roche.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:46:2e:db:33:04:3f:f3:d7:37:50:4c:b6:f6:9a:a5:a1:20 was issued on by Let's Encrypt.

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=roche.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:46:2e:db:33:04:3f:f3:d7:37:50:4c:b6:f6:9a:a5:a1:20
Serial Number (int): 285218906115304152416926455339013145731360
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e6:9c:d8:41:a7:35:9f:b9:e4:1f:7c:36:16:57:a0:c9:f5:88:b9:b5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 71:92:fd:0c:25:20:a6:d5:06:2f:c2:ae:ce:d4:49:8f:29:da:b3:d4
Fingerprint (sha256): 60:84:a9:32:b2:70:58:62:2b:31:6a:d0:81:94:eb:ea:f9:d9:7f:8e:99:8a:b6:af:ed:5c:ed:ac:36:be:41:3c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate roche.no

35

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for roche.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

foundationmedicine-cac.com
foundationmedicine.bg
foundationmedicine.com.au
foundationmedicine.dk
foundationmedicine.lv
latamrochepressday.com
nimblegen.com
roche-cac.com
roche-diagnostics.fr
roche.at
roche.ba
roche.bg
roche.by
roche.co.id
roche.co.uk
roche.co.za
roche.com.bd
roche.com.mx
roche.com.pe
roche.com.uy
roche.ee
roche.es
roche.ge
roche.ie
roche.it
roche.lt
roche.mk
roche.no
roche.pl
roche.ro
roche.si
roche.ua
rocheinteract.com.au
rochepharmaprocurement.com
tiempodevivir.com.co

Other certificates including the domain name roche.no

(limited to 100 certificates)
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
roche.no
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
roche.no
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
roche.no
cert2.roche.com
cert2.roche.com
sni.cloudflaressl.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
gazyva.com.au
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
gazyva.com.au
cert2.roche.com
sni.cloudflaressl.com
gazyva.com.au
roche.no
gazyva.com.au
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
cert2.roche.com
roche.no
cert2.roche.com
gazyva.com.au

Certificate

The complete raw certificate details for roche.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285218906115304152416926455339013145731360
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 08:01:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-25 08:01:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roche.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 935583009415571917324000932565099482941132170923508398132954782816990244094204783222139784151655486088161220500552188408960420686804862197427511807013790799134594845838249328276713497316386554281553369511386093336204727241540255513959800757882575929016425686966052832169620961753472422362296711571579768227453799931690946148839802203393596583976186202191434427989383975681363751220159664832047144413970498668226652738857125558817837454005659950667349142458677495071630856734915696674175723931998196775812088829916967584883076726964347753493178156062678998756315171873415835704820836735213677990202541083227960209137459467350907692331877419047185701731667216690329003334030008242626027856186137852971536246863093397014616684656696425281853855038151726004593967314471680269523780864844847498916148153409100861244321042662316564094595424645702568996574944709468131218630287611524016768188732870502320961550052692262116225633503555149618149382824641128504991207524334154893696740979480493720328145855089826800009248602682734544144536740801909153771187608978345215358401145403850412869760734711664924763259857829362244918746202616657038073507628307177052298230389765010318988614753087538507656239179130116598465726793001377926706688493239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e69cd841a7359fb9e41f7c361657a0c9f588b9b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (531 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine-cac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundationmedicine.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latamrochepressday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nimblegen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-cac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche-diagnostics.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roche.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rocheinteract.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochepharmaprocurement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiempodevivir.com.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cd24f3e9d000004030046304402207ea3994fc56c7da117ac70bde7fa780547d35c0ccaacc69dcb770bcde2c399a00220456cf93fd29ba6395e9a6fe6f1d40a4952f5b9befd113ccb1bfbd4bf86d44258007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cd24f40730000040300473045022100e01088843c98899f8b887a6a02d11807cfddb5f4cce5f90dd2c67b0eae11795a02203ab26b846b4b950283830a610d3a5f73b30e8ce594cc8b0d1c35706b6eb233cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00606d93d156b96e254dab7eed5e74b1db4f0ad5729cf53ad7e25807fddaaa46380d85453de7f56365e71928c68d9dfb615fe16341121a1b7cd021e0ae749910f33c6c7c39ac4d228937e89086646ccb51b431aa86c3f5d7709ec7c00fc5f5e3b9d9cdc1e7cdfcce9d0c7f3683f8e8941a1b5c2ba6f83464ec54ef9116588efddffb4b74d056ddee2e62a775eb6c8114edd39ad185b50e216ea4ce5fdc0203068e7ed75760cb7eaf53a20a85fd4afc17be634608a3d9d2623214c82f1c655fba6204d75e435fc247d9ce94a688d911567b831ca2db6628f92d642af3e2b517328234b7409761f8a96fc0f4b46480729a5116ee5540ee2e60e43a41f0fe9d459deb