compliantonnettesting.msedge.net

- Microsoft Corporation -

Issued by Microsoft Azure TLS Issuing CA 05

About this certificate

This digital certificate with serial number 33:00:00:82:47:5a:3e:cb:95:6a:bd:c9:7a:00:00:00:00:82:47 was issued on by Microsoft Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DigitalSignature KeyEncipherment DataEncipherment] (00001101) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Microsoft Corporation

Organization: Microsoft Corporation
State / Province: WA
Locality: Redmond
Country: US

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 33:00:00:82:47:5a:3e:cb:95:6a:bd:c9:7a:00:00:00:00:82:47
Serial Number (int): 1137338178295184701229853418408094725407015495
Serial Number lenght: 150 bits, 19 octets

SubjectKeyId: f2:29:05:a5:9b:83:b3:89:ec:f6:1c:bb:3d:89:81:b0:d0:77:55:8f
AuthorityKeyId: c7:b2:9c:7f:1c:e3:b8:5a:ef:e9:68:1a:a8:5d:94:c1:26:52:6a:68

Fingerprint (sha1): 96:14:a8:15:80:6a:37:63:60:2c:48:d2:c6:35:9b:68:95:a8:23:4f
Fingerprint (sha256): 2a:3f:23:35:80:ec:b2:a2:3a:89:5b:1c:39:30:06:f6:44:59:36:29:39:d2:e2:d7:32:22:e6:88:74:00:1c:68

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2005%20-%20xsign.crt

Revocation information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2005.crl

Check the revocation status for certificate compliantonnettesting.msedge.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for compliantonnettesting.msedge.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

compliantonnettesting.msedge.net

Other certificates including the domain name msedge.net

(limited to 100 certificates)
compliantonnettesting.msedge.net
*.clo.footprintdns.com
*.msedge.net
*.msedge.net
*.msedge.net
complianttesting.msedge.net
onnettesting.msedge.net
testcertforf.msedge.net
compliantonnettesting.msedge.net
testcertform1.msedge.net
compliantonnettesting.msedge.net
testcertforexo.msedge.net
cacti.msedge.net
*.msedge.net
*.msedge.net
testcertforteams.msedge.net
compliantonnettesting.msedge.net
*.msedge.net
*.msedge.net
compliantonnettesting.msedge.net
*.msedge.net
complianttesting.msedge.net
*.clo.footprintdns.com
*.msedge.net
*.msedge.net
*.clo.footprintdns.com
onnettesting.msedge.net
kring.rotationtest.msedge.net
*.msedge.net
*.keylesstesting.msedge.net
complianttesting.msedge.net
onnettesting.msedge.net
*.msedge.net
*.clo.footprintdns.com
testcertfory.msedge.net
testcertforo.msedge.net
onnettesting.msedge.net
*.msedge.net
*.msedge.net
complianttesting.msedge.net
*.msedge.net
*.msedge.net
*.msedge.net
onnettesting.msedge.net
*.msedge.net
testcertforz.msedge.net
*.msedge.net
ztna1p-ring.msedge.net
*.msedge.net
*.clo.footprintdns.com
onnettesting.msedge.net
chinaringtesting.msedge.net
complianttesting.msedge.net
onnettesting.msedge.net
compliantonnettesting.msedge.net
complianttesting.msedge.net
complianttesting.msedge.net
complianttesting.msedge.net
*.clo.footprintdns.com
*.msedge.net
onnettesting.msedge.net
onnettesting.msedge.net
*.msedge.net
compliantonnettesting.msedge.net

Certificate

The complete raw certificate details for compliantonnettesting.msedge.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNSt9BDj/xjzymqH2213
DuxrwzS/TlwdLBeVW8GKpbTzeB5Kp5GzGz1V2wxP5D1mvlNxoUcfTOh7bU/yqIS7
m51Z7uXugg80xyEVnr9LY8ZBixIwVTyXOdxWxZ8Zg5uOWAH21Zq4KEdDVGHoLHvn
XCH1i6TBKEBxbMpYH9+bXVFmCZeJOwe+Kpaq+uDgpUAOasjsTVm+5h5rZ0Cx8Fnh
NXWgRXC5bVl04QmaaCnOSb++24++gRT/wZNi84TPa6IizYY76UzrB8O7X/nDQT91
Cm8mhl2yMXR3sLMb7W0NWiMk0bxY4g5ZdAx4Qk+HTB6duujGmHAWxeP0i0v6VvXJ
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137338178295184701229853418408094725407015495
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure TLS Issuing CA 05'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-27 16:47:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-22 16:47:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'compliantonnettesting.msedge.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19293098527742780021080051155515630991049468455650074674398406430914367300292878661774655218520058838150982024811403504513434770469728705944942116383266500032614495759713296797585241514551390747780855096324677365565376477553210206290018024657876125311075167707546533668068196107559201169463707582028890319463586045537356287636665280598703511797846480465731837437644807240036893107676770662937356088385066159263635450939698526884142921308881494076734886863859746246865366176265398053001569751114053192901650116946842813874447489459484875266985052209462791788360556879585595890466699447160067951777982206668628211124563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10 (applicationCertPolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7 (certificateTemplate)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.2977488.11009781
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2005%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f22905a59b83b389ecf61cbb3d8981b0d077558f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliantonnettesting.msedge.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20TLS%20Issuing%20CA%2005.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c7b29c7f1ce3b85aefe9681aa85d94c126526a68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0008e7b9b5c141ed01bff51f44b682cc7607a416b838564c2cf0217287904f14ae978d5c70a9e3eba254e3b8a5e98d556f02b00afb0e7e8c552ec7252e8607ccf9d41fdd2014b0970bafa9f5a41a79f558650a6c7efcaf16b66868944da14ddd330208759e676f9f41ae70541b6bbd6c6efde09e579b616a053c7563163e9f0af716b61fb173397ee912dcbe9cb7b8a47a004ad414091ff24f4baddbb8d9db8e53bb3efad62da82f58ef83842e1e40c9aee6e2bc9044a07e081f4812f7338745ea5587650b5a633a395dcd65ef9e8ac7f919c29b61a5ac44e7b5c1c4f035e0f512dbe4074efae93ba6a5fdaf96ff382aed04812e80a5a2fba58c442d7426a1afe20dc50026edae7b7992b5d6e1fae7f9168591b3a7e92e2d5e0d1cd48580112fa2bf6730c6f2bafec0b1032ddfb26da7bd80b85d44179ce8c5b86ecdc8384d344c246861c14f29ade15b5389f9b02685de37d1270fddda45b5e9eed14d28d88c59b34768788f4c49d29f73adbf757cee518abca75608a703e8c416fdf804e3701dcaebd68df77c6162ce44be82c920f808caf2f93cc42ccaee9f0b40351aa1892410e513f7323416bb7ce18e56a34aeedba1a30efa619dde644eba51c44b94153326478436d2f3d948a36b0bdeebca8ff79db321e5798e93ca9f1d4f819161e852d5724aae7052d36f67ffd9c4206bab3e6c1f2ced4717504a7b34ea34a7c1e151