api.ikano.nu

- Ikano Bank AB (Publ) -

Issued by GlobalSign Extended Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 1b:77:4e:ba:9d:88:0a:70:33:7c:2f:64 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ikano Bank AB (Publ)

Company registration number: 516406-0922
Organization: Ikano Bank AB (Publ)
Address: Hyllie Boulevard 27
State / Province: Skåne
Locality: Malmö
Country: SE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 1b:77:4e:ba:9d:88:0a:70:33:7c:2f:64
Serial Number (int): 8500329224741853607466119012
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: be:e9:b0:6b:f6:50:a5:e2:d9:ef:07:c8:18:31:00:38:15:b4:4e:cc
AuthorityKeyId: dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d

Fingerprint (sha1): b2:8b:ad:b5:b7:96:49:a1:6e:bf:f5:9a:7a:4a:20:1c:14:72:78:fe
Fingerprint (sha256): 3b:5d:4a:6e:76:8e:a1:99:76:42:c1:50:a6:2f:60:70:57:48:1d:94:ec:7f:cf:8d:d8:38:98:e3:0e:03:6d:f0

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g3r3
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl

Check the revocation status for certificate api.ikano.nu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.ikano.nu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.ikano.nu

Other certificates including the domain name ikano.nu

(limited to 100 certificates)
apianalytics.ikano.nu
selfservice.ikano.dk
mail.ikano.nu
Identitynow.ikano.nu
identityiq.ikano.nu
citrix.ikano.nu
view.ikano.nu
api.ikano.nu
esb.ikano.nu
citrix.ikano.nu
selfservice.ikano.dk
view.ikano.nu
maileuq.ikano.nu
uat.newlook.ikano.nu
apipte.ikano.nu
citrix.ikano.nu
ecore.ikano.nu
ecore.ikano.nu
mail1.ikano.nu
Identitynow.ikano.nu
pte.ikano.merchantportal.ikano.nu
mailguard1.ikano.nu
esb.ikano.nu
pvmdc1linise002.ikano.nu
UAT.SVN.Ikano.Nu
esb.ikano.nu
hopex.ikano.nu
selfservice.ikano.dk
identitynow.ikano.nu
citrix.ikano.nu
crm.ikano.nu
apiuat.ikano.nu
dev01.apitest.ikano.nu
Identitynow-sso.ikano.nu
ikano.merchantportal.ikano.nu
hopex.ikano.nu
mail.ikano.nu
mail1.ikano.nu
adfs.ikano.nu
CHAT.IKANO.NU
view.ikano.nu
crm.ikano.nu
selfservice.ikano.dk
identitynow.ikano.nu
crm.ikano.nu
api.ikano.nu
uat.hopex.ikano.nu
maileuq.ikano.nu
mail.ikano.nu
sip.ikano.nu
kampanj.ikano.nu
access.ikano.nu
adfs.ikano.nu
view.ikano.nu
maileuq.ikano.nu
api.ikano.nu
mail.ikano.nu
esb.ikano.nu
tm.ikano.nu
selfservice.ikano.dk
selfservice.ikano.dk
sbm.ikano.nu
adfs.ikano.nu
adfs.ikano.nu
uat.crm.ikano.nu
citrix.ikano.nu
pte.onlineshop.ikano.nu
vdi.ikano.nu
mail.ikano.nu
LyncWebDC.ikano.nu
maconomy.ikano.nu
citrix.ikano.nu
maileuq.ikano.nu
identitynow.ikano.nu
uat.identityiq.ikano.nu
sip.ikano.nu
apipte.ikano.nu
uat.newlook.ikano.nu
adfs.ikano.nu
access.ikano.nu
sbm.ikano.nu
apiuat.ikano.nu
api.ikano.nu
pte.onlineshop.ikano.nu
mail1.ikano.nu
snowexternal.ikano.nu
vcse.ikano.nu
vdi.ikano.nu
uat.crm.ikano.nu
dev01.apitest.ikano.nu
mail.ikano.nu
oobdc1.ikano.nu
maileuq.ikano.nu
sts.ikano.nu
ise.ikano.nu
apipte.ikano.nu
sbm.ikano.nu
LyncWebDC.ikano.nu
nlease2.ikano.nu
maileuq.ikano.nu

Certificate

The complete raw certificate details for api.ikano.nu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8500329224741853607466119012
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-31 07:46:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 07:46:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '516406-0922'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Skåne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Malmö'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hyllie Boulevard 27'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ikano Bank AB (Publ)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.ikano.nu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 950466855754230978023806154819629032578225631955348069802229878453268797964192655204968390069260352357721166204573136731119686227500428142459108990656476079217357792690086044993492124998508393441524153173276671838307284703140009568791536019898476533263398626668986886021619693686602177813268778052422115928809500064406601189468663340322772206622324013287256478206117845757260364551812219448268388122085159417084663090751623036285255597186634485078326676484085924792554252408731356370885644095139897565609903018564228806282959894959413983919868961318243831431062997268996921059100680426337139996666359665001895102634273973533885543927839907370656796472609123811721602515903514082428578701464948852240330273524378444191324160867514043367449332729020274359246486513583362414542608893539507035740380562314491710967622757289131765031871736780615989795934993207517297088418237251084788549026332440982963926405421861264092110072969714425694482104311584840277251141003117874667140574783059007948445835424345087620257304005983072210691349634829186672426886786192362385557166421086980192560313520475777422509769499035839163504584020962710141407647365113089391311027552307782368936423130543370160023394766443048507909244901163125525111418244753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g3r3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ikano.nu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ddb3e76da82ee8c54e6ecf74e6753c9415cee81d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bee9b06bf650a5e2d9ef07c81831003815b44ecc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0057a493ce46ce01af1b21cc4eb567c8be07a87fd06dadc2eaedc31e843dd7fdee7e756a3b9c68db1c225777930785adc89ec421c2a7bd756245342221602c4ea23378af0fe77d9f25503e7f2d89e1c75e0a82f08cc35393422d5ceb9dacef9c10a9842d34d10806949b1ef611cd06f307164ee4deee9ebfceb780c1b550323bba2b7f4fb8ffed3e23c6451c0160c26a5225675d458d0052beb34c4182cd7a1a3e996ef5a0cef077ffa763e00350aed8714dd329628aabe7fb05731958fa77653bbca378a9aeef1dbf1f4d3dbcd17cf4c793eaee69869150e2b80b20b3c7fb7459c26c29400a744bd793bd5d12378e9b6130e7727329b4de9ed103e7b14687c53c