dealers.aws.wehaa.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:a3:86:a9:58:27:f6:c3:b1:e4:d2:f2:77:35:e1:e6 was issued on by Amazon.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dealers.aws.wehaa.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:a3:86:a9:58:27:f6:c3:b1:e4:d2:f2:77:35:e1:e6
Serial Number (int): 20787495584444263514849258316374598118
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 94:b2:13:d5:b7:9f:65:ad:f7:ec:8a:ae:d6:c2:d8:bd:ff:f9:57:b2
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): c5:a5:0d:bd:3a:83:90:6e:aa:06:53:10:86:18:97:21:38:fd:5f:3b
Fingerprint (sha256): 28:68:e9:d4:7d:8b:70:18:12:fa:45:03:d2:21:78:8c:a7:40:8a:c5:0a:5c:32:88:32:73:24:6e:82:63:b3:d1

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate dealers.aws.wehaa.net

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dealers.aws.wehaa.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dealers.aws.wehaa.net
motors.wadenapj.com
motors.perhamfocus.com
motors.echopress.com
motors.jamestownsun.com
motors.bemidjipioneer.com
autos.orlandosentinel.com
motors.thedickinsonpress.com
motors.duluthnewstribune.com
motors.brainerddispatch.com
motors.inforum.com
motors.superiortelegram.com
motors.pinejournal.com
sentinelautos.com
motors.parkrapidsenterprise.com
motors.mitchellrepublic.com
*.sentinelautos.com
motors.grandforksherald.com
autos.sun-sentinel.com
motors.dl-online.com
motors.postbulletin.com
motors.dglobe.com
motors.wctrib.com

Other certificates including the domain name wehaa.net

(limited to 100 certificates)
autoevents.aws.wehaa.net
wehaa.com
autoevents.aws.wehaa.net
aws.wehaa.net
universe.wehaa.net
autoevents.aws.wehaa.net
rs.aws.wehaa.net
wehaa.com
autoevents.aws.wehaa.net
autoevents.aws.wehaa.net
universe.wehaa.net
aws.wehaa.net
coreapi.aws.wehaa.net
rs.aws.wehaa.net
survey.aws.wehaa.net
rs.aws.wehaa.net
autoevents.aws.wehaa.net
universe.wehaa.net
wehaa.net
wehaa.net
coreapi.aws.wehaa.net
universe.wehaa.net
autoevents.aws.wehaa.net
rs.aws.wehaa.net
rs.aws.wehaa.net
dealers.aws.wehaa.net
rs.aws.wehaa.net
autoevents.aws.wehaa.net
*.aws.wehaa.net
rs.aws.wehaa.net
dealers.aws.wehaa.net
wehaa.com
dealers.aws.wehaa.net
universe.wehaa.net
dealerscore.wehaa.net
autoevents.aws.wehaa.net
wehaa.net
autoevents.aws.wehaa.net
rs.aws.wehaa.net
autoevents.aws.wehaa.net
dealers.aws.wehaa.net
autoevents.aws.wehaa.net
fp-prd.aws.wehaa.net
rs.aws.wehaa.net
universe.wehaa.net
rs.aws.wehaa.net
rs.aws.wehaa.net
dealerscore.wehaa.net
rs.aws.wehaa.net
autoevents.aws.wehaa.net
wcpanel.com
leeautos.aws.wehaa.net
rs.aws.wehaa.net
rs.aws.wehaa.net
autoevents.aws.wehaa.net
autoevents.aws.wehaa.net
survey.aws.wehaa.net
survey.aws.wehaa.net
autoevents.aws.wehaa.net
autoevents.aws.wehaa.net
coreapi.aws.wehaa.net
autoevents.aws.wehaa.net
autoevents.aws.wehaa.net
hawaiiadmin.wehaa.net
leeautos.aws.wehaa.net
dealerscore.wehaa.net
universe.wehaa.net
universe.wehaa.net
autoevents.aws.wehaa.net
carinv.aws.wehaa.net
rs.aws.wehaa.net
universe.wehaa.net
dealerscore.wehaa.net
autoevents.aws.wehaa.net
autoevents.aws.wehaa.net
autoevents.aws.wehaa.net
autoevents.aws.wehaa.net
rs.aws.wehaa.net
autoevents.aws.wehaa.net
autoevents.aws.wehaa.net
autoevents.aws.wehaa.net
furniture.aws.wehaa.net
dealers.aws.wehaa.net
usedca.aws.wehaa.net
leeautos.aws.wehaa.net
autoevents.aws.wehaa.net
dealerscore.wehaa.net
autoevents.aws.wehaa.net
carinv.aws.wehaa.net
wehaa.net
autoevents.aws.wehaa.net
universe.wehaa.net
autoevents.aws.wehaa.net
rs.aws.wehaa.net
campaing.aws.wehaa.net
rs.aws.wehaa.net
*.aws.wehaa.net
universe.wehaa.net
rs.aws.wehaa.net
wehaa.com

Certificate

The complete raw certificate details for dealers.aws.wehaa.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslbHBNGeOm845tTgP23P
4hlS+I4Q/reIc7XtKXT0T3Y2q4lNKnm/e5GMcQpFfDphHHVX6w3vlAbUofd37lRn
YAAhP4A9dAhkNCfqDWEsOEVRugzBvS2TK4sfPwGlWifg57hDRfWO9heHCXK6bsak
aCR9mAQimz1zBilFiUHyyxDy8bfvo1ErKENXNCh7yG2RhiD9PCAsI+5u5+3jgIw7
N7ITzFD7WOsKEHqjuyBav71DKIcbu0REBXFadE0xRyviWaDo9KGAqJlta6iKAed5
zxYu5AWpj1Kqt17sBkPcfKf6c6NDypoUiH2qSrWcSSYoleLM7InAwpgLAiX/1PcS
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20787495584444263514849258316374598118
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dealers.aws.wehaa.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22513209823281402366875131871176923576146685778570003768674734946942487703887246805418739150837683247390569904385464155391364089071070100694546611130534729151040312823797956531211845738734433941839948912909673335925338390855462492936004843105758973527558369116469794086772813834235191332035667902132257570102883615116037173941713460396029754408377303337800179308451736879920375152249093935411813471425842774133743549542286328178760635138546880908531741409916721886149579998696608588684983076596037455173107938337826668615681921678441659010493783918034742214206893048784957006245462675205551803190085072008886609187511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							94b213d5b79f65adf7ec8aaed6c2d8bdfff957b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (575 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealers.aws.wehaa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motors.wadenapj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motors.perhamfocus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motors.echopress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motors.jamestownsun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motors.bemidjipioneer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autos.orlandosentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motors.thedickinsonpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motors.duluthnewstribune.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motors.brainerddispatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motors.inforum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motors.superiortelegram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motors.pinejournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sentinelautos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motors.parkrapidsenterprise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motors.mitchellrepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sentinelautos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motors.grandforksherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autos.sun-sentinel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motors.dl-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motors.postbulletin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motors.dglobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motors.wctrib.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000b29a9392b3e6234db6ec8c6f8c6076ac4af43f4c70b2f2a5e26646c83cfe133bdf0474d99d08d726d14e33157ba7fcda464e4ccd5d04ed5faf8b9344c33294f894128bcdc8797aaa2836cd81651eeab7d8a0194628bcebc9d824f09984fa10b5e5ed73e424ac64608a85333b2ba20782016e59368b36ac89d2f797e8497df204ffa8a9fdb49a4a2f38adc63fb36635edc58139f88b10742815c30c906e33d2d7547ea88ff031396fb3d93b0d7af65597b7823587aecc4ed0e247a05e9feef965b0e58f131b6323f2010c6811ec4876f98458c682975fc9e08c02a99baa79519d16b5bc196ed105cc4276c9e231ac721d437acc1c7d5656f8e8f2d56b18c2493