ajanvaraus.s-pankki.fi
chat.inet.s-pankki.fi
isku.intra.s-pankki.fi
toimitilat-uutiskirje.s-pankki.fi
stageonline.s-pankki.fi
view.email.s-pankki.fi
test.public.api.s-pankki.fi
toimitilat-uutiskirje.s-pankki.fi
smobiiliwns.s-pankki.fi
isku-test.intra.s-pankki.fi
dps.intra.s-pankki.fi
test2.dokumentit.intra.s-pankki.fi
frontend.intra.s-pankki.fi
prod.api.intra.s-pankki.fi
toimitilat-uutiskirje.s-pankki.fi
click.email.s-pankki.fi
sokrhg1001.sed.intra.s-pankki.fi
pft.s-pankki.fi
cloud.email.s-pankki.fi
asko-em.intra.s-pankki.fi
jira.intra.s-pankki.fi
online.s-pankki.fi
toimitilat-uutiskirje.s-pankki.fi
test.azure-pompeli.intra.s-pankki.fi
partner.api.s-pankki.fi
sokrhg1002.sed.intra.s-pankki.fi
hakemukset.s-pankki.fi
test.partner.api.s-pankki.fi
online.s-pankki.fi
online.s-pankki.fi
bi.intra.s-pankki.fi
cassiopae.intra.s-pankki.fi
dokumentit.s-pankki.fi
mobile.s-pankki.fi
ajanvaraus2.intra.s-pankki.fi
www.s-pankki.fi
stageonline.s-pankki.fi
taviq.intra.s-pankki.fi
stagepft.s-pankki.fi
api.s-pankki.fi
analytics.s-pankki.fi
splunk.intra.s-pankki.fi
dokumentit.s-pankki.fi
splunk-collector-test.intra.s-pankki.fi
asko-em.intra.s-pankki.fi
palvelut-test.s-pankki.fi
tunnistus.s-pankki.fi
holvi.intra.s-pankki.fi
test.api.intra.s-pankki.fi
mobile.s-pankki.fi
splunk.intra.s-pankki.fi
dps.intra.s-pankki.fi
test.partner.api.s-pankki.fi
gitlab.intra.s-pankki.fi
asko2-em-cf.intra.s-pankki.fi
sokrhg1001.sed.intra.s-pankki.fi
nexus-test.intra.s-pankki.fi
click.email.s-pankki.fi
dokumentit2.s-pankki.fi
pft.s-pankki.fi
extranet.s-pankki.fi
mapvi2.intra.s-pankki.fi
jenkins-test.intra.s-pankki.fi
pft.s-pankki.fi
splunk-collector-test.intra.s-pankki.fi
gitlab-test.intra.s-pankki.fi
analytics.s-pankki.fi
asko-em.test.intra.s-pankki.fi
verkkopankki-admin.intra.s-pankki.fi
jenkins-test.intra.s-pankki.fi
*.inet.s-pankki.fi
partner.api.s-pankki.fi
testrail-test.intra.s-pankki.fi
splunk-collector-test.intra.s-pankki.fi
bi-tuotanto.intra.s-pankki.fi
cloud.email.s-pankki.fi
gitlab.intra.s-pankki.fi
online.s-pankki.fi
ajanvaraustest.s-pankki.fi

Certificate

The complete raw certificate details for gitlab.intra.s-pankki.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+44uLeJhBHrcHihhIUe
SuNUjsFhZ2/O3/rxK4KDZe577/QOy7S8frMawp4XZIb5ESJcwU4ukmgBeCgOglrJ
IBhg0k2um9+rFwmHFZmsVIG7DOpeXM0vO14AnEiEHl4B0Sm/aEETJIkCknUEImPi
0uJV9f5KFv1Tnp4I/mQ9gAo0FzB0Q/3X3U4cop3jCMkHBe12OxGRlRooq5V4kxsn
KhAV7zL1q+Xf/84c0H5wOSe01EUb5OEWJRq+b961/gSt6m4ewyXO+8IxFrYCb91l
crOzCa4UdCmpd5ovzBDx/qtSGFgukIZ34FRnh07jRqmKzwMcyRDS8MSM/T+Woh4y
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16450541602006839032701934213219039515
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'S-Pankki Oy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitlab.intra.s-pankki.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21704221582871700793544880525585808127477426826665064476184155029159749127192185306155462806531098957293514934147137624573802200496177125961769589319314571160307168040258559853115071063160187481212232672173871872180540057108476043553197580692407601692403600829673600366750190087922728964168357216191849347953115051378400643016751907172435129652620541797784253916442367323132299051363925038465246218458773780090539401376366474396412511338923504311203763978782296218461182016800296983627587308460460507060929516244206791863264812367648273653073323857408818708414386243278593475745400956648936343584054878403621132579457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0814175ac3064dccad7ffc32c31b2515373df933
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitlab.intra.s-pankki.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.gitlab.intra.s-pankki.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00391c468a130f8b92f671f481f9e865354a073ffe84247b027ba7d341fcc57ce2375efe6f24b1b34788fa3e0f2dfd0deeba78d358de85805f2dd39d21da98891b405b216dd3d6ec538e467c427793b3a0bcb9bf873463d8987063ea72d21446d91360bc6650602265acd06c39bd22be08319731347ec6b4cf17505ec1b429c4f39ee3a01d88f4ca197ab5535b312f2c6702272262982d8396b11b742d6a9284a728596390db7d0ea2fc97ac709ac78d436ee968130ff5aed69e7218c5947c7213c6bc66661acc7e643dc3efe5230ece93e07e048847260ead898b2a7a3c8f86bdf5fe937945af5377e4d05c11ad9eba01b2e421a37ec8fb77ea99f108cb066f98