eu.intouch.capillarytech.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 06:8f:11:14:09:88:97:55:3c:53:ac:3a:f3:94:c4:a5 was issued on by Amazon.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=eu.intouch.capillarytech.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:8f:11:14:09:88:97:55:3c:53:ac:3a:f3:94:c4:a5
Serial Number (int): 8718212813956981601505524513470989477
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3e:0e:11:94:ae:14:bb:ff:64:69:1c:2d:12:a6:b5:e2:2b:14:26:de
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 32:c9:b8:32:84:18:d6:6a:3a:29:45:69:cb:76:b3:89:6b:3f:9a:97
Fingerprint (sha256): 6b:ab:92:47:f5:1c:3c:25:85:62:0f:d1:e8:88:8a:e8:9e:14:87:14:af:76:5e:0b:f6:c9:2c:f6:69:b5:ee:f8

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate eu.intouch.capillarytech.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eu.intouch.capillarytech.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eu.intouch.capillarytech.com
e.cplry.com
eu.sharingan.capillarytech.com
eucrm.ccsharingan.capillarytech.com
eu.api.capillarytech.com
eu.static.sharingan.capillarytech.com
eu.storecare.capillarytech.com
eu.newapi.capillarytech.com
dlr.eucrm.cc.capillarytech.com
eu.survey.capillarytech.com
eu-api-cloudflaretesting.capillarytech.com
eu-auth-api.capillarytech.com
eu.unsubscribe.capillarytech.com
eu-api-gateway.capillarytech.com
eu.oldapi.capillarytech.com
api.capillary.eu
soceu.capillary.in
delvreports.capillary.eu
static.eucrm.ccsharingan.capillarytech.com
eu-s3-wrapper.capillarytech.com

Other certificates including the domain name capillarytech.com

(limited to 100 certificates)
vulcan-uat.global.dev.intouch.capillarytech.com
fdus-56.freshdesk.com
support.doctricks.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
helpdesk.appareluae.com
support.nature.com
support.nature.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
sni.cloudflaressl.com
*.capillarytech.com
*.capillarytech.com
fdus-56.freshdesk.com
*.capillarytech.com
*.capillarytech.com
helpdesk.appareluae.com
dev.rewardsplus.capillarytech.com
support.nature.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
*.capillarytech.com
fsus-24.freshservice.com
*.capillarytech.com
fdus-56.freshdesk.com
support.nature.com
capillarytech.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
helpdesk.appareluae.com
helpdesk.appareluae.com
apac.api.capillarytech.com
helpdesk.appareluae.com
helpdesk.appareluae.com
fsus-24.freshservice.com
*.capillarytech.com
helpdesk.appareluae.com
apac2.api.capillarytech.com
dev.rewardsplus.capillarytech.com
capillarytech.com
apac2-lms.capillarytech.com
marketing.capillarytech.com
support.doctricks.com
sgcrm.cctools.capillarytech.com
apac2.api.capillarytech.com
status.capillarytech.com
helpdesk.appareluae.com
tools-a-crm-tatacrm.cc.capillarytech.com
getdemo.capillarytech.com
status.qtplatform.com
tools-a-crm-crm-nightly-new.cc.capillarytech.com
support.doctricks.com
status.qtplatform.com
apac.api.capillarytech.com
eu.intouch.capillarytech.com
glue-a-crm-uscrm.cc.capillarytech.com
assist.capillarytech.com
helpdesk.appareluae.com
apac.api.capillarytech.com
helpdesk.appareluae.com
apac.api.capillarytech.com
capillarytech.com
getdemo.capillarytech.com
support.nature.com
glue-jsvt-crm-crm-nightly-new.cc.capillarytech.com
fsus-24.freshservice.com
getdemo.capillarytech.com
*.capillarytech.com
helpdesk.appareluae.com
*.capillarytech.com
survey.capillarytech.com
mapp-crm-nightly-new.api.capillarytech.com
support.nature.com
support.nature.com
helpdesk.appareluae.com
helpdesk.appareluae.com
fdus-56.freshdesk.com
solutions-a-crm-uscrm.cc.capillarytech.com
capillarytech.com
intouch-a-crm-crm-nightly-new.cc.capillarytech.com
getdemo.capillarytech.com
*.capillarytech.com
*.capillarytech.com
fdus-56.freshdesk.com
helpdesk.appareluae.com
tms1-ota-status.bbpos.com
nsadmin-a-crm-uscrm.cc.capillarytech.com
helpdesk.appareluae.com
*.capillarytech.com
ecom-assist.capillarytech.com
eu.intouch.capillarytech.com
helpdesk.appareluae.com
*.capillarytech.com
eu.intouch.capillarytech.com
intouch-a-crm-uscrm.cc.capillarytech.com
fsus-24.freshservice.com
*.capillarytech.com
support.doctricks.com
*.capillarytech.com
fdus-56.freshdesk.com

Certificate

The complete raw certificate details for eu.intouch.capillarytech.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ26ca10/hF9NLwE+975
tJZ7Rn2h3hUz7OU9CUbQcgUCVUa6cmpXCIEy2mJ75ga3KjmEgUk1cJOgwFDSMH6X
pn9PV+TBgKLAJhJm5cEdP8y9tkvWQ8/FkjgqPct3wIUB+pHFQKj8GGSn1XKMLZFm
gXkasJH9xFEmRZ5lQpw3aakycv9jv4x/c3U/CadjCTl0eavHAzXD5uRlUXleOYje
GPfoBBuUBBYIHRx/ZnC1OgiZ4wk4dyizZofgiRPxeo7fZBoMVV0O+fO2fwDWo+6i
q/3U0a7EvZ+Caq3IsPNiygltrZvJx+oFKpu1gOPMXffGX8xeaaaK4xOGppHyN73q
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8718212813956981601505524513470989477
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eu.intouch.capillarytech.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22926911921000421172187660927097028621672072631702377261722297801847525456058949341351529170271569595637368571127766377258027924690820349951978264517677823757153765163372573313257539617339220211544399249681505391581129536921002923342658219961843224186899957743160972888842233045639661172905569863520919447806653129441897192670694342954085813309302833299687161355672939764940994461401484399329226591139958750160019728025035885069921155048533940317269328390446336801482082130801571694669163203547336215098120527778985097634401658532837585631404222903714500105370798443022412666157205118540264317066850708259565115140613
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e0e1194ae14bbff64691c2d12a6b5e22b1426de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (616 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.intouch.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.cplry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.sharingan.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eucrm.ccsharingan.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.api.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.static.sharingan.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.storecare.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.newapi.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlr.eucrm.cc.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.survey.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-api-cloudflaretesting.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-auth-api.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.unsubscribe.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-api-gateway.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.oldapi.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.capillary.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soceu.capillary.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delvreports.capillary.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.eucrm.ccsharingan.capillarytech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-s3-wrapper.capillarytech.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0057ed6165cb0fdb916076d940b0a727476ee5663310c96d782ad35c9e349eb7f8e617e8174ac38d4da677a5d571fbc6bb1d9f7df226bd379ad80037bd620dc9ed7cdd1b9f635dae229b93f988542faac2fa035447e4338865fbd9a6cdb8b27bf9cfecc303c55b71157aa20ef8779930389cf5cdc2ae40901b5566e15aca7157ee89eb1a7b15d3b61c20c1ce91a5bb846641d5d0153a6dd9d56eb853603fd67e0d9c0fb3734d42ee80790ec347c24eff81ee95959e61b4cc5b7f39b49a7773fece33dc17b2ba78b2ef95df4203ac385728d68590a592e36503694fb2de072f8d94967b922e97690393f8cc6da88530f91c8ae1e11f40c93c56793429dcf9802052