configurator-presentation.sartorius.com

Issued by SwissSign RSA TLS DV ICA 2021 - 1

About this certificate

This digital certificate with serial number 6c:9a:7b:31:96:61:65:fd:d6:fe:08:35:e6:ef:c4:73:07:d3:ef:23 was issued on by SwissSign AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=configurator-presentation.sartorius.com

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 6c:9a:7b:31:96:61:65:fd:d6:fe:08:35:e6:ef:c4:73:07:d3:ef:23
Serial Number (int): 620016049694443891014945526037493063816072916771
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 74:87:4d:80:7d:10:a6:e2:4c:5c:33:7d:30:eb:88:30:0f:09:e3:4e
AuthorityKeyId: 3c:9e:52:79:03:63:6f:4f:9c:81:1b:d3:28:70:0c:24:5a:ea:a5:87

Fingerprint (sha1): 1e:6c:8d:f8:70:0e:5c:88:07:09:ec:d1:4f:0f:70:9c:3a:9c:d5:6e
Fingerprint (sha256): 40:05:6a:5e:79:91:af:2f:40:f7:39:d3:85:ed:bf:ff:21:f5:63:e7:00:14:08:14:0c:31:ac:3d:0d:5a:65:14

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587

Revocation information

OCSP Server: http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587
CRL Distribution Point: ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate configurator-presentation.sartorius.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for configurator-presentation.sartorius.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

configurator-presentation.sartorius.com

Other certificates including the domain name sartorius.com

(limited to 100 certificates)
cert00068-azurecdn.akamaized.net
go.sartorius.com
owa.sartorius.com
sentry-c1.sartorius.com
sentry-access.sartorius.com
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
eshop.sartorius.com
api-qa.sartorius.com
*.scp.sartorius.com
*.scp.sartorius.com
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
su-adp-presentation.sartorius.com
open-access.sartorius.com
configurator-training.sartorius.com
www.shop-wer.de
shop.sartorius.com
dam-qa.sartorius.com
www.sartorius.com
ecoach.sartorius.com
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
upload.sartorius.com
btconfigurator.sartorius.com
jira.sartorius.com
de91vaucxwye01.sartorius.com
*.portal-q.sartorius.com
git.sartorius.com
ecoach.sartorius.com
configurator-training.sartorius.com
verical.sartorius.com
eshop-qa.sartorius.com
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
developer-qa.sartorius.com
cert00068-azurecdn.akamaized.net
config-data-downloads.sartorius.com
go.sartorius.com
uc-gw.sartorius.com
*.sartorius.com
btconfigurator-dev.sartorius.com
sartdam.sartorius.com
btconfigurator-dev3.sartorius.com
cert00068-azurecdn.akamaized.net
bi-test.sartorius.com
cert00068-azurecdn.akamaized.net
ir-reports.sartorius.com
brm.sartorius.com
developer-qa.sartorius.com
bioprocess-test.sartorius.com
*.scp.sartorius.com
mobile-test.sartorius.com
cert00068-azurecdn.akamaized.net
btconfigurator-dev.sartorius.com
cert00068-azurecdn.akamaized.net
git.sartorius.com
serviceshop.sartorius.de
owa.sartorius.com
dam-qa.sartorius.com
www.connect-upstream.com
cert00068-azurecdn.akamaized.net
cert00068-azurecdn.akamaized.net
sartdam.sartorius.com
cert00068-azurecdn.akamaized.net
btconfigurator-dev2.sartorius.com
serviceshop.sartorius.de
jira.sartorius.com
owa.sartorius.com
cert00068-azurecdn.akamaized.net
config-data-downloads.sartorius.com
cert00068-azurecdn.akamaized.net
bi-test.sartorius.com
studio.sartorius.com
www.shop-wer.de
Sartorius Corporate Administration GmbH
lps-globalsalesmeeting.sartorius.com
mobile.sartorius.com
login-test.sartorius.com
btconfigurator-dev3.sartorius.com
ir-berichte.sartorius.de
btconfigurator-dev2.sartorius.com
su-adp-presentation.sartorius.com
*.portal.sartorius.com
cert00068-azurecdn.akamaized.net
jira.sartorius.com
am.vpn.sartorius.com
cert00068-azurecdn.akamaized.net
www.connect-upstream.com
cert00068-azurecdn.akamaized.net
www.sartorius.com
sfpi-test.sartorius.com
go.sartorius.com
bioprocess-sandbox.sartorius.com
configurator-presentation.sartorius.com
serviceshop.sartorius.de
login.sartorius.com
click.sartorius.com

Certificate

The complete raw certificate details for configurator-presentation.sartorius.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPBMfEMARvgjy/GOs3Ad
Tbw6T/9Ob7DRAcG9Geftn4boVe8ewU6IAdichbxd7+K5tfa1SAjH5FPiZyUeYEk0
ykwnD4D2o+bRt0F1PtcM8X/CGAi7Y8YVjndJ1LY2CZ3cmWK1Qyk69uWISIwa3l7+
U4YVWuE2vdrEIYFstt+zL6+eOsuR9rhHp5NMuiSTENY+7x2e6/R6Z9jx28VHpJ+M
GeEu9tdkgWQQb08Eom73r98VLwy7KVVOt+lw4uaqp0rt403b4QyR4XNRvGdW0D/Z
aJv+g63TtQDuS4z+qplxL0+L7FePwfy7s7BYxRKOw9hCynYOKIKcRm2TqndwB6pS
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 620016049694443891014945526037493063816072916771
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-14 05:59:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-14 05:59:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'configurator-presentation.sartorius.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18296811655530401838840247150744231252367289712945538493203049788208746193280126475591828991847617008731922271465631638349947610827812766928153232548565597865286278868031498529108524689612617756253051564776195804111159792361137451603278579537896183238754999661118492258451124438079237142029238448564748775943207966931562154150351419901668135184764245855578028395590910986898598998748889831870627642780602711403420228028649580744636987488602995409679857316117818608732852661181729720087655920015731064081828362103518680393900810722515023742617590016762266320490594919840753167958702529211004849267533809733560202580537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurator-presentation.sartorius.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74874d807d10a6e24c5c337d30eb88300f09e34e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3c9e527903636f4f9c811bd328700c245aeaa587
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=3C9E527903636F4F9C811BD328700C245AEAA587%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/3C9E527903636F4F9C811BD328700C245AEAA587'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							01e10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000183d5134628000004030047304502210092b557bd1ad4444f20d0891057ec2b16b496e65cfffc27818086acc617280f5e02204bee962c739ddc4a55263819465fccafea0040a8d0901a37b45d999c8c8c859e007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000183d51345da000004030048304602210083ba794a34a76aff8f35c9384115f097a19621b2baae4641a9f25e1eb7b6cb40022100f5beabebbfb1cec485a425f154a017f6fc109212c969e948a01693349f945d63007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000183d51347870000040300473045022100a977f7064d1191103b1588d16042f24961bbe9eba21a02e343ea76c5ebb2c16702207f479c817eb358e63fae77ddbe5a12451f97a462549aaa28503174d111a25851007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000183d51348220000040300473045022071c8b8204e5a5cadb99dd6b07acb62e978536d081e8615e45e374f55d443473b022100b388bb64e15f4388769cc3f41586c5e23632ca704570636c882ddcfde8eccb1a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		007e78a3bf0b7fbe1f534555a9c91f61bc68bf9b8dde52b022b7a3521ce810feba959d314a7bbc23651fd15dfb1b1fea97619a10dd3ef9bd98fd1d472a38b3370f2575e9c76e7867a83a205039a901dd1c947734aad6fa45a9af6a0c02cb2079311305a4040e8f38f88a59cc3f5ad657fbd6d694f48d2d2c7ce02374f53972dc69db8b9918ab64916d72097569904633c917684d6c6525391c6014e02f545cae3b8791a0dd4937903164bab8bbc34c87707d5edc1b137dda6bbf74ab7dccb9077c973b0979482cb579d81205d02ed312975b19d9604d3ab511eb955d49bf3e6df6faedc88fd9161b981a77dca647fa2720eb6ca1eb121825ad4ac2660ff72d126a02d6a9aba88a7709846691398bf5213570b115aa66d881db31da1a1a14c2df259ea7b2ab2a9a77ce68a49e86568a5bc00089d25c805e9b60bfd3b7610da9b045cae341c28ddc2cd57a2fcc73ff2ac7d6213c70ed447ab489040821c9c0bfe967f3349f15591b1c3bffd3f9ab05b8cd9be7a17ccec38a36f11a2db80b4d370a1df35929e962efb5a15c654dc05096aeac8347428070df964dd77dcdb6f53302459752069ca949e6079ed23518fb9435db7d943fe4747419c92bf46246850cdb3aef26fa0643ea27cd0ab102a3b5833c21fcb83fb38a0682afc9a7a26773d72f823a1ee30aae5a332b8d23a6e2907898c9bbe912b813b47d50225fecd2bcb0fc6d