recruit.southbankcentre.co.uk

- SOUTHBANK CENTRE LIMITED -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 06:5f:41:18:b4:77:31:d1:97:52:30:5c:b5:13:88:c2 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SOUTHBANK CENTRE LIMITED

Organization: SOUTHBANK CENTRE LIMITED
Organization unit: HR
State / Province: London
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:5f:41:18:b4:77:31:d1:97:52:30:5c:b5:13:88:c2
Serial Number (int): 8469956490221840765662154412059232450
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9c:dd:47:ea:2e:a3:5d:81:fa:8f:49:d4:32:ab:d5:e4:07:20:38:50
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 6b:1b:d5:bc:77:f0:15:60:80:8b:99:2d:c4:96:04:24:e6:b2:43:1d
Fingerprint (sha256): 3c:7e:78:27:66:8c:1f:5a:22:34:87:f8:8d:4b:a5:f1:86:cd:29:c0:68:17:19:e9:d5:d9:53:95:5f:2a:a0:fa

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate recruit.southbankcentre.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for recruit.southbankcentre.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

recruit.southbankcentre.co.uk

Other certificates including the domain name southbankcentre.co.uk

(limited to 100 certificates)
platformsh.map.fastly.net
secure-euwe1-1.tessituranetwork.com
*.southbankcentre.co.uk
secure-euwe1-1.tessituranetwork.com
securessl-eu.tessituranetworkhost.com
ssl391556.cloudflaressl.com
securessl-eu.tessituranetworkhost.com
shop.southbankcentre.co.uk
tls.automattic.com
platformsh.map.fastly.net
platformsh.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
platformsh.map.fastly.net
ssl365218.cloudflaressl.com
platformsh.map.fastly.net
tls.automattic.com
mb.logicside.net
unlimited.southbankcentre.co.uk
platformsh.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
securessl-eu.tessituranetworkhost.com
x3.southbankcentre.co.uk
*.southbankcentre.co.uk
securessl-eu.tessituranetworkhost.com
platformsh.map.fastly.net
securessl-eu.tessituranetworkhost.com
dns-vetting1-marita-ardnek.map.fastly.net
platformsh.map.fastly.net
ssl365217.cloudflaressl.com
collections.southbankcentre.co.uk
securessl-eu.tessituranetworkhost.com
shop.southbankcentre.co.uk
*.southbankcentre.co.uk
ssl365218.cloudflaressl.com
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
securessl-eu.tessituranetworkhost.com
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
securessl-eu.tessituranetworkhost.com
*.southbankcentre.co.uk
platformsh.map.fastly.net
platformsh.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
*.southbankcentre.co.uk
resetpassword.gumb.app
dns-vetting1-marita-ardnek.map.fastly.net
unlimited.southbankcentre.co.uk
bynder.southbankcentre.co.uk
recruit.southbankcentre.co.uk
bynder.southbankcentre.co.uk
ammarweb.org
tls.automattic.com
bynder.southbankcentre.co.uk
platformsh.map.fastly.net
recruit.southbankcentre.co.uk
*.southbankcentre.co.uk
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
securessl-eu.tessituranetworkhost.com
dns-vetting1-marita-ardnek.map.fastly.net
securessl-eu.tessituranetworkhost.com
secure-euwe1-1.tessituranetwork.com
securessl-eu.tessituranetworkhost.com
platformsh.map.fastly.net
ssl365216.cloudflaressl.com
securessl-eu.tessituranetworkhost.com
platformsh.map.fastly.net
platformsh.map.fastly.net
unlimited.southbankcentre.co.uk
secure-euwe1-1.tessituranetwork.com
platformsh.map.fastly.net
*.southbankcentre.co.uk
totalrecalldts.co.uk
tls.automattic.com
shop.southbankcentre.co.uk
southbank.afterdigital.io
platformsh.map.fastly.net
x3.southbankcentre.co.uk
platformsh.map.fastly.net
platformsh.map.fastly.net
ssl365217.cloudflaressl.com
dns-vetting1-marita-ardnek.map.fastly.net
46thpreston.org.uk
dns-vetting1-marita-ardnek.map.fastly.net
ssl391555.cloudflaressl.com
southbank.afterdigital.io
unlimited.southbankcentre.co.uk
*.southbankcentre.co.uk
applications.southbankcentre.co.uk
platformsh.map.fastly.net
recruit.southbankcentre.co.uk

Certificate

The complete raw certificate details for recruit.southbankcentre.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8yqcWO7I+X3hhwrmT8M
EixVUusuQ/WvtlJumOEkf4xLe3Lby4ce7ncc89z8unMlTP8qvWLT0m2vi9erBJfY
mu8k4PX6VOcDO11RkZSGGq/mOV0j4OaNfHN00NehLx5dkyY3NVaE9jVSwaj2oK2S
dgpcHiDzbKcd/n68eH8a5gR0IdTqQT9IHNVPYUzX61l2E1cOuJDNyTzLN+QnInkW
cQzCxuiK85NPRDKvVSZCMNKfZ7AUDnkoFhAWjHSa5pZCZKgqONfx59nLa+MJOrsJ
nJs+WSm9ecSGbXMBvQxnjmLZUFae2obwOFiEQ1zwwoIWU/WA69W5z9cIbAkUniPy
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8469956490221840765662154412059232450
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SOUTHBANK CENTRE LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'recruit.southbankcentre.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23202534272669262479808240076167186884581788028900881379532533880467138070960589190884293945089308280554488218505103593199269624100196434743708286243533839799439185759050893533976385040229500116290618413326592839418325050531297652091487305317319787651156591906147973860796923647415643506722406628955789365072237840988741532178926132929309559109742518534472736391244577328450864105231213415513349464351235422408572406298717416464350996630770097772348686035710878039217870604452695980801134021199682161070269327450619712721498135222028166190613062352895091026855581582924158687016266883932740898999704893255702460756577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9cdd47ea2ea35d81fa8f49d432abd5e407203850
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruit.southbankcentre.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0059648a889daff225cc2fc5669cfa2888c7354f33a19a3c8b1f448ad94b646d083955650298ee8472f894cde5720a333223884e83a524b55329be1db5586a129026c4d4693d106dd893eb3cfb6bfe45d639e6c34c901882deb3d84a8b885cc4d0123c5bb2d76bcc8e44d72650d2b0574fde3af6b9caa5be7f13f1e0d7d0302e7d3899211bd8380094093be73f052f0f58ac957fe01c92c19fb0ac3f1d6ab078c9385c707eb2a0c229e26d488890e3f5b523b7c01c8fa4764bf6bdb6a4fa24ddb6147a6f3d43544ac93c7f6b538c1077e2e092d0cd5bf2dede1e5f3cdfd26b122b981bbe94330abace0d20c61e48320410605c17f74a1cb34e72d180623b8895b1