talsu.rvv.vyv.fi

- Valtion Tieto- ja Viestintatekniikkakeskus Valtori -

Issued by TeliaSonera Server CA v2

About this certificate

This digital certificate with serial number 01:69:6c:89:77:30:e0:1d:c2:e7:bb:7e:1d:e6:b8 was issued on by TeliaSonera.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Valtion Tieto- ja Viestintatekniikkakeskus Valtori

Organization: Valtion Tieto- ja Viestintatekniikkakeskus Valtori
Organization unit: Kapasiteettipalvelut - Kumppanin Tuottama
Locality: Jyvaskyla
Country: FI

TeliaSonera

Organization: TeliaSonera
Country: FI

This certificate has expire since

Certificate Details

Serial Number (hex): 01:69:6c:89:77:30:e0:1d:c2:e7:bb:7e:1d:e6:b8
Serial Number (int): 7330549052009119436301766498313912
Serial Number lenght: 113 bits, 15 octets

SubjectKeyId: 86:4d:de:8b:2e:f1:88:d2:bf:7b:e7:fe:aa:56:39:59:01:ed:23:e7
AuthorityKeyId: 2f:49:3c:29:4f:d7:07:25:f9:c6:8c:d5:64:f5:66:3d:12:83:22:95

Fingerprint (sha1): dd:f9:e1:42:24:2f:a0:7b:86:80:37:d3:08:63:6b:a0:69:cc:11:3e
Fingerprint (sha256): 31:f0:18:34:b0:2f:4d:68:a6:58:2b:81:d4:74:41:5e:56:c9:14:76:89:85:93:36:36:d7:f4:8e:71:7c:5f:25

Issuing Certificate URL: http://repository.trust.teliasonera.com/teliasoneraservercav2.cer

Revocation information

OCSP Server: http://ocsp.trust.telia.com
CRL Distribution Point: http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl

Check the revocation status for certificate talsu.rvv.vyv.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for talsu.rvv.vyv.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

talsu.rvv.vyv.fi
*.talsu.rvv.vyv.fi

Other certificates including the domain name vyv.fi

(limited to 100 certificates)
mail.vyv.fi
vyvi-posti.vyv.fi
vmcreset.vyv.fi
valveri-out.valvira.vyv.fi
vahva-pub.vnk.vyv.fi
vaalijira.om.vyv.fi
pointti-virtu.palkeet.vyv.fi
*.tas.vyv.fi
vattidp.vyv.fi
osb-client.dev.via.valtori.vyv.fi
herkka-prod.palkeet.vyv.fi
louhi.valvira.vyv.fi
pr0.integraatiopalvelu.fi
pkah.palkeet.vyv.fi
avainqa.valtori.vyv.fi
test1-client.dev.via.valtori.vyv.fi
mail.vyv.fi
qa.sendi.vk.vyv.fi
lifecare.vth.vyv.fi
dev.coco.vk.vyv.fi
ipam-testi.vyv.fi
vahva-pub-test2.vnk.vyv.fi
qa.valvira.vyv.fi
test01.yjasp.vyv.fi
*.stuk.vyv.fi
ims.valtori.vyv.fi
prod.valvira.vyv.fi
vyvi-posti.vyv.fi
rondo.vyv.fi
*.valvira.vyv.fi
draw-export.valtori.vyv.fi
qat.integraatiopalvelu.fi
*.vyv.fi
tira.vrk.vyv.fi
itte.senaatti.vyv.fi
RMX4.vyv.fi
rmx7.vyv.fi
vyvi-turva.vyv.fi
pr0.integraatiopalvelu.fi
vyvi-posti.vyv.fi
qa.fimea.vyv.fi
api.hankeikkuna-test.vnk.vyv.fi
vkh.2016.vrk.vyv.fi
vkaztestressuschedulerapiapp.vk.vyv.fi
dma.vyv.fi
eucaris.vyv.fi
talsu.rvv.vyv.fi
qat.integraatiopalvelu.fi
plmreset.vyv.fi
sarkadoc.cgi.vyv.fi
snow.ork.vyv.fi
dokumenttienhallinta.vrk.vyv.fi
omcreset.vyv.fi
api.hankeikkuna.vyv.fi
draw.valtori.vyv.fi
top.valtori.vyv.fi
vyvi-posti.vyv.fi
*.test.rpa.palkeet.vyv.fi
ry01.om.vyv.fi
soar.vyv.fi
rmx1.vyv.fi
mediapankki.stuk.vyv.fi
soartest.vyv.fi
*.dev.via.valtori.vyv.fi
RPCC04.vyv.fi
snow.ork.vyv.fi
kvh.qa.suomi.vyv.fi
temcreset.vyv.fi
qa.yjasp.vyv.fi
postikaranteeni.vyv.fi
test2-client.dev.via.valtori.vyv.fi
eucaris.vyv.fi
tikku.vyv.fi
mediapankki.stuk.vyv.fi
stmreset.vyv.fi
asianhallinta.dev.vrk.vyv.fi
vyvi-spikaviesti.vyv.fi
vkh.2016.vrk.vyv.fi
temtilasto.vyv.fi
asianhallinta.test.vrk.vyv.fi
*.vyv.fi
vmbukettipub2.vyv.fi
mediapankki.stuk.vyv.fi
dynasty.tukija.vyv.fi
asianhallinta.vrk.vyv.fi
dev.cloud.valvira.vyv.fi
ims.testi.valtori.vyv.fi
rmx2.vyv.fi
talsu.qa.rvv.vyv.fi
jotate.lvm.vyv.fi
palvelut.om.vyv.fi
kvh.suomi.vyv.fi
*.vvp.suomi.vyv.fi
qat.integraatiopalvelu.fi
temreset.vyv.fi
rmx5.vyv.fi
*.core.vktds.vyv.fi
testeucaris.vyv.fi
pr0.integraatiopalvelu.fi
testeucaris.vyv.fi

Certificate

The complete raw certificate details for talsu.rvv.vyv.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7330549052009119436301766498313912
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TeliaSonera Server CA v2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 11:35:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-10 11:35:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jyvaskyla'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Valtion Tieto- ja Viestintatekniikkakeskus Valtori'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kapasiteettipalvelut - Kumppanin Tuottama'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'talsu.rvv.vyv.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 713509375546189301853737984594107991749325998930947505961799158091228617673527679954020105241927248873449906349446020267404601273187935143625120565438231895119961095267069632756778658401984924037690203859194405926363863012321575216055279143339134832671957738741967331679011633086468906066055615719568612760601998065443261878219233081341633075682962014598138833363805300675555868493195467587333973712426586093104193190841589984230365144815946078957057073773028859221584511838160857087049900990312316757346500195233234143876370064057306274225465476911498568804895535289804022322019085882695997625830156569311188806828805280691448589613787306931899404992694327289947688620162920214608714595481913106492808890227113793317421061858669176276983004407718478948865591745330830402801336795041810284936968528472329041483408550738462999045528227803201487194574972569467050372312557820427621494945150108093927718379869776526889593838674664485781334619463628132404189900766986808575677757189858685137140654485302432743489668396567221923321254814523162997917169413705166062103980297619525240910287693800456354084100843251546727698146463475718230702769500533701788749139048407402698904574304124268359321099278103859516360712318971431209507769337777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2f493c294fd70725f9c68cd564f5663d12832295
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							864dde8b2ef188d2bf7be7feaa56395901ed23e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.trust.teliasonera.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talsu.rvv.vyv.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talsu.rvv.vyv.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-3.trust.teliasonera.com/teliasoneraservercav2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trust.telia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.trust.teliasonera.com/teliasoneraservercav2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00a12d9040f0342f7bfa7ab42cbc487ec62400ee66d23537bec7e1406cfd9e7e53ae6b33f94fbef64d27f30bd9ca39e8ccd40b4439f91767900b36a9c66b5d79ee09b859dd47bf1d629904cf02775283eedbd0e01398b569349ab320e038b0c906c6899e9d0d3bf2f262023299d8745e6d6035117eca0b25f18f6ed1aa3bed930bdec0e032a1fd24899d882b15b456fe7aa6b12b42ff43466ed5a6c07d7b5860627b2bb5a30cbbb6d0d1cbc64c40ff01deee6d46d92f0dd76d3d1e890ad8d84adaab259fbbf706b43d1d8bd98df38db2318b546d9431350cad933642995a344c72ecb3cbc13cb771569f0aac22bab0d3489b7c617fbf3fec7a5f65188f3118d34e1a60f7cbad80d00c0f4f8b17a25b116447e9f2803eeaba346306c0d727d1948e6c6eba771d5b33d601dc1b362fccd6b5a6cf091926a73d704dd7e624b1af01403cfe5cb35cdabbb426afd09b04957eb1c67427a0fb3405f9b9aa780ccbd184d3b2d49bd9d12b9d510d87029056e680b05b23ba360df69d642ade46e5976bab82caa10dc57634538589ef011637788ea6d253f71547242a0946ad63daa64a5bca9be988c380ba515ab9d54566872ac783904c1496869d62596a71aaa723fb3a00f61ff3c4792846ab7c324a3eb932016a1438514c8c6cd7e5e02c3d4c38a371587a22373dc86ac2e53f712cf4edea29a5645c9eb30b159bacc876b71b7ad2469c