connectapp.libertyqa.pt

- Liberty Mutual Group Inc. -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 0b:d0:50:01:47:e8:8b:65:5b:4e:bc:cf:e8:f9:08:35 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group Inc.

Organization: Liberty Mutual Group Inc.
Organization unit: DI
State / Province: Massachusetts
Locality: Boston
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:d0:50:01:47:e8:8b:65:5b:4e:bc:cf:e8:f9:08:35
Serial Number (int): 15703128394460338162682242153336866869
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 22:9c:e0:93:ae:a4:14:12:a7:28:03:47:99:94:ea:2f:0a:f9:9d:c5
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): ac:36:d8:fb:a8:71:19:61:9d:35:07:ca:64:85:49:19:0c:7a:87:a5
Fingerprint (sha256): 38:29:47:d5:c4:47:9a:05:c8:59:29:48:e1:e4:21:a7:df:25:69:94:4c:50:53:65:0a:6e:3d:fc:05:48:e3:e1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate connectapp.libertyqa.pt

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connectapp.libertyqa.pt

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

connectapp.libertyqa.pt

Other certificates including the domain name libertyqa.pt

(limited to 100 certificates)
uat.mediedge.com
connect.libertyqa.pt
soatenlinea-nonprod.libertyseguros.co
connect.libertyqa.pt
connect.libertyqa.pt
libertyseguros.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
connect.libertyqa.pt
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
connect.libertyqa.pt
connect.libertyqa.pt
uat.mediedge.com
connect.libertyqa.pt
uat.mediedge.com
uat.mediedge.com
act-meucotadorfrota.libertyseguros.com.br
soatenlinea-nonprod.libertyseguros.co
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
connect.libertyqa.pt
uat.mediedge.com
uat.mediedge.com
connect.libertyqa.pt
connect.libertyqa.pt
uat.mediedge.com
connect.libertyqa.pt
connect.libertyqa.pt
uat.mediedge.com
connect.libertyqa.pt
uat.mediedge.com
uat.mediedge.com
vendors.libertyqa.pt
connect.libertyqa.pt
connect.libertyqa.pt
uat.mediedge.com
connect.libertyqa.pt
uat.mediedge.com
uat.mediedge.com
soatenlinea-nonprod.libertyseguros.co
connectapp.libertyqa.pt
act-meucotadorfrota.libertyseguros.com.br
uat.mediedge.com
connect.libertyqa.pt
uat.mediedge.com
connect.libertyqa.pt
connect.libertyqa.pt
connect.libertyqa.pt
connectapp.libertyqa.pt
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
connectapp.libertyqa.pt
uat.mediedge.com
connect.libertyqa.pt
connect.libertyqa.pt
connect.libertyqa.pt
act-meucotadorfrota.libertyseguros.com.br
libertyseguros.com
uatsoa.libertyqa.pt
act-meucotadorfrota.libertyseguros.com.br
uat.mediedge.com
connect.libertyqa.pt
connect.libertyqa.pt
act-meucotadorfrota.libertyseguros.com.br
uat.mediedge.com
soatenlinea-nonprod.libertyseguros.co
connect.libertyqa.pt
uat.mediedge.com
soatenlinea-nonprod.libertyseguros.co
connect.libertyqa.pt
uat.mediedge.com
connectapp.libertyqa.pt
connect.libertyqa.pt
connect.libertyqa.pt
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
connect.libertyqa.pt
uat.mediedge.com
uat.mediedge.com
soatenlinea-nonprod.libertyseguros.co
connect.libertyqa.pt
connect.libertyqa.pt
connect.libertyqa.pt
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
libertyseguros.com
connect.libertyqa.pt
connectapp.libertyqa.pt
connect.libertyqa.pt
connect.libertyqa.pt
libertyseguros.com
connect.libertyqa.pt
connect.libertyqa.pt

Certificate

The complete raw certificate details for connectapp.libertyqa.pt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh0iN4uNC4qPT9uQq9zM
+/sJrMtSKJZahfNwWh/1eXes1W4HEPVOZLXBcdl1dZdjsKefx+NapD2hEXkcTeT1
0D5K/CAKSEIx8YNdTfjBFdnX04ewd69J0ZU3S1DpvjoT8EPWykiW+zsL2KN8a1//
CwgKWd1z8KdQ2TPrgvy0QF8GUOC5oA6qbqc3N2FVgLOlwn6yboM9c0bSpZza2JNd
y5oqw9UP0Ue7hCxboZufcAn6JCMxJCCr416shjthvanoJSA9BSCpdcHOpKe34U2t
HxGNAokagHiq1gmfdQ5OtZSwMQ2SCBH3TnLgBKON5oKtEs1ZWc1qP4fG3RtdgZEP
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15703128394460338162682242153336866869
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Boston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connectapp.libertyqa.pt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19455065307985259970421220738302480074069801363396890233865394232335419565721003066487890031853992957633258744172649574138846044053507557817303954528285005464495000797685042071067290406233839778396083263708613204158561724384035416922704808864202299008734928603023363583362577256630453730182353809186425509080046759996559999486865535649226462651441361317344162780964541913797682759118281190366352540838379457509352468494312443003758494625635864282854006197121377048263893028392087399328568916876230984826158518054074664874602308505394846499759759213193599523748751782311168771770322363642226493821023640041662041886517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							229ce093aea41412a72803479994ea2f0af99dc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectapp.libertyqa.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001f0a9522db04c8ca1db36cc6a4366cfac08a05503dfd462c88a5174b93b30c82ba7ecbbfae1226e160e07fa71cbed9fa3b2af4f63cf9fce6437b8fd24edfb090c4be6ddfeeb99026596c7e229f02373f13e659440a24a3e8671519ea1547113f201f5e76cd1609c4e910a89c5d5a0a74dc073eed1843b1495e17ac7954544bc77daf8c7eec99b14db2dc85b178b0bc6575c563716670eb91414d0340847172930b7354a9389ba8c079ed8d41e949b26b049ffbdd6237082ab5e8c5f2a41ee1ccc1507887d48da0242d64ca9da2b642958fe93e4edbd0ea705e12af6087932ed95394207b621306c758aff862b88aee1be7a96c03768092eb8931a2380287c90f