b-0.hexagon-cdn.com

- Sift Science, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 04:35:12:5a:ec:43:62:41:ed:21:16:eb:56:c1:08:80 was issued on by DigiCert Inc.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sift Science, Inc.

Organization: Sift Science, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:35:12:5a:ec:43:62:41:ed:21:16:eb:56:c1:08:80
Serial Number (int): 5592476003669425725577625067403151488
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: da:ef:74:ed:56:a7:49:82:7c:55:b3:d0:22:07:ec:d4:4a:1b:ed:20
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 84:9c:20:9b:33:6b:17:d9:8a:fc:02:9b:a3:19:51:e2:e1:af:cc:35
Fingerprint (sha256): 6a:56:14:fc:1e:c2:13:c3:e1:c2:4f:cb:3c:57:56:00:ca:e9:aa:d2:ff:9b:e7:9c:1e:aa:bf:4e:84:4d:a3:96

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate b-0.hexagon-cdn.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for b-0.hexagon-cdn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b-0.hexagon-cdn.com
camel.headfarming.com
assets.experticity.com
sift.opentable.com
sift.opentable.ie
sift.opentable.nl
sift.opentable.com.au
ss.musthird.com
ss.musthird.cn
insight.blockchain.com
sift.opentable.co.uk
sift.opentable.jp
sift.opentable.com.mx
sift.opentable.de
siftjs.razorpay.com
sbc.digitalocean.com
ss.costargroup.com
bilder11.markt.de

Other certificates including the domain name hexagon-cdn.com

(limited to 100 certificates)
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.prod.gcp.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.prod.gcp.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com
b-0.hexagon-cdn.com

Certificate

The complete raw certificate details for b-0.hexagon-cdn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbdcSQxUHkZFpKQacqLc
ojlGZgwbMNTpF1oK9TgKBQTOMCH3H+Ohgleowj+MAXmt/MREEP5cnBnFuPMdhuCR
sD/wsR6Var7eNzLhpdfLX3noI1QKICr3zwI7v3j0d5s/sRndeq3PAVsjmcoZRt8H
V/KnipKiyBFv27D8MB0imWb2blBeG97BmkkGCDye/b/Plfz7zzi1MIE1TgnIUZTu
SK3qOaVuMP3ycEE28KYJbyMAjQ2hJnwNjzy5MwuwSsqq9BnIjOn6CzHTMsIqQjAO
haEsJFQWfqYe/5AnuOz9CI17h1P8fvUkeKINSaWe5B60+gZn02eJSiN7xmMmWh7Q
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5592476003669425725577625067403151488
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sift Science, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'b-0.hexagon-cdn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23949458065960816680687299547056855283594642946849301980265992993319306640715992862095270901057757952549969474976672383543272699009896592391053914267335799651295866314423254632773393703558215080777697105578765945151234167540807551099057900943148819319747644478847309672364900172420888097294708471344417898792494040448979431387607251653648071198076529275134557773636868976175801559161883042697017652837295978523877376244718481966738456325106010570901445964899250641487444738311135367419303385004670677172214286972829358349415623845833034378184827432117788740159538728269186579656970560601054367316588218830645649920113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							daef74ed56a749827c55b3d02207ecd44a1bed20
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (375 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-0.hexagon-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camel.headfarming.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.experticity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sift.opentable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sift.opentable.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sift.opentable.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sift.opentable.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss.musthird.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss.musthird.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight.blockchain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sift.opentable.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sift.opentable.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sift.opentable.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sift.opentable.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siftjs.razorpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbc.digitalocean.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss.costargroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bilder11.markt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006a3d699f88281824a8d2097a9ce22cc064eaa0fe480b5a2330a868afdaf2292a755b40ed2f99466b55259ba23ee0bbfbdc1776bcccc0bd3684d0e23e069e34ee8e27077fff07084b23a9e41e3d7e28e01ce7b49863bd4af7b5f859bd873ef06a574b9bc6ade553bb47953c86f8934ba0e89a760da5c1d14ae9eefe2b56b2511c368b808992716deefbbb9ae42fd513910ecb615b8988f0ad19ffc0218efe3bd4ba25a7b67bc2087aa7c99a27a5c1240e3a5ea12ef72cfd56894ebf053f321bdc753943d21ff76bffff4eacbfd9672adf4baecc08f346e7886b13ae19453a36ad96cc74cb6136e39631e44f1653ae4055e6229c4ce7f9247f2f989102c1c68e70