jnb.ocir.io

- Oracle Corporation -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:3b:94:c5:f2:37:b3:d8:b0:22:b2:10:f2:16:2d:ce was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Oracle Corporation

Organization: Oracle Corporation
State / Province: California
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:3b:94:c5:f2:37:b3:d8:b0:22:b2:10:f2:16:2d:ce
Serial Number (int): 20247782930959361278571022618474196430
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a3:2d:70:07:e5:bf:54:34:90:af:7e:0b:40:5a:26:5d:b9:86:af:13
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 39:43:c4:8a:62:5f:35:79:4f:e8:55:b7:b0:c5:f1:32:ce:bc:bf:e0
Fingerprint (sha256): 3c:c3:7e:76:1f:d8:20:28:58:b6:72:a2:54:9a:49:a5:8c:ea:15:21:2f:3c:18:e5:99:26:4d:55:db:99:ab:fb

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate jnb.ocir.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jnb.ocir.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jnb.ocir.io
af-johannesburg-1.ocir.io

Other certificates including the domain name ocir.io

(limited to 100 certificates)
beta.ocir.io
lin.ocir.io
syd.ocir.io
gamma.ocir.io
syd.ocir.io
iad.ocir.io
ocir.me-jeddah-1.oci.oraclecloud.com
mtz.ocir.io
auh.ocir.io
arn.ocir.io
gamma.ocir.io
iad.ocir.io
kix.ocir.io
repository.us-sanjose-1.ocir.io
vcp.ocir.io
phx.ocir.io
nrt.ocir.io
ocir.ca-toronto-1.oci.oraclecloud.com
prime.ocir.io
zrh.ocir.io
lhr.ocir.io
lhr.ocir.io
bom.ocir.io
repository.eu-milan-1.ocir.io
repository.sa-santiago-1.ocir.io
iad.ocir.io
ams.ocir.io
yyz.ocir.io
icn.ocir.io
repository.eu-stockholm-1.ocir.io
cdg.ocir.io
lhr.ocir.io
yny.ocir.io
ocir.il-jerusalem-1.oci.oraclecloud.com
generic.artifacts.ap-chuncheon-1.oci.oraclecloud.com
icn.ocir.io
yul.ocir.io
jnb.ocir.io
hyd.ocir.io
generic.artifacts.ap-hyderabad-1.oci.oraclecloud.com
jed.ocir.io
repository.il-jerusalem-1.ocir.io
generic.artifacts.eu-milan-1.oci.oraclecloud.com
kix.ocir.io
repository.me-dubai-1.ocir.io
fra.ocir.io
icn.ocir.io
gru.ocir.io
wsmidt.ocir.io
iad.ocir.io
fra.ocir.io
sin.ocir.io
syd.ocir.io
sjc.ocir.io
phx.ocir.io
ocir.us-sanjose-1.oci.oraclecloud.com
dev1.ocir.io
scl.ocir.io
ocir.eu-marseille-1.oci.oraclecloud.com
gru.ocir.io
ocir.eu-paris-1.oci.oraclecloud.com
yyz.ocir.io
repository.uk-cardiff-1.ocir.io
generic.artifacts.ap-singapore-1.oci.oraclecloud.com
mrs.ocir.io
dev1.ocir.io
yul.ocir.io
auh.ocir.io
ams.ocir.io
yul.ocir.io
generic.artifacts.me-abudhabi-1.oci.oraclecloud.com
ocir.ap-mumbai-1.oci.oraclecloud.com
vcp.ocir.io
cwl.ocir.io
repository.af-johannesburg-1.ocir.io
hyd.ocir.io
nrt.ocir.io
alpha.ocir.io
alpha.ocir.io
yyz.ocir.io
mel.ocir.io
ocir.sa-vinhedo-1.oci.oraclecloud.com
prime.ocir.io
vap.ocir.io
repository.ap-singapore-1.ocir.io
zrh.ocir.io
ocir.mx-monterrey-1.oci.oraclecloud.com
generic.artifacts.us-sanjose-1.oci.oraclecloud.com
generic.artifacts.sa-santiago-1.oci.oraclecloud.com
generic.artifacts.eu-marseille-1.oci.oraclecloud.com
generic.artifacts.me-dubai-1.oci.oraclecloud.com
ocir.ap-osaka-1.oci.oraclecloud.com
gamma.ocir.io
bom.ocir.io
beta.generic.artifacts.ca-toronto-1.oci.oraclecloud.com
zrh.ocir.io
generic.artifacts.af-johannesburg-1.oci.oraclecloud.com
phx.ocir.io
ocir.ap-singapore-1.oci.oraclecloud.com
nrt.ocir.io

Certificate

The complete raw certificate details for jnb.ocir.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos6XDxxFg1nvI6o5HnqI
PbP3wj/r6MRHyizc2cuxb3lMiShkfvmWf1SdNxJTpdS9wtZZLI8dgzG8g1pyvADS
nawY/BGzqYJqxGSsFOKcPxi7HSfzyf/1w8aM9VmSZRv5P3iMAK7rnEo+3UKMOR1L
W2Ov94KmIhbT/tmFMM851KgWCzzceVVy280ndOSws70eXdN0GaV5Ypv/9SPgUkmr
r377lEspp6bY7VrytTH9DJHTfpl25r0ZqefxItk+eI6JnfkmJrJMKSKOVH0W70dq
S8V3tuUFc0tDL4lL9GRGjB1pqa4O1o2R9E2SsmVRIeSd8tQl/TzvGfa5GaiUdBeh
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20247782930959361278571022618474196430
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jnb.ocir.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20552478767019402846902959348657768107561545951478246383404932533123390863191954479275959090695437693440482126626942356603136841432848937729887987308421432855217149420336838984645515464954375994734010600958687071316227738791768728088392750355986924609651205915198612364804686996229422129300209208488014954886702309704203665840802274152084835392221436048262519842464438688954564390153463953401790368175049737627566474704636775915904110076055831841415441567795800428534858887439897173015337009720366889498429715508494155317566262094337088751204012521793355959438634178421943665447465695511181360391407914026456210448669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a32d7007e5bf543490af7e0b405a265db986af13
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jnb.ocir.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af-johannesburg-1.ocir.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001663c6d6df9544d8e770b3632fe13b8f316778f55766fb00d9518c93ee5f439df664ad0310fd00051b332233d3b2909c8c792fe53f453e38bdf816ff3f6d08559e3e6f73ca951ba62dd013f2b0e816faa50f56d66914147a1d707e4eb72f76df8d3288eab522b73c43b379faa9f93dfe57e177d87daf39d9aece7c6a646eb690f0f4b3ad7c482e6830a07a86dd1ea0e28df63073caa1cacf36027f65faea2458a193b11a0db348ce964a0473efb14e545d1ad9fe3ea1c9048e39d30932b900d3b3e29135fd8fd238a67a45b168839b9827a862857c1f58166e406d77daf238296a838a188c7252515c25efae66e233e97677c48e47a70445a4bda68546d205e3