derspiegel.eu

Issued by R3

About this certificate

This digital certificate with serial number 04:8a:50:2f:7a:d6:be:17:f5:58:5c:c3:f1:a6:a7:38:93:b1 was issued on by Let's Encrypt.

With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=derspiegel.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:8a:50:2f:7a:d6:be:17:f5:58:5c:c3:f1:a6:a7:38:93:b1
Serial Number (int): 395514695131213268490498192233495889744817
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 38:27:a6:05:e9:b7:c4:0c:f9:ff:46:6a:32:ad:2b:58:f7:36:e1:f4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 04:72:eb:72:d9:ad:70:c1:5d:f2:e1:9e:69:cb:79:18:d9:94:bd:1e
Fingerprint (sha256): 2a:e0:3b:6f:18:af:81:ef:86:96:8d:39:09:57:fc:52:02:85:5d:9d:54:ec:f2:18:8e:d8:67:76:a7:2f:15:ab

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate derspiegel.eu

44

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for derspiegel.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

der-spiegel.eu
derspiegel.eu
derspiegel.info
investors-darling.de
konferenzen.spiegel.de
manage-forward.com
manage-forward.eu
manageforward.de
manageforward.eu
radar.11freunde.de
radar.manager-magazin.de
radar.spiegel.de
rudolf-augstein-stiftung.com
rudolf-augstein.de
spiegel-bestseller.de
spiegel-bestsellerliste.de
spiegel-plus.de
spiegel-veranstaltungen.de
spiegel-verlag.de
spiegel.club
spiegel.plus
spiegel.tv
spiegelgruppe-rechteerwerb.de
spiegelgruppe-veranstaltungen.de
spiegelverlag.de
spon.de
wissen.spiegel.de
www.der-spiegel.eu
www.derspiegel.eu
www.derspiegel.info
www.investors-darling.de
www.rudolf-augstein-stiftung.com
www.rudolf-augstein.de
www.spiegel-bestseller.de
www.spiegel-bestsellerliste.de
www.spiegel-plus.de
www.spiegel.club
www.spiegel.plus
www.spiegel.tv
www.spiegelgruppe-veranstaltungen.de
www.spiehel.de
www.spigle.de
www.spirgel.de
www.spon.de

Other certificates including the domain name derspiegel.eu

(limited to 100 certificates)
apiegel.de
derspiegel.eu
derspiegel.eu
derspiegel.eu
derspiegel.eu
bento.app
der-spiegel.eu
apiegel.de
dasdeutschenachrichtenmagazin.de
der-spiegel.eu
derspiegel.eu
bento.app
apiegel.de
apiegel.de
der-spiegel.eu
bento.app
arztsuche.spiegel.de
der-spiegel.eu
bento.app
bento.app
derspiegel.eu
apiegel.de
derspiegel.eu
derspiegel.eu

Certificate

The complete raw certificate details for derspiegel.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5PWRLDlZSb6AFiqfPBh
owK4B1qm7xGlCmSy3wRBdODL0kd47U1wx1UyKvvEZPzcuZDryUYyfYBBlheCM3DG
oI6RFaKWy0nR4pGNjD2Aw380flN5ycGHFCPAFHTplG6KkdH9X7sTzJkPkoRpFBpS
RKh8W5lf4D1bQyntyewO1KY6wlP2qMNZhYxQYcsuxocXsqVSUp9Cv2FbG1cg5eTp
Eoh+LfFT2Y0SOifKXFV+Dw2vuYwpRJVCUIsQZ6YyNnCreajFrUxBxCh0IJX76F2l
hzlh/+/+v7ut3q8/FQRsvurH5Wkkm4S6YRg4mzllWRKojKNyFe1y+R80yQRhYOaj
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 395514695131213268490498192233495889744817
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 00:15:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 00:15:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'derspiegel.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21154698064014104293698380750545193079802583787843680555369995263395111485905422602474804075155899030615518124376792578473379487036438229157542188983562670509796942289794050896673099422075598986884180308215344433106323233617811786830331514424802736717422510542340854600108989459859342225649906531954216662153111999636543526493859568182933767238049515136105827738437892324323144244668988040843909489767141096193383754650453019935690950153113375905532403592185021515431155377867907574878738252718143627611330533915087882211286045543546181539416148171191850175903920406016497316770212083471919837940507659363900807619397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3827a605e9b7c40cf9ff466a32ad2b58f736e1f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (927 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'der-spiegel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derspiegel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derspiegel.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors-darling.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konferenzen.spiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage-forward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage-forward.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manageforward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manageforward.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radar.11freunde.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radar.manager-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radar.spiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rudolf-augstein-stiftung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rudolf-augstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel-bestseller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel-bestsellerliste.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel-plus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel-veranstaltungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel-verlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegelgruppe-rechteerwerb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegelgruppe-veranstaltungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegelverlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wissen.spiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.der-spiegel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derspiegel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derspiegel.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investors-darling.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rudolf-augstein-stiftung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rudolf-augstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel-bestseller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel-bestsellerliste.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel-plus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegelgruppe-veranstaltungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiehel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spigle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spirgel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spon.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f1d1f917700000403004630440220578f4f847d98d3921c0e1986f90c61f93c49f8f2a0054e92c4f5b5328a7c2a4f022059e034c07ee4976c1e44ac4d3d1e41080c3cb428c436ed0761f85b06e03b3f2100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f1d1f997600000403004830460221009a0135c2865017d5d4e6d5d1f101525d46e06cb41ee9b2e329979fde262ade3d022100a2bd18eeb38b787dde6fdfbb93945026900146c9fa5b99c565e884e404b327f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003fd3609439bd83d1edd00b028bedc278e594e997752ce1930548aa7acd4aa97c665eb43d22fe2a88d67939eb681d84966f8a954335d709b5904e1d1533ae7fccda050eab2623edfdf41915f934772040f12e5b9303ae106b06fcf0ff83f22fbb03b578df16cf7526df254ead05c386eb7daefc53892cb074e34a922733f999693c2bcf31fe1fb93f06458210114234e699b48f992de2eb8b3735ae06b49318f19159fc24e67cf9dd2874469b4a455ebe8dbbe7aa89e83c47f0684b955b66e4630dc935a55aeb77a81350dd7e9249561656c32c3f53986948d855702954c0d8f4851e5b8fafa7a36c3e8d7cbbb10a78a994dac95b5a94845117d2201d6fbb739c