klikk.abonnement.aftenposten.no

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 03:eb:8c:07:ca:42:f8:2b:29:06:d6:fe:cc:c1:b1:9f was issued on by Amazon.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=klikk.abonnement.aftenposten.no

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:eb:8c:07:ca:42:f8:2b:29:06:d6:fe:cc:c1:b1:9f
Serial Number (int): 5210713903649013976186106432916140447
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 18:40:ad:5c:f7:43:57:db:47:6c:48:cf:07:d8:a9:fb:9f:ee:a2:ad
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 7e:21:b0:33:f4:ce:e0:71:f6:0f:15:eb:db:84:ba:a7:02:08:ee:8d
Fingerprint (sha256): 2f:5d:5b:12:7d:4c:6c:7d:fd:cc:07:18:c2:24:92:d0:55:15:08:72:d9:12:af:e5:f9:8a:6f:a9:2e:82:a7:56

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate klikk.abonnement.aftenposten.no

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for klikk.abonnement.aftenposten.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

klikk.abonnement.aftenposten.no
klikk.informasjon.av-avis.no
klikk.informasjon.aftenposten.no
klikk.informasjon.oyposten.no
klikk.abonnement.bt.no
klikk.informasjon.bygdanytt.no
klikk.abonnement.av-avis.no
klikk.abonnement.aftenbladet.no
klikk.abonnement.bygdanytt.no
klikk.informasjon.strilen.no
klikk.informasjon.randaberg24.no
klikk.abonnement.vestnytt.no
klikk.abonnement.oyposten.no
klikk.informasjon.bt.no
klikk.bedrifter.schibsted.no
klikk.nyhetsbrev.aftenposten.no
klikk.informasjon.vestnytt.no
klikk.abonnement.randaberg24.no
klikk.abonnement.strilen.no
klikk.informasjon.aftenbladet.no
klikk.studenter.schibsted.no

Other certificates including the domain name aftenposten.no

(limited to 100 certificates)
bedrift.schibsted.no
cis.schibsted.com
ap.no
aftenposten.no
cmp.aftenbladet.no
www.av-avis.no
*.i.bt.no
poweredby.aftenposten.no
rabattkoder.aftenposten.no
poweredby.aftenposten.no
id.aboutme.schibsted.com
kundeweb-ssl.snd.no
eavis.aftenposten.no
id.adressa.no
kundeweb.aftenposten.no
www.av-avis.no
id.morgenlevering.no
ap.no
www.event.aftenposten.no
eavis.aftenposten.no
cmp.aftenbladet.no
poweredby.aftenposten.no
cmp.aftenbladet.no
aftenposten.no
eavis.aftenposten.no
kundeweb-ssl.snd.no
vink.aftenposten.no
adb.aftenposten.no
bedrift.schibsted.no
bedrift.schibsted.no
cmp.aftenbladet.no
magasiner.snd.no
kundeportal.aftenposten.no
www.osloby.no
ap.no
rabattkoder.aftenposten.no
aftenposten.no
bedrift.schibsted.no
bedrift.schibsted.no
sip.schibsted.no
ap.no
magasiner.snd.no
www.event.aftenposten.no
cmp.aftenbladet.no
kundeweb-ssl.snd.no
id.tek.no
www.osloby.no
klikk.abonnement.aftenposten.no
poweredby.aftenposten.no
deflector.k8s.e8.no
api.snd.no
e-avis.aftenposten.no
eavis.aftenposten.no
kundeweb-ssl.snd.no
cmp.aftenbladet.no
helios.aftenposten.no
bedrift.schibsted.no
sch-lyfe-03.schibsted.no
bedrift.schibsted.no
id-pre.magasinpluss.no
www.av-avis.no
id.dolen.no
id.magasinpluss.no
test-bestilling.aftenposten.no
www.aftenposten.no
event.aftenposten.no
cmp.aftenbladet.no
kundeservice.aftenposten.no
kundeweb.aftenposten.no
ap.no
bedrift.schibsted.no
www.av-avis.no
poweredby.aftenposten.no
sch-lyfe-04.schibsted.no
cmp.aftenbladet.no
ap.no
test-cm.aftenposten.no
ap.no
event.aftenposten.no
cmp.aftenbladet.no
bedrift.schibsted.no
ap.no
aftenposten.no
cis.schibsted.com
cmp.aftenbladet.no
bedrift.schibsted.no
*.i.bt.no
bestilling.aftenposten.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
aftenposten.no
api.snd.no
id.aboutme.schibsted.com
eavis.aftenposten.no
*.ap.oasfile.aftenposten.no
magasiner.snd.no
cmp.aftenbladet.no
annprod.aftenposten.no
kundeweb.aftenposten.no
klikk.abonnement.aftenposten.no

Certificate

The complete raw certificate details for klikk.abonnement.aftenposten.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx3Hm8UENf07SANEbVQn
c5rl+GMvqSYR9AsIiLXRqBa46PyaDlsoVw/k4/1ANPbhtp6lwpL9yTgNP2REeCUF
z6uKzFQYgkEd0lzj5SpRgICW1emW5daH1ttcFGhRcfbyJCUKLU7eYuXNZUlSp0XF
FcnQKrKbwo9A6Nv94BG2h3lxnPXGakWJSyNAgiaWBFWDDWUtrymDG7YkbdrPysMJ
ZT8PDGlEd2xZJOHU8410P//4UwEFIpeAUYj9WekAxK4x0cTgrBKTVkM9siC2l7Ih
ngmNMFbF2oJdMpE0fZPS2qzJCRK+FtH1cpOlxmJUXD9JNsLm2g8izLY2tjA4/Jwp
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5210713903649013976186106432916140447
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'klikk.abonnement.aftenposten.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21601435076741292071883319152504214707180583339866182981569386422898457156609287016097861842352434784730003071333094982202433291843464600415730865509872813272456583872340774416457807351793880571775328640349663661385484684076322878659503474698148923055377966570511312943024427249077485372668974590910914850025387541844386711138592226327650341864096409668654883283679666070292977999403787794770606898442866923163967760548526309464044969071201273785447331955516528613858622965375879078306819045823901242102280342180111732846454005130066317303439338530028303257456125278792834807229827602918055157451393788102785147611601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1840ad5cf74357db476c48cf07d8a9fb9feea2ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (650 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.abonnement.aftenposten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.informasjon.av-avis.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.informasjon.aftenposten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.informasjon.oyposten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.abonnement.bt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.informasjon.bygdanytt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.abonnement.av-avis.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.abonnement.aftenbladet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.abonnement.bygdanytt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.informasjon.strilen.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.informasjon.randaberg24.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.abonnement.vestnytt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.abonnement.oyposten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.informasjon.bt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.bedrifter.schibsted.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.nyhetsbrev.aftenposten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.informasjon.vestnytt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.abonnement.randaberg24.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.abonnement.strilen.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.informasjon.aftenbladet.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klikk.studenter.schibsted.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0065d222aabb163c0397525928997689ab0f2ed5df5f6868ccb7124e90e106f3b394fef7c46a544a6220d1b1469d4bfe026086d622672b01513c247917c5fdb44b380c96fb42bfbd6fbbae0b2a7c8f946ae414281252454581e01c2f3b0a35b47485476eb2ef97f217b674a4b2661649ddf2099a2203f064c82f776019aae084c2f783a12dddeb0bc586f72c38bafee56f165b075117243fa0fee074585a363847c2a5443a4c92f382982db8549e0296618b5c7ad8d1191598d97171e0c6abf2a5a798eb8ff80627ec5be57ec69381c6be422189ff3e902d3f48447bf451f3e3fa0dc5a083e92910139a1cbd344b21f93c40cb6eed399fabc6a2f922f82fe77b72