vhsigdi1ci.sap.jewels.com

- Signet Group Services US Inc -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 6f:10:e7:ac:44:bd:06:bc:bb:74:2f:96:b5:88:d0:51 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Signet Group Services US Inc

Organization: Signet Group Services US Inc
State / Province: Ohio
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 6f:10:e7:ac:44:bd:06:bc:bb:74:2f:96:b5:88:d0:51
Serial Number (int): 147632083166998114587165955706292064337
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: e2:2a:c4:17:a2:c2:ed:39:8a:38:56:e2:67:de:64:f0:48:f9:80:c7
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 4d:0b:cc:af:c4:ae:ff:9b:a6:14:e0:7e:ff:47:3e:cf:f3:a8:c8:08
Fingerprint (sha256): 68:c2:f9:6a:0e:60:08:50:eb:2d:37:7e:22:da:16:dc:d1:01:b2:0e:54:e5:c9:6b:6e:1f:f7:3c:fa:c4:0f:49

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate vhsigdi1ci.sap.jewels.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vhsigdi1ci.sap.jewels.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vhsigdi1ci.sap.jewels.com
www.vhsigdi1ci.sap.jewels.com

Other certificates including the domain name jewels.com

(limited to 100 certificates)
qlqw10app00.jewels.com
srsprod.jewels.com
imperva.com
rmm.test.cloud.jewels.com
signet-identity-provider-test.jewels.com
plcosatadm01.jewels.com
credithub-test.azusnc-test.jewels.com
workordersapi-dev.jewels.com
sapbpcuxp.jewels.com
gp-akr.jewels.com
uluf20app00.jewels.com
skuserviceapi.dev.cloud.jewels.com
sigctbanner.jewels.com
signet-cltin-prod-informatica-alb.cltin.cloud.jewels.com
sapfinance.jewels.com
*.jewels.com
jira.jewels.com
dldf10app00.jewels.com
credithub-dev.azusnc-test.jewels.com
credithub-test.azusnc-test.jewels.com
web01-sigcapdev.jewels.com
archiva.jewels.com
vpn.jewels.com
skuserviceapi.dev.cloud.jewels.com
plpb20app00.jewels.com
guest.jewels.com
PWAKSEPAPP01.jewels.com
credpmtcalc-dev.jewels.com
srsprod.jewels.com
credpmtcalc-dev.jewels.com
cc.stage.cloud.jewels.com
signethierarchyprovider.jewels.com
skuserviceapi.dev.cloud.jewels.com
worswebdev.jewels.com
vhsigdi1ci.sap.jewels.com
dldw10app00.jewels.com
worswebuat.jewels.com
srsvendorportal.jewels.com
perf-creditapis.jewels.com
vhsigdi1ci.sap.jewels.com
signet-identity-provider-prod.jewels.com
data.jewels.com
mypc.jewels.com
*.jewels.com
PWAKSEPAPP01.jewels.com
api4.jewels.com
vhsigdi1ci.sap.jewels.com
xconnect.jewels.com
dwakivrweb01.jewels.com
skuserviceapi.dev.cloud.jewels.com
workordersapi.jewels.com
vpn.jewels.com
worsweb.jewels.com
uluw20app01.jewels.com
sappouxp.jewels.com
kay.ercol.test.cloud.jewels.com
uk-alt.ecesb.test.cloud.jewels.com
test.sslvpn.jewels.com
credpmtcalc-prod.jewels.com
sjim-asa-vpn.jewels.com
signet-cltin-dev-inform-int-alb.cltin.dev.cloud.jewels.com
skuserviceapi.dev.cloud.jewels.com
fed01.jewels.com
creditapis.jewels.com
CAR-C1-ISE-1.jewels.com
pacoclearpass01.jewels.com
credithub-test.azusnc-test.jewels.com
api4dev.zalecorp.com
xconnect.jewels.com
dlde10app00.jewels.com
www.kay.com
posapigateway-perf.jewels.com
dlde10app00.jewels.com
edu-sams-interface.store-ops.cloud.jewels.com
saps4huxp.jewels.com
plpf20app00.jewels.com
sjim-asa-vpn.jewels.com
stage-repair.jewels.com
credithub-dev.azusnc-test.jewels.com
vpn.jewels.com
PWAKRPAAPP01.jewels.com
rhesprodsat02.jewels.com
signetquota.cloud.jewels.com
cpayprod.jewels.com
uk-queue.ecesb.stage.cloud.jewels.com
skuserviceapi.dev.cloud.jewels.com
www.kay.com
qlqw20app00.jewels.com
signetanalyticsservice.jewels.com
test.sslvpn.zalecorp.com
pwakslwnapp01.jewels.com
sma.jewels.com
skuserviceapi.dev.cloud.jewels.com
signetwarrantyapp.jewels.com
cc.dev.cloud.jewels.com
sigctbanner.jewels.com
cc.test.cloud.jewels.com
pwakivrweb02.jewels.com
travelevents-dev.jewels.com
vhsigdi1ci.sap.jewels.com

Certificate

The complete raw certificate details for vhsigdi1ci.sap.jewels.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 147632083166998114587165955706292064337
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Signet Group Services US Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vhsigdi1ci.sap.jewels.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 594750358064137948593263433145454954108072420160811147671855083346658631675942763794063684146601740205372200791269165911868133885199796368893939532297362687813687784675604922172498818346715500412710477845771251467639629972441687079829711639168012207597436642859989674122028063842249666608486193804907914811449693668869464470700155496178776837181260344300449867344834129728603333694466408893416556194381071223299193073540101463383874989638936605235974649589965195494283247054464286146067439512735430625700162630693881343953195369851631529747178705474150031516059682355981252184989140909467037254063439820204099542144899926198703507504384193265924511282340609132545494894277181603722328485817030163755425498530608673974265212885757889451997876709987076046676449812788758548978735885461608844422197503916555837156608811655103065554365792700226561209949388842540929858918788953663567883190523327711733856242756085567636599485248511120086719138086896712662937373222298133482671025463006702832600697992568066915639655290893639736308384486336239971981166715539348479086542866438515454182572382194893914967845614894674844512739697634466094599044654844511864651046826908637484411726157437079124758465080405422180125019966508518442729053438301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e22ac417a2c2ed398a3856e267de64f048f980c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vhsigdi1ci.sap.jewels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vhsigdi1ci.sap.jewels.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002dac0510b963d88645feaff750845b378eb1eee2d15e971913eb3980628e78df1d8bcef7afc354cc923ae79d766457429e5a19db10481978f8e42bdead319d8f7a1e0610d9bc90000e23706aaaf1a3804497faed603da5fd141e617846e81c8f179f3ce724f88ae67cf9fe4762aa60f80f1506ccbfc130a9410586c6ac8133bef13e1f9e0c3d4c9956742d93be7f39cdceb7b896da5ca237269a5aec311c888be5da6a1732d936bbcccc2bf6694cc990ee2d2627fa745e5d964f1daf3aeed023e64d0dd3183f80b81dd6c3cd413345af28eb30b79b203f55b49b4af3b19bceb21383911b034c4f9bf1c3939439f147bf8983cefc5be1f5283bab8494badd6b9d