buddybank.com

- UniCredit S.p.A. -

Issued by Actalis Organization Validated Server CA G3

About this certificate

This digital certificate with serial number 45:05:13:07:18:9a:7b:62:a0:ae:59:f8:6a:8d:82:eb was issued on by Actalis S.p.A..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UniCredit S.p.A.

Organization: UniCredit S.p.A.
State / Province: Milano
Locality: Milano
Country: IT

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 45:05:13:07:18:9a:7b:62:a0:ae:59:f8:6a:8d:82:eb
Serial Number (int): 91743079121445873832463295141259346667
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 94:ff:68:90:7a:f6:7f:67:4e:72:8e:84:f6:ed:0a:6c:73:63:4e:26
AuthorityKeyId: 9f:8a:b1:b5:f1:b1:de:82:f4:27:7c:be:88:cd:de:a9:43:81:a3:4b

Fingerprint (sha1): 1b:ac:26:ea:e5:5b:fe:fc:3e:7c:18:0f:ea:52:df:55:32:28:9e:20
Fingerprint (sha256): 6e:23:10:ca:9f:16:5b:d8:2d:c6:cf:4e:e8:50:e2:7f:c4:68:01:ac:8f:f0:c8:a5:10:b8:7e:53:b3:73:21:87

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-authovg3

Revocation information

OCSP Server: http://ocsp09.actalis.it/VA/AUTHOV-G3
CRL Distribution Point: http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL

Check the revocation status for certificate buddybank.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for buddybank.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.buddybank.com
buddybank.it
buddybank.com
www.buddybank.it

Other certificates including the domain name buddybank.com

(limited to 100 certificates)
www.buddyunicredit.it
sipedge.unicreditgroup.eu
sipedge.unicreditgroup.eu
www.buddybank.com
api.buddybank.com
www.buddy-q0.intranet.unicredit.eu
sipedge.unicreditgroup.eu
meetRP.unicreditgroup.eu
meetRP.unicreditgroup.eu
sipedge.unicreditgroup.eu
uat.unicredit.eu
www.buddybank.com
liveperson-uat.buddybank.com
uat.unicredit.eu
meetRP.unicreditgroup.eu
www.buddyunicredit.it
SIPextIT.unicreditgroup.eu
www.buddybank.com
meetRP.unicreditgroup.eu
meetRP.unicreditgroup.eu
meetRP.unicreditgroup.eu
api.buddybank.com
sipedge.unicreditgroup.eu
meetRP.unicreditgroup.eu
meetRP.unicreditgroup.eu
uat.unicredit.eu
meetRP.unicreditgroup.eu
www.buddybank.com
sipedge.unicreditgroup.eu
www.buddybank.com
buddybank.com
sipedge.unicreditgroup.eu
www.buddybank.com
www.buddybank.com
liveperson.buddybank.com
www.buddybank.com
sipedge.unicreditgroup.eu
www.buddybank.com
api-uat.buddybank.com
meetRP.unicreditgroup.eu
api.buddybank.com
sipedge.unicreditgroup.eu
sipedge.unicreditgroup.eu
www.buddybank.com
sipedge.unicreditgroup.eu
meetRP.unicreditgroup.eu
sipedgeit.unicreditgroup.eu
SIPextIT.unicreditgroup.eu
www.buddybank.com
sipedge.unicreditgroup.eu
meetRP.unicreditgroup.eu
meetRP.unicreditgroup.eu
www.buddyunicredit.it
www.buddyunicredit.it
meetRP.unicreditgroup.eu
www.buddybank.com
meetRP.unicreditgroup.eu
www.buddybank.com
www.buddybank.com
www.buddybank.com
*.cloud.buddybank.com
meetRP.unicreditgroup.eu

Certificate

The complete raw certificate details for buddybank.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltgmwdFi03tqKYpfGWqk
qd8nCtuf878WDwS1RP77RHrajlkLzmekYeO1/GmDttiFO9Kkut8L11iADwB3+IkW
jBsqREOV6gJFmiJpTh53NJZw5Z4a+iU34YRjPrio3xgTda6Vw0VtloWshf1tP0Zh
OV38ql44w8kWecaKEFTW01xj8HQ6YX2icva6qIIN2dJje2Dshrp6aHakU46/44vj
sdFPmoEUzWeIrgHTpeYCt5JWolTo4Rl3LEkXYLbbjBhLTxAfJPoQedIX6dvrGrXn
rNFVP3P3Pha1TpcLnoVhtuAs4VvOMzZL5tomewkPII5aGtV6BaxtEtITk0s9zin1
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 91743079121445873832463295141259346667
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Organization Validated Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-20 09:27:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-20 09:27:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniCredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'buddybank.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19042333970344699157052051954891174825149435524834018899176020049354752217909708852931462680223999688696513669422178406017876005131666903749412642802069893898862189735760018332941325897106743897412580524810920699128908406352306954523130384746083656332531157780242199140507655732668759515283076513922642984410257457381496466924753522340252251248109726239266418500786535238524215807955276915869016035968199072794915619138274877179841004827197990514850194884487676311513741398353517050241224041237367181819136940462804034716701074977893181462121709535104255421863955758799973775226465321236413003335669343689995513886187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9f8ab1b5f1b1de82f4277cbe88cddea94381a34b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-authovg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp09.actalis.it/VA/AUTHOV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buddybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buddybank.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buddybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buddybank.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							94ff68907af67f674e728e84f6ed0a6c73634e26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0018d22df08fe766168ec5440dc851f7f7a3f5538c39e972003aa91048b7b7c6a2cdf04fe8cd3cc76fc98e4d49b22a599fe7e0705417e199eb5ea8f2b12560125f01af67caf4631488fd2949065fd26e9a5fca3ede07d1b1020d2984d7850f3c5e009568b120578d31068d3fc8cac8071fab3ba83a76f3c4c6fa9c09c3541621bd6a5ea2adb956ac1fe366937a7d21dc90498616d01db12cd502be8d3ea032aee5f0ad4a57f734a0f44555e1b85f3aa3ea210cd54eace29c1435aad3be9a86f21aa761d92e064add11ba54ac64a5a6eef854b194b07ef4e433597ddfcf1a117e6b527b6d25da6907c17ea423f622eea82618b0ebd165e4350de15749785c58444c55168a96a8e06f37dccc64c59d9ae19fa0977bf7e8e3542059fd3ec9b7fb2026ca01a610c44c1e758cac67f90a5492de40e227ac536e59f0d6804b30b14dcd957043ff4c2f16445bf8f5cbc701737e46684bb93d8adcda6c2ca1c8b87801f0feecd5725a8e11f6ee4ad6d1213c3defdf2e27dc92c466fa4587b956b835c8d67a9d87f9ed94b957e294744a5685f798478e8f33264f90a846d0489e6f72f6e0c0362033483a22f9c2a8ad481f72e787893cf5bd8b391f724a9668578862a2a194e010ab9512a80c7ca99f655abd9442ee3d8ba4e21e76b001576a662bb7a200543fff25107dd11fc0456dc383205421bfcc8d6d3c0ae3e1083fbce5054fe7e81a