srv02104.resbank.co.za

- South African Reserve Bank -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 0f:7e:2f:be:71:37:21:bd:88:87:9f:21:d6:16:18:06 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

South African Reserve Bank

Organization: South African Reserve Bank
State / Province: Gauteng
Locality: Pretoria
Country: ZA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:7e:2f:be:71:37:21:bd:88:87:9f:21:d6:16:18:06
Serial Number (int): 20593617702589832077743385614442960902
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d8:c0:ef:cd:b9:0f:98:19:f1:6b:e4:54:a9:f5:fc:ee:78:96:34:ed
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 1c:27:5d:06:b7:3f:62:10:70:12:26:48:e8:eb:c1:f0:a1:2b:a2:de
Fingerprint (sha256): 2f:52:7c:2a:c4:7c:13:8e:51:69:9c:1c:85:e1:bd:42:75:ed:26:db:0a:11:fc:55:cd:81:08:a8:50:bb:d9:3a

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate srv02104.resbank.co.za

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for srv02104.resbank.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

srv02104.resbank.co.za

Other certificates including the domain name resbank.co.za

(limited to 100 certificates)
eipuat3.resbank.co.za
P170518.resbank.co.za
eipuat6.resbank.co.za
ise-ho.resbank.co.za
uat01754.resbank.co.za
c3otdsqua.resbank.co.za
c3brv.resbank.co.za
sarbdexqp.resbank.co.za
webmail.resbank.co.za
*.resbank.co.za
sdr14152.resbank.co.za
uimcabi.resbank.co.za
srv02105.resbank.co.za
eipdev1-mc.resbank.co.za
vpn1.resbank.co.za
uim.resbank.co.za
vpn1.resbank.co.za
webmail.resbank.co.za
c3otdsuat.resbank.co.za
srv09240.resbank.co.za
vpn1.resbank.co.za
SABNAIRDIS.resbank.co.za
SRV13508.resbank.co.za
uploadbox.resbank.co.za
dev50230.resbank.co.za
C3otds.resbank.co.za
mailkey.resbank.co.za
SSQ6.resbank.co.za
QUA01754.resbank.co.za
srv14152.resbank.co.za
srv02105.resbank.co.za
srv09961.resbank.co.za
mailkey.resbank.co.za
webmail.resbank.co.za
eipqua2.resbank.co.za
SDR04581.resbank.co.za
uploadbox.resbank.co.za
CSQ6.resbank.co.za
sarbvdi.resbank.co.za
SABNAIRDIS.resbank.co.za
*.resbank.co.za
c3otdsdev.resbank.co.za
eip-preprod.resbank.co.za
www.resbank.co.za
webgate.resbank.co.za
uim.resbank.co.za
sabnswmc01.resbank.co.za
srv50233.resbank.co.za
uimcabi.resbank.co.za
sarbdexqp.resbank.co.za
resbank.co.za
sarbdexprd.resbank.co.za
eipqua5.resbank.co.za
srv02104.resbank.co.za
P128953.resbank.co.za
dev50232.resbank.co.za
srv50231.resbank.co.za
Dev01754.resbank.co.za
mailkey.resbank.co.za
*.resbank.co.za
eipuatp1.resbank.co.za
BSD.resbank.co.za
sarbdexprd.resbank.co.za
SABNAIRDIS.resbank.co.za
qua.eip.enc.citibank.resbank.co.za
vpn2.resbank.co.za
data.resbank.co.za
uat.eip.enc.citibank.resbank.co.za
srv09956.resbank.co.za
psh.resbank.co.za
sarbdexqa.resbank.co.za
webmail.resbank.co.za
srv02103.resbank.co.za
sarbdexqp.resbank.co.za
c3dev.resbank.co.za
SRV04581.resbank.co.za
Operations.resbank.co.za
srv02104.resbank.co.za
bp.resbank.co.za
sarbvdi.resbank.co.za
srv02104.resbank.co.za
dev09901.resbank.co.za
webapps.resbank.co.za
www.resbank.co.za
uimcabi.resbank.co.za
uimdev.resbank.co.za
UAT01755.resbank.co.za
maildelta.resbank.co.za
eipdevp1.resbank.co.za
c3intuat.resbank.co.za
qua50232.resbank.co.za
srv09961.resbank.co.za
webapps.resbank.co.za
qua50232.resbank.co.za
prd7pp.resbank.co.za
stsdev.resbank.co.za
QUA01755.resbank.co.za
eip.enc.citibank.resbank.co.za
sarbwebex.resbank.co.za
sarbdexqp.resbank.co.za

Certificate

The complete raw certificate details for srv02104.resbank.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hPTGtz5Zvfyz/8MzmQB
kNuacaXFBvAUYS9znP41BItQueJPCOzqFTl5dNHNbzlNGjdChQ6tjHrjWJBTcjTg
de+nFdoopgpZjk7mxfXrOzskTA4EzGGbTYJBIXvWrXBkJJCc91OpRkcjYeaJNDuN
/oH5NRAJSyjSvD0Ug29rnhDRdHEuAt8gWHjxh2tRCX/+ij/Rtax/+MnJ3rpclBNW
vV4L3YJFr8pZF2ztVfuZyto9A1tvJuQjSk607+J0riCFFKWDACVn5rNF8/iQINI1
G3AxImVD8NrEQCuxEUpFEqCRPQSuo0S66nZHrPdb2ygg08xg5z5605C+3z2EQf+P
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20593617702589832077743385614442960902
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-22 05:14:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-22 05:14:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gauteng'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pretoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South African Reserve Bank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'srv02104.resbank.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28034679591204497813485712286064373305487066831118319794618591655295636979848834376827330864699442927364475741276624290783251520598111791605997901291525947657471445807669709390274411717798288575447738621472171827253032628638596594691791899598064591638221009962433713982022140960544984553429748342804515235188311673229892043799451182948847968231175377306801103976596211211513128406794210153499886790906935053480914245145705143461159284309539829291234627067388867264699228140986088401338459640854413575637122215625663627501899997979075908035735182494055071818336772032879859038044370049540335744950000541624666029002631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8c0efcdb90f9819f16be454a9f5fcee789634ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srv02104.resbank.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0028c558638a7908e354c418fec2c0d38ab5088340916d2d71809cc00e27a870c1638cf2ed41d0205a2bd2b1141b6b5524d6bcdb1566d2e8011d66c854e10f79b07a28c07be0d2ff83a2fe3b8692e1886fb8bb41f4f2b781c1e8a186f5e22614f3fb0831784d586924ea21573b57acad53d7376b67a30453c077484254ef7bd30cfead7f5e3bdce5d311f03157b1de2e9e721964d95c13144b12af316e5c934d4502faf8a645017066939e1953ca4a89831f381e89bf24c10862b9a6a357365e53399fae6d0a63ca7997fb9d18a267258f2aff1df447ca656a761b8718ab5002e68f0bc1c37145f8df644fbf20b043ec8938796f6fba1cf056b842d943b117cb74