nas3.unipo.sk

- Prešovská univerzita v Prešove -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 07:d0:49:aa:62:1f:3a:57:cf:ce:27:82:8c:02:77:6c was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Prešovská univerzita v Prešove

Organization: Prešovská univerzita v Prešove
Organization unit: Centrum vypoctovej techniky
Locality: Prešov
Country: SK

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 07:d0:49:aa:62:1f:3a:57:cf:ce:27:82:8c:02:77:6c
Serial Number (int): 10386087832125632433935892054555129708
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 39:f4:03:e2:22:d4:de:ea:2a:5e:3b:4d:10:75:dc:67:82:23:e6:c2
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): c4:1c:e7:07:57:32:2d:2a:55:66:66:b3:08:d9:c0:75:25:a3:fa:40
Fingerprint (sha256): 32:f8:7c:07:2f:c8:d3:f1:2c:e2:7d:89:30:6a:5c:9f:5e:6e:da:66:a2:0e:9a:27:c6:17:15:ec:d8:6f:54:30

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate nas3.unipo.sk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nas3.unipo.sk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nas3.unipo.sk

Other certificates including the domain name unipo.sk

(limited to 100 certificates)
ff.unipo.sk
wiki.pf.unipo.sk
e.ff.unipo.sk
alumni.pf.unipo.sk
student.unipo.sk
alumni.ff.unipo.sk
student.unipo.sk
moodle.unipo.sk
www.ff.unipo.sk
dm.unipo.sk
web2.pf.unipo.sk
wiki.pf.unipo.sk
maistest.unipo.sk
student.unipo.sk
elearning.pf.unipo.sk
unipacik.unipo.sk
portalidm.unipo.sk
www.unipo.sk
alumni.pf.unipo.sk
sis.unipo.sk
batizovce.unipo.sk
z.fhpv.unipo.sk
e.ff.unipo.sk
pc1254.fm.unipo.sk
student.unipo.sk
reg.unipo.sk
h.fhpv.unipo.sk
e.fhpv.unipo.sk
vmw2.unipo.sk
wiki.pf.unipo.sk
wiki.pf.unipo.sk
pc1254.fm.unipo.sk
sis.unipo.sk
dama.pf.unipo.sk
nas3.unipo.sk
elearning.pf.unipo.sk
z.fhpv.unipo.sk
moodle.unipo.sk
sis.unipo.sk
elearning.pf.unipo.sk
pc1254.fm.unipo.sk
calimero.unipo.sk
unipo.sk
pfsense-s.unipo.sk
vmw2.unipo.sk
pc1254.fm.unipo.sk
moodle.unipo.sk
moodle.pf.unipo.sk
e.fhpv.unipo.sk
espes.ff.unipo.sk
e.ff.unipo.sk
z.fhpv.unipo.sk
www.unipo.sk
e.ff.unipo.sk
calimero.unipo.sk
maisdebata.unipo.sk
dm.unipo.sk
pc1254.fm.unipo.sk
dis.unipo.sk
pc1254.fm.unipo.sk
alumni.ff.unipo.sk
unipopress.ff.unipo.sk
unipopress.ff.unipo.sk
unipo.sk
unipo.sk
pc1254.fm.unipo.sk
alumni.pf.unipo.sk
elearning.pf.unipo.sk
web2.pf.unipo.sk
z.fhpv.unipo.sk
ecm.unipo.sk
portal.unipo.sk
ipc.ff.unipo.sk
dis.unipo.sk
alumni.pf.unipo.sk
batizovce.unipo.sk
portalidm.unipo.sk
pc1254.fm.unipo.sk
pc1254.fm.unipo.sk
ipc.ff.unipo.sk
portalidm.unipo.sk
e.ff.unipo.sk
idrac2.unipo.sk
pc1254.fm.unipo.sk
maisdebata.unipo.sk
unipo.sk
mais.unipo.sk
alumni.pf.unipo.sk
pc1254.fm.unipo.sk
ff.unipo.sk
www.ff.unipo.sk
pc1242.fm.unipo.sk
vmv2.unipo.sk
student.unipo.sk
moodle.pf.unipo.sk
ff.unipo.sk
aba-muni.pf.unipo.sk
moodle.pf.unipo.sk
portal.unipo.sk
alumni.pf.unipo.sk

Certificate

The complete raw certificate details for nas3.unipo.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9scyu4whZps6tRpT6sOK
HKZodEXuv10OzT9BxWqupjzzRIi5oJ2nxkm2I+HkN3CWot5xJGCSsm7bRWVvBHMO
XWjOQbP9fQ06e4VfMyuugJjp84+s+gKMI249AdJ0q6iXpdalApy5EJNib8f9cRrU
DKDakRl+7IZOX/Cpe9wwrNWlehlsKIgfS/RWRa9qCVG531VMIGhabHjtDvbEk42R
vp29HdbwvV+dslBtfGT2W/g75y30FUWhQjFpAYXb+wOkNZbrAfXED6VnSxm1DnmM
dQlQpJfvJcN3LqRRqNFgdAG7tkRKS9uZOx7PFodbiLdrprK6EC9MfWkRQJllSUYz
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10386087832125632433935892054555129708
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Prešov'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Prešovská univerzita v Prešove'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Centrum vypoctovej techniky'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nas3.unipo.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31152851302389273893588193840671013740165109872731719352841228324182812469001899962077066909232761092849599346356901924999049100221714333807666312447228163830508266886050679553535038509908645671602444581572803116318649409149691711931045232654890333589588189587021369081758074945616448124753990316188215085692515030277567941854675045128085978434548231967254354035938611325284665496721223671079140938240115436287002467958215985944263409624870108623783447827045557038802112840638046170667441112941907086248651002275050143371797997144816854977015990613303989577592362251779420260110905001584161770844533583392037711262717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39f403e222d4deea2a5e3b4d1075dc678223e6c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nas3.unipo.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006c9977fb061ed642d6e07676ef3f861fd93b08d1bd63bf53779ffcef62d0a9c788dd452a9d086c4b791ef91aa945aff140fb47f27e02b9443c46d6e44a734ef94644f0f6bb1bd5c80f8f868fee4069c46195798d63b251885dee0b7fa05fe5046221ca20bf41d9c1f03d1d896977c83311acdd1065c8a7eed5eb82d1b71c77d104ff5161ee7903153c5cefc4a3d6554f133c77ad3a477a3e432c3e5d29b59bd3fb88a354d34f8187592ab407b453c4b6aaf0cbc593b6d1d8519fba2900c4f90822447c361485bed0c1d5a0e5db628fe8394197b275a6f38e860da3d4048395cbf12fe025cb63f3cb1082151063218abc04fe5b37746a5b6d4fb3011de3808cf9