autodiscover.ukb.ch

- Urner Kantonalbank -

Issued by SwissSign RSA TLS OV ICA 2021 - 1

About this certificate

This digital certificate with serial number 22:a2:9f:9b:27:54:8b:8f:1d:eb:70:e6:ee:03:fd:1c:6c:e6:2e:02 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Urner Kantonalbank

Organization: Urner Kantonalbank
State / Province: UR
Locality: Altdorf
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 22:a2:9f:9b:27:54:8b:8f:1d:eb:70:e6:ee:03:fd:1c:6c:e6:2e:02
Serial Number (int): 197732310579681402763084815931796162623696154114
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 67:90:c2:4f:23:0b:07:1d:c7:f2:3f:51:74:92:0b:db:2e:ce:51:d5
AuthorityKeyId: ac:d0:3a:c2:c2:57:55:91:69:11:cc:70:6a:59:38:8a:8c:ac:9c:3d

Fingerprint (sha1): 60:f9:ed:14:e4:82:7d:1c:b0:b5:39:11:66:6d:cb:44:90:da:f2:e5
Fingerprint (sha256): 44:61:b4:db:fd:a5:0f:4b:1c:d8:72:7d:0e:cd:31:bb:1e:03:25:53:27:95:49:e4:2b:4b:f6:c1:c5:72:cb:b5

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D

Revocation information

OCSP Server: http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D
CRL Distribution Point: ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate autodiscover.ukb.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for autodiscover.ukb.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.ukb.ch
mail.ukb.ch

Other certificates including the domain name ukb.ch

(limited to 100 certificates)
www.ukb.ch
fintest-wwwsec.ukb.ch
gast.ukb.ch
fintest-dev-wwwsec.ukb.ch
www.privasphere.com
twint-test.ukb.ch
www.ukb.ch
fintest-e-banking.ukb.ch
ukb00ncs104-e.ukb.ch
satellite-test.ukb.ch
gast.ukb.ch
twint-test.ukb.ch
fintest-e-banking.ukb.ch
dialog.sbb.ch
www.privasphere.com
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ot.ukb.ch
ssl.ukb.ch
ot.ukb.ch
ukb00ucc114.ukb.ch
securemail.ukb.ch
eroeffnung-test.ukb.ch
satellite.ukb.ch
www.privasphere.com
ukb00ncs106-e.ukb.ch
securemail.ukb.ch
www.privasphere.com
gast.ukb.ch
www.ukb.ch
autodiscover.ukb.ch
ot.ukb.ch
autodiscover.ukb.ch
eroeffnung-test.ukb.ch
dialog.sbb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-e-banking.ukb.ch
www.privasphere.com
www.ukb.ch
wwwsec.ukb.ch
www.ukb.ch
ssl.ukb.ch
ukb00ncs104-e.ukb.ch
gast.ukb.ch
wwwsec.ukb.ch
ukb00ucc114.ukb.ch
www.ukb.ch
eroeffnung.ukb.ch
wwwsec.ukb.ch
wwwsec.urkb.ch
ukb00ucc114.ukb.ch
twint.ukb.ch
www.privasphere.com
www.ukb.ch
identifikation-test.ukb.ch
twint-test.ukb.ch
www.privasphere.com
dialog.sbb.ch
gast.ukb.ch
dialog.sbb.ch
ukbhb01mx01-e.urkb.ch
ukb00ucc114.ukb.ch
fintest-dev-wwwsec.ukb.ch
ssl.ukb.ch
satellite-test.ukb.ch
fintest-dev-wwwsec.ukb.ch
fintest-wwwsec.ukb.ch
wwwsec.ukb.ch
www.privasphere.com
ssl.ukb.ch
autodiscover.ukb.ch
www.ukb.ch
gast.ukb.ch
ukbhb01mx01-e.urkb.ch
identifikation-test.ukb.ch
autodiscover.ukb.ch
fintest-e-banking.ukb.ch
twint.ukb.ch
wwwsec.ukb.ch
ukbhb01mx01-e.urkb.ch
zukunftsbild.ukb.ch
zukunftsbild.ukb.ch
eroeffnung.ukb.ch
www.ukb.ch
fintest-wwwsec.ukb.ch
ukb00ucc114.ukb.ch
ssl.ukb.ch
ukbhb01mx01-e.urkb.ch
www.ukb.ch
ukb00ncs106-e.ukb.ch
ukb00ucc114.ukb.ch
ukb00ncs106-e.ukb.ch
www.privasphere.com
satellite.ukb.ch
ukb00ncs104-e.ukb.ch
ukbhb01mx01-e.urkb.ch
fintest-wwwsec.ukb.ch
www.ukb.ch

Certificate

The complete raw certificate details for autodiscover.ukb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKGvyGxqrCRSCc4TuVuo
gHDTM7hTk5Krr6I4F9lCsyPDJ51or/IB37pE4ETFf9StmfNLOUHttLpvlY2KnP8n
kVi0TuDfZpNukF/mGhPGK0cBmh+5iNnWrlGSohigysR+hI0cEGhajna9EVwMgYlT
yGU8abQRLnYMLLOvd5qXKMq1CfylaTgnWos26UYWEZD7kb+kTpT4tq6xkTQegvrh
yhUkLqVC4mor3sBXuhLMZDJz06cuISs2csjTtPWXoEJdgPear3Fj1ldQAhqotqX5
oQxDi52RM7S42X52dM6Vtroh/oXQyQIZrWtQqA1cUmxG6DxqX2Wve0ECwM7uGoh2
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 197732310579681402763084815931796162623696154114
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2021 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-17 08:38:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-17 08:38:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Altdorf'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Urner Kantonalbank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'autodiscover.ukb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24822438433036254126296452711551013646539037039325413824258615592625595610697185589032811528535693410630535736689744095128012393315742812668026628397407226587153881304461518669579001416555991110599117123026572224810877420966973407931064591797676326547014417538436286895723835818642145208688019205870302536901342412526922290410979551183915685768476887833728490853922234862987032537732647939651978702471360303513248190840075087464146983893886828775857822578909723109565696452553131808455638773307741933044413560501908820813546771146354009860452569165036023200648463854082422273169723213553818614337301428423213317649963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ukb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6790c24f230b071dc7f23f5174920bdb2ece51d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName acd03ac2c25755916911cc706a59388a8cac9c3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=ACD03AC2C25755916911CC706A59388A8CAC9C3D%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.net/ACD03AC2C25755916911CC706A59388A8CAC9C3D'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (844 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (840 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0068fd7718f253843b345c658cfa817639125ad5ddaf4d265ef956fd22d0afb5d6f02eff45dd95add9313104907d613d9177f54e42b651cb737fedd50a1a458eed195d4e1de777a7fa7f61430e6a992acff4c1f56f148004988a6b51e759db50b8c8ed576ad3154339d6be730a2eae18d200f758f101bccd5931e769e9955b7f747e0d9237a6f2abf80865666f220bb12a1fe1d84af1a0e62eb6b44729cbef18b0762082b531e796c600db91d2c097d71103dcac68cabe7b7d3eb5ca66e5ec4fe31248f413a57cbfa85c6167c283aff9993c07a9621fdb1ee0178a22c2b144dc5ade8fa151982b9d3f951ab3584406c2f8fbea64f7ccea64d5384c681eee3e204af90471159dd4cccd676206bcb023547e902138341a82421b162b948a8499b7cc4ed3eb94a2c45b6ad3761434a9e774e646bdb57e26dca4744cc6699acceb54702c036d99278a4a600101ebf22d37dceb4548cad0ca1d3b92124ac9bd1a8d30ecd77aa69f40085a4e8e8fa38d06abc2a5ac5342743990ae0980dffcfb57cbbfa53d2e35d219c5d0f3555b7d899f9fc2a3fe30a9d327076b9d3ebc5b25e42ed41be6286badc725c97ac07e43e90c91384a8948cd74db51fa243e38e293153100d49bedd30fa53973e2b15919d8ab4425a5e922ee788096c2c9489a5dcc4b4a875c60bd050c2de581671d6f8f93108d45350a4d5045b3ff219192fa6b610c66beac