*.aiu.co.jp

- AIG General Insurance Company,Ltd. -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 0c:9b:b8:41:f9:90:ad:ad:ce:33:cb:89:e5:4d:05:39 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AIG General Insurance Company,Ltd.

Organization: AIG General Insurance Company,Ltd.
Organization unit: System Development Dept.
State / Province: Tokyo
Locality: Minato-ku
Country: JP

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:9b:b8:41:f9:90:ad:ad:ce:33:cb:89:e5:4d:05:39
Serial Number (int): 16759279152926197030893994831732606265
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bc:8d:ac:12:0a:eb:e1:82:34:5f:e3:55:72:20:12:be:5b:cd:1c:b1
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 59:6b:fa:a0:8a:53:28:b0:38:db:e5:9a:af:2b:db:9a:00:89:84:73
Fingerprint (sha256): 3b:14:99:e1:ca:ba:b2:4a:ef:20:f4:f0:cf:61:5a:12:45:7a:42:37:86:ac:28:57:ee:52:88:6f:aa:0d:68:a4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate *.aiu.co.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.aiu.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aiu.co.jp

Other certificates including the domain name aiu.co.jp

(limited to 100 certificates)
imperva.com
www3t.aiu.co.jp
www13.aiu.co.jp
web.aiu.co.jp
www12.aiu.co.jp
*.aiu.co.jp
www2t.aiu.co.jp
www12.aiu.co.jp
www3.aiu.co.jp
www13.aiu.co.jp
isuc.aiu.co.jp
incapsula.com
www.aiu.co.jp
imperva.com
web.aiu.co.jp
www12.aiu.co.jp
www.aiu.co.jp
www17.aiu.co.jp
incapsula.com
web.aiu.co.jp
isuc.aiu.co.jp
web.aiu.co.jp
iremote1.aiu.co.jp
isuc.aiu.co.jp
marinet.aiu.co.jp
www3.aiu.co.jp
imperva.com
incapsula.com
osest.aiu.co.jp
www16.aiu.co.jp
www16.aiu.co.jp
marinet.aiu.co.jp
www12.aiu.co.jp
incapsula.com
incapsula.com
*.aiu.co.jp
isuc.aiu.co.jp
wwwe.aiu.co.jp
mp.aiu.co.jp
imperva.com
www12.aiu.co.jp
incapsula.com
www.aiu.co.jp
www23.aiu.co.jp
*.aiu.co.jp
marinet.aiu.co.jp
imperva.com
www.aiu.co.jp
incapsula.com
www23.aiu.co.jp
www8.aiu.co.jp
incapsula.com
mbl.aiu.co.jp
mbl.aiu.co.jp
www3.aiu.co.jp
incapsula.com
www13.aiu.co.jp
*.aiu.co.jp
incapsula.com
mbl.aiu.co.jp
imperva.com
isuc.aiu.co.jp
www3t.aiu.co.jp
www12.aiu.co.jp
*.aiu.co.jp
wwwe.aiu.co.jp
mp.aiu.co.jp
www18t.aiu.co.jp
mbl.aiu.co.jp
web.aiu.co.jp
imperva.com
www22.aiu.co.jp
www.aiu.co.jp
wwwe.aiu.co.jp
wwwk.aiu.co.jp
www3.aiu.co.jp
www12.aiu.co.jp
incapsula.com
isuc.aiu.co.jp
web.aiu.co.jp
www.aiu.co.jp
*.aiu.co.jp
mp.web.aiu.co.jp
incapsula.com
smartsc.aiu.co.jp
imperva.com
incapsula.com
www3t.aiu.co.jp
*.aiu.co.jp
imperva.com
incapsula.com
www11.aiu.co.jp
www7.aiu.co.jp
www10.aiu.co.jp
imperva.com
*.aiu.co.jp
marinet.aiu.co.jp
incapsula.com
incapsula.com
www3.aiu.co.jp

Certificate

The complete raw certificate details for *.aiu.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXv596LOjmbP504hXYH+
T7PaGizhHC0Rl82q2yyftJSyLK0EorvLF419BaNvZJPcX6qypH5G8TtjrsMj93l4
nLHC1BNtXZqd2wt2VyL/T22YGLX6bTLP1voS+Az221Dnfh8GQlLOFdELkLJ1hZOg
stv9EY4bqJo/2OPSSvIMhZBq2BU1wiJUwp5KvdmbbXawChf+yIqH4T/WaYj5UL58
HqW2K2WAJ81lbyWCSrTa/6ssP42M3XKQE+TdtN8G3fJ81KYubp0VrXU4i0XVfTLn
k+qNweQPzOBxNH8zbSYRs709z/VfvNVHLsxjSAfuyNdj7jGpFQsKH9csnXD98HsG
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16759279152926197030893994831732606265
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minato-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AIG General Insurance Company,Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'System Development Dept.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.aiu.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19375595718378640400732479686197032923049957872576213335182092337323660359119934417377986556454355816565491293742194882257092665633529882648373673771085190982505062522403219310487380269703843114641212213691378072259114106926167011622223429066548101961503070784752829508993857843933677422478848331661926684556629944929217271685184790447026883372992171670236285560401968148603412740578017864318951459764224656913365749964421149161939935090588527253281996740150451047052867924748067260217979173946137977056215218750274774628445010832394998595657102843958052357225423368441745770948130794553132675305624900104440774330049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc8dac120aebe182345fe355722012be5bcd1cb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aiu.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016e0feb74f60000040300473045022100ffd4b805249770dc4b9168a92b8ad55309c86ebd38bbe4e54cdfa7a8611affd20220658ee8a4789775865229332f3fe84b329e4bc3cbc74fee76a25a6f10ba6432180076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e0feb746c0000040300473045022100c93c129f63e436744805d3dca801fd1d77bfbc959b2a0b986e517720f2da028102200f1f0174d873fd702295393dfa34c177a1ab422639c94a32f68959c0234f8d12
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0011f215173aec42cfa85e50efa4dbd0a56db64fd3ffb2e084be839c8265d8b5293c808ff14336b47a8b7f0741fd232ee47b5092d863fc8b76d32e1c5e965825d69456400237b62a6c783bf45e356cc75540fd0412592043486ab4573475d287d0cabae2a8c4c81077ecea1598c0739a9f9264d0fad8ebd07bd348a8c3b0de7892741e2d3387d8cbc3bd4bb4183bb04ea0ec7ced79dd8c54516faf66813a4e44102ce3d1e4e2b109bd89cac03f692fd8a0ba8b9abd7974917e8045a8f28fba65078091271192d5ff373345176a64b11f15c2c59b09819bec99b446dec88a9f174b7f1f1e89f94817384b93612ca3d6729e870d92c3fb584005f4154e1bfeb4add9