mszweb.mandant.dwd.de

- Deutscher Wetterdienst -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 95:08:e1:fb:5f:e1:1c:1c:f1:61:7c:f8:b6:6f:d8:db was issued on by GEANT Vereniging.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Deutscher Wetterdienst

Organization: Deutscher Wetterdienst
State / Province: Hessen
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 95:08:e1:fb:5f:e1:1c:1c:f1:61:7c:f8:b6:6f:d8:db
Serial Number (int): 198101093204923573392494368214108592347
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 91:9a:d2:7d:22:80:e0:53:70:19:b5:6a:e4:1b:91:8b:1c:7e:d9:4d
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): d9:0c:50:02:ca:80:22:05:6e:05:1b:fa:91:37:9c:aa:49:f2:4b:54
Fingerprint (sha256): 33:c8:1d:b5:98:6e:b8:ef:66:ba:f2:47:cd:b2:5c:e0:28:09:3f:49:3b:41:c1:06:cd:ee:30:72:5d:2c:4c:bf

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate mszweb.mandant.dwd.de

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mszweb.mandant.dwd.de

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mszweb.mandant.dwd.de
msz-cuxhaven.de
www.kuestenwache.de
www.msz-cuxhaven.com
www.msz-cuxhaven.de
www.msz-cuxhaven.info
www.msz-cuxhaven.org
www.xn--kstenwache-9db.de

Other certificates including the domain name dwd.de

(limited to 100 certificates)
maps.dwd.de
ssi-intern.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
ssi.dwd.de
www.deutscher-wetterdienst.de
hosting.dwd.de
maps.dwd.de
kunden.dwd.de
dwdvd.dwd.de
hosting.dwd.de
nl-prox.dwd.de
www.flugwetter.de
expertennetzwerk.mandant.dwd.de
www.dwd.de
ssi.dwd.de
isedmz-p.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
wis-gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
www.dwd.de
kunden.dwd.de
oflsd46.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
ebc.mandant.dwd.de
ofvkexpc01.dwd.de
pappl.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
www.flugwetter.de
hosting.dwd.de
alephino.dwd.de
hosting.dwd.de
fralux.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
gisc-test.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
webservice.dwd.de
kassandra.dwd.de
maps.dwd.de
brzvpngw.dwd.de
listen-prox.dwd.de
dwdhosting.mandant.dwd.de
hosting.dwd.de
hk.mandant.dwd.de
virtadm-hosts.dwd.de
klimawandel.mandant.dwd.de
oflxd18.dwd.de
hosting.dwd.de
oflxsn10.dwd.de
hosting.dwd.de
xmdm.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
qs-ninjoservices.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
hosting.dwd.de
cdc.dwd.de
oflsd46.dwd.de
beobachtungen.dwd.de
ninjoservices-neu.dwd.de
oflxs616.dwd.de
prometheus.dwd.de
gdws.mandant.dwd.de
ofvkexpe01.dwd.de
hosting.dwd.de
opendata.dwd.de
hosting.dwd.de
sva.mandant.dwd.de
stbauf.mandant.dwd.de
kunden.dwd.de
beobachtungen.dwd.de
hosting.dwd.de
oflsd46.dwd.de
molrao.dwd.de
hosting.dwd.de
webwerdis-intra.dwd.de
mszweb.mandant.dwd.de
hosting.dwd.de
hosting.dwd.de
listen-prox.dwd.de

Certificate

The complete raw certificate details for mszweb.mandant.dwd.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 198101093204923573392494368214108592347
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutscher Wetterdienst'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mszweb.mandant.dwd.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4249072833884786656892048008149469662973219137856237366636571431683449731427649843019239315078247895696780669100388987761118571082994276793217313895993140373934754348011505916737467411373846127680381730555421954977464862557260899184387862074571847277828814778464052733481831277073244667108653841672054842511964934797959745247193127188197501434727364011498811828303350239777072747905269433203900191154191205690195436619194884763962469338186218423640971755529918432591105880216212189998008899144273565031480988600592876847699884053053340178103867441346665824219236702693550921209202981788583416079867192431034704195076119288592817669251015999622929800740773015079988781086082162477293713163149829821823607093865094840636063200272500312534681498666422755471242931289949750269263069001479730050284142903500523289919250035696855707549832840698027578675324504012483340505730334729992318980486490948026541212195225403573769305043423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							919ad27d2280e0537019b56ae41b918b1c7ed94d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (179 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mszweb.mandant.dwd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msz-cuxhaven.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kuestenwache.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msz-cuxhaven.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msz-cuxhaven.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msz-cuxhaven.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msz-cuxhaven.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--kstenwache-9db.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0061a1dad7ba6c5c1a2f1829256dd45b5f9234e42291d98d5aad5023cf7d831489ef416fb3586819a6a36212d81cdf31f7ed6d87df07c68e34151b232868383aa48db329c4850d528c4a4adfb9578533bd3081eeb9cdee4b24c8dba17275eb089f8734d82c2eb2dd2edb34a4c5202b104597bc5448929df604352337139ffc88c8352fb74d31e2afc1f959b5ed70a2f7beffcc2cc71d2a6f0a86f28e5adabe5b42a9dda97afe8bf6bd86970d92b9ec638e2892f62167bd09b1d1c5d175d131ccda77a03f789b81fa8140fd5c70e50022b5c03de7d031e033cd7fcd172f4a44149521532db54208e5d4c1af7bed12121bd2a8a5e3332eaa6d92ab99fde7b32acf21cfc2465eeb6cf914320bdf0594a7eaff7d8bc026cecba60526cf2c5131584448ef20b5e1a2f3b8090449004593d916281549ad6846003107c24088debd1ca1de491a40a11c9227c80be4d699e72cc69d0c546632c9b373f1fb85dbca49da2c2563bda2a0a3e980d8283ec855de0db5c898dde042897e46d07c47f8d967c92e3528cb962d5ff89363b707f33e7b95958dcfa005b00e668c839307245c04d42564053cca6ce16e6dea296b61a281000bebd8f25a028dd4f89bb603f9f0255425e6f0d0733b7770f227aa77e3cf9400759b9787a076eef1195577dcc3f63776978bb71b2d6a65a9a35476f8c3d3427600d0108292eb6f7458182ecb659571e0810c