datenschutz.funkemedien.de

- FUNKE Corporate IT GmbH -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 6d:a5:a1:67:e2:36:8b:af:fc:01:9c:c5:d3:23:5d:4f:ed:49:7c:1c was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FUNKE Corporate IT GmbH

Organization: FUNKE Corporate IT GmbH
State / Province: Nordrhein-Westfalen
Locality: Essen
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:a5:a1:67:e2:36:8b:af:fc:01:9c:c5:d3:23:5d:4f:ed:49:7c:1c
Serial Number (int): 625973677405363611491745306656212971002656291868
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: e6:23:ee:7d:a7:2b:50:36:6f:62:f8:05:31:83:20:f6:d0:5b:58:1d
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 86:bd:c1:41:3c:9f:cd:c1:86:3e:06:6d:44:39:8f:5f:33:e6:09:d7
Fingerprint (sha256): 38:54:f3:0b:67:d1:07:ac:d3:c3:ce:13:df:33:ef:d9:00:3f:8b:1f:6c:8c:bf:79:42:0d:c4:2e:3a:0c:d2:38

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate datenschutz.funkemedien.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for datenschutz.funkemedien.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

datenschutz.funkemedien.de
www.datenschutz.funkemedien.de

Other certificates including the domain name funkemedien.de

(limited to 100 certificates)
bzv-medienhaus.de
ws-reservix.funkemedien.de
casproxy.funkemedien.de
*.dabis.funkemedien.de
funkemedien.de
www.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
www.funkemedien.de
*.funkemedien.de
avmnac02.access.funkemedien.de
dcx.funkemedien.de
*.access.funkemedien.de
dcx.funkemedien.de
bzv-medienhaus.de
extern.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
apnac04v.funkemedien.de
www.funkemedien.de
bzv-medienhaus.de
hadznac01v.funkemedien.de
*.waz.de
marke.funkemedien.de
portal.dz-hagen.funkemedien.de
www.funkemedien.de
*.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
apnac03v.funkemedien.de
*.test.funkemedien.de
mail.funke-medien.de
*.fabo-live.funkemedien.de
*.funkemedien.de
events.funkemedien.de
rd-cb-ha.access.funkemedien.de
aboservice.bildderfrau.de
extern.funkemedien.de
connect.funkemedien.de
waz.de
login.funkemedien.de
*.funkemedien.de
hadznac01v.funkemedien.de
bwv.portal.funkemedien.de
con.funkemedien.de
funkemedien.de
sso.funkemedien.de
bzv-medienhaus.de
bzv-medienhaus.de
expe.funkemedien.de
rdweb.access.funkemedien.de
funkemedien.de
*.funkemedien.de
apnac03v.funkemedien.de
bzv-medienhaus.de
*.funkemedien.de
dcx.funkemedien.de
*.funkemedien.de
*.funkemedien.de
mail.funkemedien.de
expe.funkemedien.de
upgrade-machine.sparknews.funkemedien.de
connect.funkemedien.de
sso.funkemedien.de
portal.dz-hagen.funkemedien.de
bzv-medienhaus.de
dcx.funkemedien.de
gate.funkemedien.de
email.funkemedien.de
datenschutz.funkemedien.de
mail.funke-medien.de
digas.axelspringer-syndication.de
*.funkemedien.de
*.funkemedien.de
portal.druckzentrum-essen.funkemedien.de
*.planer.funkemedien.de
blog.funkemedien.de
bwv.portal.funkemedien.de
apnac04v.funkemedien.de
*.funkemedien.de
bwv.portal.funkemedien.de
expe-cluster.funkemedien.de
volontariat.funkemedien.de
*.waz.de
funkemedien.de
mail.funkemedien.de
anzeigen.funkemedien.de
avmnac01.access.funkemedien.de
*.zpr.funkemedien.de
funkemedien.de
www.funkemedien.de
anzeigenbuchung-in-thueringen.de
*.fabo-live.funkemedien.de
esnac01v.funkemedien.de
sso.funkemedien.de
*.funkemedien.de
*.waz.de
*.waz.de
dcx.funkemedien.de
aisvxc03.funkemedien.de

Certificate

The complete raw certificate details for datenschutz.funkemedien.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRVm7uvEe3tvBttzdprL
L3sN7fx+FhPPTselkzNdOK3GVgK/i90wrkCAGOwv+rWVzrXHgTxoUrSr29GSdQ7b
KJ32DK68c5E764aXbqGjnbvjLjwRH7Yb9UF20yBhn/GTk9G3z0T59OwEvHErTCgd
hSygCUqT4Ys+qOXxus6tQQNwQvZv3Ifd2TMWIXBAPVm6CLVNxMiYePWkpnPUD1x/
YPNlZlfdZbKdkxcr+l3xVsqTdtIiQriBMuVklMMLbdv/emieRnhO+lG3OloeEra8
b8YAxqdXsVhk73VSh8rl9Z2fEtcTehQO5TXW7kqmGtqiOFt+JHbSSYKFb1X9F6qD
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 625973677405363611491745306656212971002656291868
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-29 14:03:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 14:03:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FUNKE Corporate IT GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'datenschutz.funkemedien.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18820061200485396594575743847845415198909032966521502995222822526304679902257401137049306224505026309807780617855286463482785943168005619205015279880595714983412238498508297939574430574358856568918684220179668144604291666621363078495449648949849810703343488272652364881380310749655300048942252433037303700820682017061662020826268201152218957897538493535102112621818731298919847026594033544668854317356960923910139239841740550286907352308691626174004031621004570918607963781711852866419651199528650185949708027984778417612710560110467831426190729974937265868480177982685708707252459726296072477811260203107159078765361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datenschutz.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datenschutz.funkemedien.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e623ee7da72b50366f62f805318320f6d05b581d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (846 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (842 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		005203048079f7810c81e843432eaf4109bd0e9fc7f9d4eb51aa01355e7500ce6949c44a94aa2a837463f039eb1f385946ff0aab085a2649c01ef5b11a32c513acd1530a8790afb82a6c3b83261d12754f3e6cbe9ee3c805c7fe95f51141347de4eb8eef04ecfc7b8d6d99a09a80960caf661f689e26a0ce88f6b4a0232574ecc7b6a6578421d7993caa1d09561f44288a5df3b99fce04a14afed97e19915447d201dcd1531fa18edaebf65b35cd0ef97193c03d43c20c675feee2a4a69cfaa4e0c747810b4c824e1e4e15668ad0bf18c4723f9133e72d75f520353effac2dfcc701f599d7ccca6234437aa035a50d0359930656926bdf5f7a21b05c29988a7cb58fbd916dff40c5b52af8bf8b3e2d20abd6eff59aec8cb299d97110d71093f4a99573f6915a9413fbf96453430fcbee661d15d86cbac1c2920e4625adbfea70a2cd877db7d24290adf4c77235068e3aa61a4b05b6204aa088fbac6fd4d1ac2268f4d0f0db4c71041c2098ce8986a5e0d864dd6e0f5ed999e0cb973e0bd22f6297d4e9998688142bd43a71ddf1b14d18ddc8708f014e30444c3ca1fe27f6e20983bd54ad47f4f4023faac9430199bff0a789c6f975a8cd66c86bbf968c0127423660d2019109e9c61f167abccf91e34ed916ba1bb142d7eb68a546b5cc78e8168c4dad6f0fb977ed5e58a9014c692fd0725fe96d7550f2a588423689fd76a4d142