apac.api.capillarytech.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0b:75:b0:d1:83:67:f5:ea:4a:30:c1:8b:ac:94:34:d0 was issued on by Amazon.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=apac.api.capillarytech.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:75:b0:d1:83:67:f5:ea:4a:30:c1:8b:ac:94:34:d0
Serial Number (int): 15232592989527074557410030182896776400
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1c:0f:83:b2:2d:43:ff:82:40:be:fe:0b:d8:ef:6e:d4:bf:1a:42:fd
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 55:fd:7a:d2:e6:ed:10:77:5c:15:4f:e3:cf:9a:b3:98:06:8f:d9:47
Fingerprint (sha256): 49:d4:f1:c1:5a:ca:48:63:16:9d:7f:1c:64:16:96:a6:d6:69:7c:c0:65:76:77:ec:93:bf:3f:a1:af:fa:ed:c7

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate apac.api.capillarytech.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apac.api.capillarytech.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apac.api.capillarytech.com
delvreports.capillary.in
storecare.capillarytech.com
apac.static.sharingan.capillarytech.com
soc.capillary.in
apac-apigateway.capillarytech.com
unsubscribe.capillary.co.in
apac.survey.capillarytech.com
apac.intouch.capillarytech.com
apac-s3wrapper.capillarytech.com
intouch.capillary.co.in
unsubscribe.capillarytech.com
apac.oldapi.capillarytech.com
static.incrm.ccsharingan.capillarytech.com
api.capillary.co.in
dlr.incrm.cc.capillarytech.com
intouch.capillarytech.com
newapi.capillary.co.in
incrm.ccsharingan.capillarytech.com
i.cplry.com
apac.sharingan.capillarytech.com
ri.capillary.co.in

Other certificates including the domain name capillarytech.com

(limited to 100 certificates)
vulcan-uat.global.dev.intouch.capillarytech.com
fdus-56.freshdesk.com
support.doctricks.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
helpdesk.appareluae.com
support.nature.com
support.nature.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
sni.cloudflaressl.com
*.capillarytech.com
*.capillarytech.com
fdus-56.freshdesk.com
*.capillarytech.com
*.capillarytech.com
helpdesk.appareluae.com
dev.rewardsplus.capillarytech.com
support.nature.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
*.capillarytech.com
fsus-24.freshservice.com
*.capillarytech.com
fdus-56.freshdesk.com
support.nature.com
capillarytech.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
helpdesk.appareluae.com
helpdesk.appareluae.com
apac.api.capillarytech.com
helpdesk.appareluae.com
helpdesk.appareluae.com
fsus-24.freshservice.com
*.capillarytech.com
helpdesk.appareluae.com
apac2.api.capillarytech.com
dev.rewardsplus.capillarytech.com
capillarytech.com
apac2-lms.capillarytech.com
marketing.capillarytech.com
support.doctricks.com
sgcrm.cctools.capillarytech.com
apac2.api.capillarytech.com
status.capillarytech.com
helpdesk.appareluae.com
tools-a-crm-tatacrm.cc.capillarytech.com
getdemo.capillarytech.com
status.qtplatform.com
tools-a-crm-crm-nightly-new.cc.capillarytech.com
support.doctricks.com
status.qtplatform.com
apac.api.capillarytech.com
eu.intouch.capillarytech.com
glue-a-crm-uscrm.cc.capillarytech.com
assist.capillarytech.com
helpdesk.appareluae.com
apac.api.capillarytech.com
helpdesk.appareluae.com
apac.api.capillarytech.com
capillarytech.com
getdemo.capillarytech.com
support.nature.com
glue-jsvt-crm-crm-nightly-new.cc.capillarytech.com
fsus-24.freshservice.com
getdemo.capillarytech.com
*.capillarytech.com
helpdesk.appareluae.com
*.capillarytech.com
survey.capillarytech.com
mapp-crm-nightly-new.api.capillarytech.com
support.nature.com
support.nature.com
helpdesk.appareluae.com
helpdesk.appareluae.com
fdus-56.freshdesk.com
solutions-a-crm-uscrm.cc.capillarytech.com
capillarytech.com
intouch-a-crm-crm-nightly-new.cc.capillarytech.com
getdemo.capillarytech.com
*.capillarytech.com
*.capillarytech.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
tms1-ota-status.bbpos.com
nsadmin-a-crm-uscrm.cc.capillarytech.com
helpdesk.appareluae.com
*.capillarytech.com
ecom-assist.capillarytech.com
eu.intouch.capillarytech.com
helpdesk.appareluae.com
*.capillarytech.com
eu.intouch.capillarytech.com
intouch-a-crm-uscrm.cc.capillarytech.com
fsus-24.freshservice.com
*.capillarytech.com
support.doctricks.com
*.capillarytech.com
fdus-56.freshdesk.com

Certificate

The complete raw certificate details for apac.api.capillarytech.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGDHzQuENtYrrpYovxMp
bqctn0AvCbaK5x5DoOEULnX9XTquarNyvOMZluA/HQuaLbgiXHn6Mouh8mCOllZU
WoGzcXBdGWEkeD1f6+/5AI50FQsJZ/bRP8aXVgMw3SM67XVPvUFhFUfqADCmPTKg
cMhb1oMKFlr9RjHdj39D+A0Jd6nu4Ti9fiSVHlDZFP/4c4Q0J8BXR0KFYKXKaVgW
YNECkf+Phhwg1fiLSH87QM3ewTvRijEVb8Ona/KF5FHctU1BGb1pCpd7N4VZwnzd
NsY6SU8ckILFeyrgOge4wCqMzDcOsCduql+WFKWBIGXKbe0PDH81cmSJwgpuMGX4
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15232592989527074557410030182896776400
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apac.api.capillarytech.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21760712683852409911005264241476320280799239183187700370978638878505291249870578610062296048061052011957729321521752905871190533727817860603860589398883576318706149931657753020123169194571960398881406305070741800713123415165344799899780644141783255944378525248505692314231733516423385805976504924916805939862712463719678961160217477200556097995448432924692327968571526587563055677974805667135070797992824988701306222052808212856884402310209201517033673157947036112104030106502863290329270278877108674577459392960052389799398556497487969914257186063489922790727554610883365207438850596578896344448911995812352866252979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c0f83b22d43ff8240befe0bd8ef6ed4bf1a42fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (646 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.api.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delvreports.capillary.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storecare.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.static.sharingan.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soc.capillary.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac-apigateway.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unsubscribe.capillary.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.survey.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.intouch.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac-s3wrapper.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intouch.capillary.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unsubscribe.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.oldapi.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.incrm.ccsharingan.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.capillary.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlr.incrm.cc.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intouch.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newapi.capillary.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incrm.ccsharingan.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i.cplry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.sharingan.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ri.capillary.co.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009fc58d7d1b03bf53f8d53fd34efa55ac63a96519d747811f6d14348f63038ff93244f5c2a9e6a6006d35446a3c18d7d69e8473797546c7b239d05869c763bc3b95ecdf3d82bc14529db9a707383c910c982386811777e595cc6084605cd8e419b3f380834006207b795fc0796018e0c0f61aac098a5ccccc8b5e399e2125ce7ab4fb6bb8e17065b822b8cf98c8545cf8ee7d507e4e0dce763807d483b4874f0bd35568133bb2769296097593fffa01f1f05fbd2704ab8cd8a983ccfe7226b3f9ca31d9b1d13e4d3fe5bd3d2fea6f65cadcba5e79584adc1312961d876e30a0d9bbe51d72253a7e03b6f7d3b7e2a76e558ab45bb8d41a9da71cce930ba52d66bb