vpn.minfin.be

- Federal Public Service Finance -

Issued by QuoVadis Europe SSL CA G1

About this certificate

This digital certificate with serial number 17:63:ad:bc:27:49:c3:f5:92:e6:44:e3:32:02:ab:66:77:80:a5:4d was issued on by QuoVadis Trustlink BVBA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Federal Public Service Finance

Organization: Federal Public Service Finance
Organization unit: Federal Public Service Finances
State / Province: Brussel-Hoofdstad
Locality: Schaarbeek
Country: BE

QuoVadis Trustlink BVBA

Organization: QuoVadis Trustlink BVBA
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 17:63:ad:bc:27:49:c3:f5:92:e6:44:e3:32:02:ab:66:77:80:a5:4d
Serial Number (int): 133529695954376920439995821562375573094885533005
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 02:65:20:32:69:1e:32:2c:a4:2c:f4:c4:7f:f9:67:2d:7c:3a:18:1b
AuthorityKeyId: 42:d3:87:73:e1:9e:d3:3e:5c:fe:b0:70:bb:ca:de:21:ba:24:79:36

Fingerprint (sha1): 0c:e9:38:df:31:38:e7:a9:e2:6a:c6:b7:2c:88:0a:6f:60:9b:e8:67
Fingerprint (sha256): 49:2a:11:61:c0:35:5a:57:73:60:2a:84:54:cc:49:95:ab:ff:cc:9d:35:d2:86:31:e1:d8:60:9e:23:33:96:0c

Issuing Certificate URL: http://trust.quovadisglobal.com/qveussl1.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qveussl1.crl

Check the revocation status for certificate vpn.minfin.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.minfin.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.minfin.be

Other certificates including the domain name minfin.be

(limited to 100 certificates)
minfin.be
fpsfinancesssltest.minfin.be
rrn-sitran-test.minfin.be
mrb.acc.minfin.be
minfin.be
lettercode.minfin.be
ccff-test2.minfin.be
RRN-SITRAN-test.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
ccff-test1.minfin.be
mobmail.minfin.be
mobmail.minfin.be
ac4.dev.minfin.be
fpsfinancesssltest.minfin.be
test-eservices-t.minfin.be
connect.minfin.be
connect.minfin.be
ac4.acc.minfin.be
minfin.be
rrn-sitran-test.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
testoauthtkgi.acc.minfin.be
dev-eservices.minfin.be
tsd-internalfrominternet.acc.minfin.be
minfin.be
minfin.be
mrb.dev.minfin.be
cap2-test.minfin.be
mrb.acc.minfin.be
kissic.dev.minfin.be
test-eservices.minfin.be
dev-eservices.minfin.be
rrn-sitran-test.minfin.be
vpn.minfin.be
uumds.minfin.be
eongw.dev.minfin.be
VPNAO-DEV.minfin.be
uumds.minfin.be
extranet.minfin.be
test-eservices.minfin.be
minfin.be
test-eservices.minfin.be
mrb.dev.minfin.be
ccff-test1.minfin.be
cap2-test.minfin.be
tsd-internalfrominternet.acc.minfin.be
tna-git.minfin.be
ac4.acc.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
vpnao.minfin.be
308357159-rrn-sitran-test.minfin.be
minfin.be
test-eservices.minfin.be
fediam-t.minfin.be
test-eservices.minfin.be
fediam-i.minfin.be
minfin.be
test-eservices-t.minfin.be
ccff-test1.minfin.be
fpsfinancesssltest.minfin.be
finelts.acc.minfin.be
ccff-test1.minfin.be
lettercode.minfin.be
cap2-test.minfin.be
vpn.minfin.be
pandregister.acc.minfin.be
pangaspfod.acc.minfin.be
vpn.minfin.be
first-dev.minfin.be
da-dev.minfin.be
mail.minfin.be
testoauthclient.internalfrominternet.acc.minfin.be
dynatrace.minfin.be
testoauthclient.internalfrominternet.dev.minfin.be
test-eservices.minfin.be
vpnao.minfin.be
pangaspfod.dev.minfin.be
test-eservices.minfin.be
minfin.be
extranet.minfin.be
vpn.minfin.be
ccff-test1.minfin.be
VPNAO.minfin.be
tna-git.minfin.be
ccff-test1.minfin.be
ecredit.acc.minfin.be
eongw.dev.minfin.be
first-dev.minfin.be
kissic.acc.minfin.be
ccff-test2.minfin.be
fediam-t.minfin.be
extranet.minfin.be
ccff-test1.minfin.be
test-eservices.minfin.be
tna-git.minfin.be
FPS-Finance-BE-CTS-test.minfin.be
fediam-i.minfin.be

Certificate

The complete raw certificate details for vpn.minfin.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwABojm/QCNSvBXdhcF33
JD0mTQMOliCDsxAjRekNzAM5AEE0z1igN10BRP/HSpJQUiKhdMRAws9FgIhpk5tb
tx75/HZu4OJ8Qu9drK9qC+aGNMSsZlLRAvyf1jKoOirxyIpqWRyFZzX4gq3kJFEa
91NZWHj1ODngeFqlV9j2fId6Z8IYACBoNyvZXe71bk8xEvQMHLdrhA6bey+GC+08
vWT9bFx13qU7MpbAqehtGz3cdPkd1eUG8zEPAU21/M9fSSRKlOonf+Y8zVw9jift
83VEwt3pcvuTOsjOJbVMtJkMNajdX7xht4PonHC5KiflKnUFJo0oWE7ZlA4TCNFb
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 133529695954376920439995821562375573094885533005
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Trustlink BVBA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Europe SSL CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-13 12:48:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-13 12:58:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Brussel-Hoofdstad'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schaarbeek'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Federal Public Service Finance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Federal Public Service Finances'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vpn.minfin.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24237955954574329626221138014974718067918822524991880932596277586285374504141832451590382420960526467917807828881641839972535673066385308682377987463490187889920709836952214196704814303664102632784841223313477653515640312207666704568370797099818917189602302263543000003522542897016123904163834042015938559386907755743364427780423150510783241402286573656662761887437447201797838370058297419163103374726835192963902260991311952247779576331634245901695678499402296231471726172578656370745035145230846200454334687022401400091751691424921093437143471364181166884750297439758444140347918135095059782852788450267104847944633
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qveussl1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02652032691e322ca42cf4c47ff9672d7c3a181b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42d38773e19ed33e5cfeb070bbcade21ba247936
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qveussl1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.minfin.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00200e0413f0fb38616b48342cca775ade5848fcac04d1851c95d9c9da9c822d7d3100b1d7b5e46de9d788b3b972fdeb67258d40d118d4d713f61dca72a05f233cbfc73ed4449304c800f66054eb0f41093106043f7037df31fde591c61c71d8568bce22dc744abf3610706fd222e58e3f33b1da51399650c74844bcefd6db1b5f6eb43a61805921746d26f7b8abfc87ddb2087c37642b4c3d752d9c550555865ee5f99f8d95e8d38755f409937632f1ad81c89b52ab0f8d6bd853a963db19272b7e4bd7ed9fef3e6fbf763378d5ccdc5bc12b701195fc1ff5785e7b4f3d9ce4a3fe3653b62defeb4121a492f8c880de9a40f46cb984247e13e9cff3d447ab779ca4a44db82a471607930367d614127c932c455291c31dca75d62e96262a45732a429498e5f9035eac9562019163e7de8e4f58abceb9768dd2afe49751b2505ec2f70906b30a9bfa391bc0d85296b0d2595c26adb47045243b1a9b142adf7a4c44aaa1d7c6edd176940b898c82a29f5428435dfebf5886e4472b71d406b622bd0500b2697d0051cd8194d7b9f41184088955418112cfa890b23a3452358aee23d332d0de3a94080077554ccdb884d50e101169b8fec59dd6a45d234669959b91e76668f9700f467d6c614e28f8e5a71ca35e8c071711c0b2976ade6543143765be0993b512a350b4ff86e567b5593c64002d8b0920f677c6871b71e82aab0d4d46