sts1.maersk.net

- A.P. Moller - Maersk A/S -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 67:7a:fe:ea:b6:92:04:5b:52:35:0d:93:c2:ef:17:19 was issued on by GeoTrust Inc..

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

A.P. Moller - Maersk A/S

Organization: A.P. Moller - Maersk A/S
State / Province: Copenhagen
Locality: Copenhagen
Country: DK

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 67:7a:fe:ea:b6:92:04:5b:52:35:0d:93:c2:ef:17:19
Serial Number (int): 137549114110519735273107363618876233497
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 68:38:e5:d7:ae:19:6c:c4:45:a5:86:ae:d5:b8:dd:70:50:9a:e9:70
Fingerprint (sha256): 30:4c:3e:de:ed:e6:c9:55:6e:81:68:91:da:76:e8:61:c4:78:3d:dc:49:27:27:aa:d3:f8:97:e5:06:04:7b:2a

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate sts1.maersk.net

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sts1.maersk.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

enterpriseregistration.siamshoreside.com
enterpriseregistration.sealand.com
enterpriseregistration.seagoline.com
enterpriseregistration.safmarine.com
enterpriseregistration.novatankers.com
enterpriseregistration.mercosul-line.com.br
enterpriseregistration.malagasyshipping.com
enterpriseregistration.maersktankers.com
enterpriseregistration.maerskline.com
enterpriseregistration.maerskgroup.com
enterpriseregistration.maersk.com
enterpriseregistration.maersk-drilling.com
enterpriseregistration.damco.com
enterpriseregistration.brostrom.com
enterpriseregistration.apmterminals.com
enterpriseregistration.apmoller.net
enterpriseregistration.crb.apmoller.net
enterpriseregistration.apmoller.com
sts1.maersk.net

Other certificates including the domain name maersk.net

(limited to 100 certificates)
webmail.maersk.net
webmail.maersk.net
webmail.maersk.net
stage.maersk.com
ccasp.maersk.net
stage.maersk.com
sts1.maersk.net
apm-mail.maersk.net
stage.maersk.com
ccasp.maersk.net
stage.maersk.com
pprod-ccasp.maersk.net
*.maersk.net
stage.maersk.com
*.maersk.net
pprod-ccasp.maersk.net
stage.maersk.com
webmail.maersk.net
webmail.maersk.net
stage.maersk.com
stage.maersk.com
test-ccasp.maersk.net
stage.maersk.com
stage.maersk.com
stage.maersk.com
webmail.maersk.net
webmail.maersk.net
api.ao.maersk.com
api.ao.maersk.com
webmail.maersk.net
webmail.maersk.net
webmail.maersk.net
stage.maersk.com
sts1.maersk.net
stage.maersk.com
apm-mail.maersk.net
*.maersk.net
stage.maersk.com
stage.maersk.com
stage.maersk.com
webmail.maersk.net
webmail.maersk.net
stage.maersk.com
webmail.maersk.net
webmail.maersk.net
sts1.maersk.net
stage.maersk.com
api.ao.maersk.com
api.ao.maersk.com
apm-mail.maersk.net
webmail.maersk.net
stage.maersk.com
stage.maersk.com
api.ao.maersk.com

Certificate

The complete raw certificate details for sts1.maersk.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroTwiJzoRMePOf/4p5lu
uyn1gonHGJezLE9ozRcac91j8II1jHeL6uvg59B+EPu2lS0ZItygZG9W9XQ0mK+j
LosvzmtgUuPKrkpX99kQlxh09L+pEOVXPENGVGr5hzE+uNdWXC+bK5cdb7Oe+loU
/5M9bj8UdBQ2jmBpgW5YWO6fiKB/3FFb3B/MlChcvaKQ6BGmIUzbfyx2Eiuhe6nc
zITrdKcR5tKtS5tJahxofrCJJrNI+10VVVYMZbf1k0DQYshBUOuWbe5H9svyIBpc
82KenTwliG9hsM7vOz4onP5BOM9aKxIPb0riQV+XXjl/h9286KvOytFLpcOoK952
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 137549114110519735273107363618876233497
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Copenhagen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Copenhagen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'A.P. Moller - Maersk A/S'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sts1.maersk.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22031020016501214926470557307624398967879175673126150757979244028254065551008714211448275079269797257151349666918596033548506128264996914167553682873239694905363210143354156668694085408373275929762266357279198743007061596196757794547141614696234793109849973989856788512935714579855046714664154848860543314113486229829176383976754140835827932551526533921140640289369422477696636749811038334487394261654438329969244918217065025869058864229631119134575512927585144059636109238059963685036340529007742523102377681481542570535327337234793807724016309346616667948266066721949180172174900814744581734044194042005866388813443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (732 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.siamshoreside.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.sealand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.seagoline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.safmarine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.novatankers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.mercosul-line.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.malagasyshipping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.maersktankers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.maerskline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.maerskgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.maersk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.maersk-drilling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.damco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.brostrom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.apmterminals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.apmoller.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.crb.apmoller.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.apmoller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts1.maersk.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b60414321998987e29a89e69acbab61f229ff6c2abd0e2e7cfd36da7ab478e39035a217466f1a41d01b6822b7c6384c8485ac2feead1d4bd0b5b0d41826b57861d9638afb2a7ae6116151cd253a2235812e05b212d581fb5735e3b303a41a8d5f99ad6dabaefc6e91b03e5ec1a4b32162cae5f5ac2db9fb9f4f5e5517180a7c31522f70e6880395e96f4ae63319c018d3f1857f6377b49bf5f4a0e91810346293002940f13ce349686e95f2be67f9a357a68362ff1fb02eab167e1fbf226e2acea927ae7456c1c039ea0da5e25ca0a82e683a1d10348aa9a3bf26cf51c141833c8028da9e4363af756ba251b8f1b48641b0808b818ef017ee9c6b38a8e073291