aes.sso-be-dev.aws.blinxsolutions.systems

Issued by Amazon

About this certificate

This digital certificate with serial number 08:83:a2:78:70:ee:d3:ae:df:b5:24:1a:6c:f9:df:74 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aes.sso-be-dev.aws.blinxsolutions.systems

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:83:a2:78:70:ee:d3:ae:df:b5:24:1a:6c:f9:df:74
Serial Number (int): 11317310147433727775137256079869206388
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b7:93:95:ab:4e:ea:4d:7c:66:f0:c0:0d:3f:c6:0a:9b:8c:77:c7:41
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): cc:78:5d:29:45:13:89:95:c2:70:a6:2a:6f:ed:2e:39:00:e1:e8:b0
Fingerprint (sha256): 33:ff:62:45:83:dc:14:39:f0:5f:6d:10:4e:7b:72:25:32:0d:66:d8:96:d7:df:63:fc:72:36:1c:5a:6e:b9:02

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate aes.sso-be-dev.aws.blinxsolutions.systems

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aes.sso-be-dev.aws.blinxsolutions.systems

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aes.sso-be-dev.aws.blinxsolutions.systems

Other certificates including the domain name blinxsolutions.systems

(limited to 100 certificates)
sf.acu4.aws.blinxsolutions.systems
aes.bi-fe-dev.aws.blinxsolutions.systems
aes.sso-uat.aws.blinxsolutions.systems
se.crm-be-dev.aws.blinxsolutions.systems
webchatuat.aws.blinxsolutions.systems
aes.ch-be-dev.aws.blinxsolutions.systems
cp.pp.sbpl.aws.blinxsolutions.systems
sf.acu2.aws.blinxsolutions.systems
aes.bi.aws.blinxsolutions.systems
edb.dev.kpi.acurian.aws.blinxsolutions.systems
pre-prod.academy.aws.blinxsolutions.systems
aes.bi-fe-uat.aws.blinxsolutions.systems
aes.ch.aws.blinxsolutions.systems
aes.bi-fe-pp.aws.blinxsolutions.systems
aes.bi-be-dev.aws.blinxsolutions.systems
edb.kpi.acurian.aws.blinxsolutions.systems
aes.bi-uat.aws.blinxsolutions.systems
edb.dev.kpi.acurian.aws.blinxsolutions.systems
cp.pp.sbpl.aws.blinxsolutions.systems
aes.ch-be-pp.aws.blinxsolutions.systems
edf.kpi.acurian.aws.blinxsolutions.systems
dev.academy.aws.blinxsolutions.systems
dev.stobart.crm.aws.blinxsolutions.systems
sa.acu1.aws.blinxsolutions.systems
edb.qa.kpi.acurian.aws.blinxsolutions.systems
aes.bi-be-pp.aws.blinxsolutions.systems
screener.acurianhealth.com
aes.sso-fe-pp.aws.blinxsolutions.systems
aes-fe-prod.acurian.aws.blinxsolutions.systems
se.crm-be-uat.aws.blinxsolutions.systems
se.crm-fe-pp.aws.blinxsolutions.systems
aes.sso-be-pp.aws.blinxsolutions.systems
blinx.arch-fe-dev.aws.blinxsolutions.systems
prodbackcrm.aws.blinxsolutions.systems
prodbackcrm.aws.blinxsolutions.systems
sa.acu.aws.blinxsolutions.systems
aes.bi-be-dev.aws.blinxsolutions.systems
aes.sso-be-dev.aws.blinxsolutions.systems
cp.d.sbpl.aws.blinxsolutions.systems
uat.academy.aws.blinxsolutions.systems
aes.bi-fe-pp.aws.blinxsolutions.systems
aes.bi-be-uat.aws.blinxsolutions.systems
aes-sdt-uat.aws.blinxsolutions.systems
aes.bi-uat.aws.blinxsolutions.systems
*.aws.blinxsolutions.systems
aes.ch-uat.aws.blinxsolutions.systems
uatbackcrm.aws.blinxsolutions.systems
webchat.aes.aws.blinxsolutions.systems
aes.sso-be-pp.aws.blinxsolutions.systems
devbackcrm.aws.blinxsolutions.systems
se.bi-be-prod.aws.blinxsolutions.systems
aes.ch-uat.aws.blinxsolutions.systems
edb.kpi.acurian.aws.blinxsolutions.systems
sf.acu.aws.blinxsolutions.systems
edb.dev.kpi.acurian.aws.blinxsolutions.systems
aes.bi-fe-uat.aws.blinxsolutions.systems
aes.bi-fe-dev.aws.blinxsolutions.systems
aes.bi.aws.blinxsolutions.systems
se.crm-fe-uat.aws.blinxsolutions.systems
sa.acu4.aws.blinxsolutions.systems
aes.bi-be-dev.aws.blinxsolutions.systems
aes.sso-be-prod.aws.blinxsolutions.systems
aes.ch-fe-uat.aws.blinxsolutions.systems
aes.ms.ts-be-pp.aws.blinxsolutions.systems
aes.bi-be-uat.aws.blinxsolutions.systems
uat.academy.aws.blinxsolutions.systems
edf.kpi.acurian.aws.blinxsolutions.systems
aes.ms.ts-be-pp.aws.blinxsolutions.systems
sf.acu4.aws.blinxsolutions.systems
blinx.arch-be-dev.aws.blinxsolutions.systems
aes.bi-be-prod.aws.blinxsolutions.systems
sa.acurian.aws.blinxsolutions.systems
aes.sso-be-dev.aws.blinxsolutions.systems
aes.bi-fe-dev.aws.blinxsolutions.systems
aes.ch-be-uat.aws.blinxsolutions.systems
dashboard.dev.sth.aws.blinxsolutions.systems
aes.ms.ts-be-uat.aws.blinxsolutions.systems
aes.sso-fe-pp.aws.blinxsolutions.systems
aes.sso-fe-uat.aws.blinxsolutions.systems
dev.stobart.crm.aws.blinxsolutions.systems
edb.kpi.acurian.aws.blinxsolutions.systems
cp.d.sbpl.aws.blinxsolutions.systems
se.crm-be-dev.aws.blinxsolutions.systems
edb.qa.kpi.acurian.aws.blinxsolutions.systems
webchatpp.aws.blinxsolutions.systems
backend.ed.aws.blinxsolutions.systems
sf.acu.aws.blinxsolutions.systems
sa.acu4.aws.blinxsolutions.systems
screener.acurianhealth.com
aes.bi.aws.blinxsolutions.systems
cp.pp.sbpl.aws.blinxsolutions.systems
*.aws.blinxsolutions.systems
pp.stobart.crm.aws.blinxsolutions.systems
blinx.arch-fe-dev.aws.blinxsolutions.systems
aes.bi-be-prod.aws.blinxsolutions.systems
aes.ch-fe-dev.aws.blinxsolutions.systems
aes.bi-be-prod.aws.blinxsolutions.systems
aes.bi-be-pp.aws.blinxsolutions.systems
pp.stobart.crm.aws.blinxsolutions.systems
aes.bi-be-prod.aws.blinxsolutions.systems

Certificate

The complete raw certificate details for aes.sso-be-dev.aws.blinxsolutions.systems in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HJLESLRaFXnjsEocRto
J+CI7PoBT5MzAS4bf+F0eam9F2tzihjarI368mTQkRrLkaXGvgrKFIfQ1aq+7D6S
QVsjp1JmdlrXflm8H+OFwth6EUjc8KWXc84P6hGL+rQNwNb5FEiNmRtfCZ8vcFoS
Ixmq5IRONKaFLNMLezFOnoYRkVh6mnuRdTR9rsSutZhMzifPBz+mEmwCJI9udo+P
LK9P3/F39yceQWt1Urm2FVkOrdn+fBkLrS9HD5IjFQ3s69QWpalHhj8WV5EXHHjL
qNGxVXVdOi/uSN8lo7ZCUFXSNwZAPff9W7hvlCGehnYei8G2yQho9thKBJLbHt0H
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11317310147433727775137256079869206388
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aes.sso-be-dev.aws.blinxsolutions.systems'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26313927525333416959008500960695424238754212273627126215081130446838952747125966226737243772954594611816225208051813611443559702243230742457366139666580521248926064445366738681283641094387893185579107142213144574387030676183143243525500023812399507582593816892219163212278605688243846724436295681695218832261068167453718086769841279220457435749576570215606438153444129844460273582946505439506637927229993309617408138190202531381066115678886726405048755519274843514721856078159369559569879597405136659322041377554055668994177126133991621518409207643661626220980826826749914599422984259984650479401655024364038672680883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b79395ab4eea4d7c66f0c00d3fc60a9b8c77c741
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aes.sso-be-dev.aws.blinxsolutions.systems'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000170be7b4a060000040300483046022100aed1737b00ced16f86f2b0661c150c338df7cb9baf3a9f2d21e011c6e56c3e20022100f77887a15c757441a3c8a7024c4247e757b45a4b73abe65257b797dcd42ec9b10075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000170be7b4a590000040300463044022000f2ba90a9c170b1f59caedafd553841123ff237f114c4825f6eeedc8564e2cf0220681ad1e13691c0de26a8afae5a13a2c434e43c7e78125bdd9ec95513fd2d8ec7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002cabe91f7caeed646cfd65870dc108aed06ce825b82cab0e60de2758f8236b3f18f931277ee8aa3552f1a31220ec5d16a50c265a2460019f5d43a82defe2139f0f08edbcc177972065a27ac32cce105016b5b8845585ae89e540cf08504916ef21a4d8df04fd5eec13deb4bffbaa2d9ca625d35973aed988bef5d2ec454075b5d9b7125f8f0562dab1d784db49fed86e2f414cd2110e5231020c39d3773ed05b250944fcdaad466900edfcac510eb78f40257689a03b892ce8b3527ad42f116027be00576fad880a9dcf3f97322c899232fd507a274e71b545f5ba47f7bb9983f2ecafc8e01292f33acb5b5cebc6e22d7b86a72659b0260dcd3d5bb1408e04ca