*.lectra.com

- LECTRA SA -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0f:ee:68:d3:de:4e:b7:96:6d:f3:af:35:fe:89:c7:03 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

LECTRA SA

Organization: LECTRA SA
Organization unit: DSI Infrastructure
State / Province: Gironde
Locality: Cestas
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:ee:68:d3:de:4e:b7:96:6d:f3:af:35:fe:89:c7:03
Serial Number (int): 21176312745646932714916078132415547139
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 55:4d:d2:de:67:e1:8a:c3:1e:52:df:9f:be:ec:80:b3:3b:a9:9e:fa
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 8d:cf:c8:ff:5f:d9:8d:a9:a5:20:da:06:72:c4:0c:5c:2f:76:0b:9c
Fingerprint (sha256): 5d:71:a1:ab:96:03:97:90:6f:22:55:18:cc:fb:da:b7:07:ab:7c:91:c3:65:df:e8:9d:b4:ad:28:e0:5d:ca:eb

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.lectra.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.lectra.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.lectra.com
lectra.com

Other certificates including the domain name lectra.com

(limited to 100 certificates)
service.augustusmartin.co.uk
*.lectra.com
e-suppliers.lectra.com
update.lectra.com
elearning.lectra.com
fno-rddev.lectra.com
ithelp.mjevansgroup.co.uk
*.lectra.com
service.augustusmartin.co.uk
dam.lectra.com
service.augustusmartin.co.uk
supportittest3.lectra.com
service.augustusmartin.co.uk
itsupport.b-gen.co.uk
net.lectra.com
ithelpdesk.dccoilireland.com
helpdesk.ebusco.com
soft-serveur.lectra.com
fno-rddev.lectra.com
sip.lectra.com
*.lectra.com
helpdesk.bettybarclay.com
elearning.lectra.com
supportittest3.lectra.com
ithelpdesk.dccoilireland.com
servicedesk.mvhomes.org.uk
support.cantabrialabs.com
ithelpdesk.liverpoolairport.com
itsupport.b-gen.co.uk
*.lectra.com
update.lectra.com
mas.aleaticalabs.com
helpdesk.groupe-r.ch
service.augustusmartin.co.uk
support.oprisk.hu
*.lectra.com
files.lectra.com
service.augustusmartin.co.uk
elearning.lectra.com
itsupport.b-gen.co.uk
elearning.lectra.com
service.augustusmartin.co.uk
servicedesk.mvhomes.org.uk
operational-excellence.lectra.com
*.lectra.com
dam.lectra.com
wcsip.lectra.com
autodiscover.lectra.com
origin-prod-www.lectra.com
*.lectra.com
ithelpdesk.dccoilireland.com
webspace.lectra.com
*.cloudservices.lectra.com
ndchelpdesk.ndc.nato.int
*.lectra.com
update.lectra.com
*.lectra.com
helpdesk.prosapient.com
help.amiculum.biz
helpdesk.ebusco.com
*.lectra.com
support.cantabrialabs.com
go2.lectra.com
service.augustusmartin.co.uk
support.oprisk.hu
*.plm.lectra.com
*.cloudservices.lectra.com
service.augustusmartin.co.uk
cutter-report.lectra.com
helpdesk.groupe-r.ch
*.lectra.com
helpdesk.ebusco.com
update.lectra.com
*.lectra.com
update.lectra.com
download.lectra.com
servicedesk.nilgosc.org.uk
origin-prod-www.lectra.com
*.xchange.lectra.com
itsupport.b-gen.co.uk
modarisv8.lectra.com
go2.lectra.com
helpdesk.ebusco.com
*.lectra.com
*.lectra.com
modarisv8.lectra.com
ithelpdesk.smartmanagedsolutions.com
service.augustusmartin.co.uk
soft-server.lectra.com
helpdesk.ebusco.com
ithelpdesk.smartmanagedsolutions.com
lab-apple.lectra.com
*.lectra.com
servicedesk.mvhomes.org.uk
*.lectra.com
supportittest3.lectra.com
ithelpdesk.liverpoolairport.com
mas.aleaticalabs.com
lab-innovation.lectra.com
go.lectra.com

Certificate

The complete raw certificate details for *.lectra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSDq9My+wmEYqD+UHV19
PBSc7JzKO9L9HtStMsk/sZk4fZYqpmGZvCi+M65REefTG76in9wA3F3jfC13bn/j
H7PkuquD4P4zJi4XNhMGH0gMNslvV/0sXScaiwZ+1sM18krYgbISreGKGJJqab0J
zljd3ZDYeoxN9kU9jFhBOzzNJzXWRa312DivnJ7q/TDSZcnSVyFQIkGcDH1mmqUT
1WUW3oX68vrseODl7+MaR33h9hp9AL84r7ioaFN3TcJQYLHDXRQ3lBlexwt+6028
9Sn1RV6ISv9Mw4K9F0MR0YSKK0nr+9GYdadNwpn/OhCvaSxmSCCsiPpL1DVpGiC+
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21176312745646932714916078132415547139
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gironde'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cestas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LECTRA SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DSI Infrastructure'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lectra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20340599470643187910663810611978794969807553644775969949459856815613128034039668963089698349530500220252867177130295621688801953845796675682139485122415196148318864149550539168162663758774775519163569368160592133915091789409614133628206749430895744710345206589185760122725745570269941317932290143928682092562841945735834859748879792717055497040341597544174192913091355450114483752822119990415219182955125526766871518678939510094833172418839086087603299019793612867236925080892088113400430597689890166583276901683423404292435252497765544047832977812972112137879783997203662011592614079704754350716059177825851400044179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							554dd2de67e18ac31e52df9fbeec80b33ba99efa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lectra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lectra.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016ad5ae70260000040300473045022100b22acd2904b5a1f2033c53a0b87220cd1d8cc70cfb5985e1e2e6b48de3d6a97d022037f0d0a07994c2b40bd7e328cfdc13708bd665e1d4af300cde5bccb2ad9b9b5d0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016ad5ae6d2e00000403004730450220055d57e8cda8a90e10f0a0ed3663526f887a6ed4f3dea52555b8fb062276f2e7022100a43f30533804fad2c2c91093b15bb9fbc7c91be8cc017239064d80dc5ef9720c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003a8403ba24ac751d779628be571f709a8b61b14fa40ba2c71024100873290b0ae6b1957237b94c389b283182d8e702807227ce5c73f9324794b194d26de290ada91c054a38e3e141600c79487d4c8d19f33efb427196f9dc668bb1cbb8490e1969f6f86e6c4cd71888e37a0a741fff0cb99c1adba7e914b93bb77a971140aa05ccbd46822507e952d2041f639b4bef2b853599a85f237e050e46125ba3c1377733d1e041229a4d92a98bb738e1ab5b2bb82b9b1e1b2d286218e29e67a35a1701299d603ceca95b4fb175c059a05b2c247d121a2ea4e9c4448b334664c9efa4a00c738b958b48f6b53c329d145f0f714037d969b23a2517743680fc50c798db4b