www.nkt.com

Issued by RapidSSL Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0a:b6:11:fb:a2:55:fd:05:8b:32:c1:38:4e:13:06:97 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nkt.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:b6:11:fb:a2:55:fd:05:8b:32:c1:38:4e:13:06:97
Serial Number (int): 14237642723575075662885886787255994007
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 21:ae:0d:70:c3:9d:75:b1:bd:1d:8d:3b:7d:92:9d:fd:b4:e3:66:52
AuthorityKeyId: f0:9c:85:fd:a2:9f:7d:8f:c9:68:bb:d5:d4:89:4d:1d:be:d3:90:ff

Fingerprint (sha1): e9:3f:1e:3c:f5:db:f4:76:a8:f7:b0:7c:7f:ac:e6:3d:6e:2f:3c:9d
Fingerprint (sha256): 6e:31:e6:f2:bc:99:db:60:2e:54:a6:fd:cb:3d:d0:99:8d:7f:57:d4:42:06:17:4b:9f:db:18:13:6f:49:39:b0

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.nkt.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nkt.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nkt.com
nkt.com

Other certificates including the domain name nkt.com

(limited to 100 certificates)
accessories.nkt.com
www.sapnpi.nkt.com
leapfrog-ssl-4.gcs-web.com
helpdesk.matisa.ch
leapfrog-ssl-4.gcs-web.com
careers.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
accessories.nkt.com
itservicedesk.poundland.co.uk
accessories.nkt.com
leapfrog-ssl-4.gcs-web.com
telecom.nkt.com
support.sodra.com
railway.nkt.com
accessories.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
servicedesk.bergtoys.com
www.careers.nkt.com
helpdesk.matisa.ch
www.test-git.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
accessories.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
*.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
servicedesk.bergtoys.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
www.nkt.com
telecom.nkt.com
leapfrog-ssl-4.gcs-web.com
itservicedesk.poundland.co.uk
leapfrog-ssl-4.gcs-web.com
helpdesk.acrotec.ch
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
*.se.nkt.com
leapfrog-ssl-4.gcs-web.com
itservicedesk.poundland.co.uk
www.git.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
www.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
maximo-test.nkt.com
itdesk.nyanheroes.com
www.careers.nkt.com
helpdesk.acrotec.ch
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
support.autogroup.gr
leapfrog-ssl-4.gcs-web.com
careers.nkt.com
leapfrog-ssl-4.gcs-web.com
helpdesk.matisa.ch
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
*.hvc.nkt.com
servicedesk.ecm.software
*.nkt.com
servicedesk.bergtoys.com
helpdesk.acrotec.ch
careers.nkt.com
www.nkt.com
itdesk.nyanheroes.com
helpdesk.matisa.ch
leapfrog-ssl-4.gcs-web.com
itdesk.nyanheroes.com
*.hvc.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
helpdesk.acrotec.ch
leapfrog-ssl-4.gcs-web.com
helpdesk.acrotec.ch
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
www.sip.nktcables.com
www.nkt.com

Certificate

The complete raw certificate details for www.nkt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAroOl8YVuWxhFvw+92Xp0
7O00V0M7W3IbPO0Ubvz9FbmJT1yegSIyilvH1EnzLjweVSof/gspQlsMWs9VK+vL
xt9kpOJsLqRyiNeYwshAqXRUaVxwKXyQA91dAE9wCj9UMNHP/ZvXKfk3RnVCeN0D
HQlrddD7wUvvE2Ihpu1YXP7CisW/MvZc7oO97fft9ltKw8X8Vjk6Gwm1nXmgcKgC
8o22oLgnQdXR9bTMR/HtiErnOUOSig0gWzoHO4qo8NVsUcQPJprlrh3WkxS3i63v
FnMIizIECfucGNbY3Sf5fh/5pz9D/uYsMOzHzKY43WuTZY+OuN3bCkp3EnldNC09
qoVeaN0QKsf0SLmOJS8efgynw0mFn1ex7JTHX7N9HIVSXptU1j3q6oHM8tJLhpba
lSD/0AtdPKxwhh4VqxkidnT0wNosmSpGMx+zNr9hZCmwdKoItFba/JG0IzQ7j9gZ
H5RwdIUL8sAT0782IG0Endm7sQDSlY06z4EjbV2+lFrXJayoadu2VSg1yGOMH1yZ
q+oC8V2dGuIyhTOAA7EXKa8ZFAXsQpJ7i2DIUcW4bwiu+R27BGNDSnhS93c/tkpZ
jS8Cs1b89QUhhE5Li2vVt+4Q2v0LLvWVwBGd5Pk74122Ll6rEaVqRfKxHsSn34x2
4kXyLKnftpRaki/Yh2uLPLsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14237642723575075662885886787255994007
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nkt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 711956028248785044670627687890585748970949364691321292787544454578254251922928856115537053456389346919568830582763043158190579376747733409678030354384052894599653961717103338645284202571011457022561740022452053673363358617305226267941211563569807577217723680804577456206561834246583402323926147517483461921172190114556019680870067748243951945942892197761450380685009628651177456018609483399236438651244583521966688788304229609981727477816041643502724656439531408463932378956870771056098698704114721808448251155743962943292203476791532803054358740039768112831220070475459021967243527307967775245783327917359806016755417927296864686379045176564087625805491941323855494392268125513680532987831376234009338340741641580850468481204223243405591902697442829083894842342141146941089183687650795653201714961669980754303511910761986107251667814262495381986854178789349861585238851731252451076418357670846990493783879433710693791703185927856634099183984211034130670692063901252240605151757906541609549164055510519598533922894347819583926462925261201906563489092749731413109737243621081222391430266945844591420333979186131412079141158312730212710985698659609123057334245925770301937908692967852320955349682776491281170234471620481354009894665403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f09c85fda29f7d8fc968bbd5d4894d1dbed390ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							21ae0d70c39d75b1bd1d8d3b7d929dfdb4e36652
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nkt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00a4edd9961ca2c6930041bac04822b55b47d7ea5a52144cb66d943debb3b85362c7ecf8f38fa64b90ac69683a9d51ce2a27d97ce5455ea1e2439620a1d1eb140e2fb36fb3f932a5febc2bf74f3a7717bef8b0ff81237bdf0d6337e657be87ffcace7e9fceca8a51a0e9c297dc535da23aee505c2267b8b430fcd08b1f108722ad68223c5a8be31a9f02b64cf3de74778c62a96f9566966ccbf5c3eb0d7c2e81acb786c6df44a59abf35f64e5da18c877c07483c102f56ba9127a0163a6ab5394171dcc34eed353b1e3db6656f0c3c9f0132e3db7ba0d5baf105dbd0b7dac77e59ab4d56028a50e9f901f4fc5c8675a6ef3e49c3efab37df936d2900b48b52eef4ae674e1c6d4c99e4ac7e810d28e0c39662bfcc78990599ba46e610903d1210ecd445680301ab22ef5200d3df65d7b1c8883e5f5d85a90768687f4717faf32b87ffd80f0a03aad0131ebcbe570c36f4aaed7b0e9b01107f4dc35d1f48077aad545fffaec8e0c8834a85bf9eab6cebb1f21bd12b75730dc6d68f919c31e94b34ed2180cc7c5b46467469b58a4a0497cbe1f49de29c02e63d1f80fc4c4e79875ffe6cf9e04acff68072b55dd00e5882ebfb52ca443385ce6aeb2668805e4f177331b49065a9a5be3cab466b875bbdcc70bbc58816ed93e4e89b3d7e852f5eb826596a22b110ff2e79fec489dce78efe4dd975c29246b3522d42f9b54d422eafabd3