apacvalley.valmont.com

- Valmont Industries, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:38:2d:50:49:eb:41:02:e2:b0:e3:15:bd:11:f2:90 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Valmont Industries, Inc.

Organization: Valmont Industries, Inc.
State / Province: Nebraska
Locality: Valley
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:38:2d:50:49:eb:41:02:e2:b0:e3:15:bd:11:f2:90
Serial Number (int): 6937827672564505469650136283963585168
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 1e:70:35:b9:26:a6:5a:9a:cc:37:98:f9:de:51:ec:48:b7:88:4e:93
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 7f:08:4b:fe:f6:f4:d1:55:f2:93:7a:94:84:c9:af:e7:94:cd:97:4e
Fingerprint (sha256): 72:16:15:22:40:df:b9:d1:1a:27:0c:21:cf:d3:84:88:73:c0:13:14:52:e0:da:43:55:13:59:50:80:97:55:e4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate apacvalley.valmont.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apacvalley.valmont.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apacvalley.valmont.com

Other certificates including the domain name valmont.com

(limited to 100 certificates)
fsoma.valmont.com
securemail.valmont.com
valmont.com
valmontux.valmonttest.com
weblync-na.valmont.com
ps.valmont.com
stage.valmont.com
vendortest.valmont.com
vendortest.valmont.com
web.valmont.com
valmont.com
valmont.com
emeavpn.valmont.com
web.valmont.com
webs4b-na.valmont.com
fs.valmont.com
*.valmont.com
vo.valmont.com
fs.valmont.com
securemail.valmont.com
webmail.valmont.com
apacvpn.valmont.com
usomadccppmpub1.valmont.com
valmont.com
VALDC1-W7210.valmont.com
VALDC2-W7210.valmont.com
ocs.valmont.com
guestwifi.valmont.com
webmail.valmont.com
valmont.com
v2o.valmont.com
webmail.valmont.com
valmontux.valmonttest.com
webs4b-na.valmont.com
usomadcvpn.valmont.com
web.valmont.com
valmontvpn.valmont.com
webmail.valmont.com
ocs.valmont.com
web.valmont.com
webmail.valmont.com
valleytest.valmont.com
v2otest.valmont.com
CHM01-W7030.valmont.com
APACVALLEYTEST.VALMONT.COM
webs4b-na.valmont.com
mdevbasestation.valmont.com
*.valmont.com
valmontvpn2.valmont.com
vdm.valmont.com
vdm.valmont.com
v2o.valmont.com
valmont.com
valmont.com
vdm.valmont.com
UTLWEB.VALMONT.COM
fs.valmont.com
webs4b-na.valmont.com
ps.valmont.com
usomadccppmpub1.valmont.com
valleytest.valmont.com
web.valmont.com
cwa.valmont.com
vo.valmont.com
ocs.valmont.com
valucbe01.valmont.com
*.valmont.com
v2o.valmont.com
s4baccess-na.valmont.com
vo.valmont.com
cwa.valmont.com
pstesttmp.valmont.com
mdevbasestation.valmont.com
testcpqapi.valmont.com
CHM02-W7030.valmont.com
fsoma.valmont.com
mobility.valmont.com
v2otest.valmont.com
USOMADCOSAS.na.valmont.com
mysite.valmont.com
profpntmgr.valmont.com
emeavpn.valmont.com
webmail.valmont.com
tsg.valmont.com
fs.valmont.com
valmont.com
v2otest.valmont.com
s4baccess-na.valmont.com
valmontvpn2.valmont.com
apacvalley.valmont.com
emeavpn.valmont.com
pstesttmp.valmont.com
webmail.valmont.com
vdm.valmont.com
CHM02-W7030.valmont.com
valmontvpn.valmont.com
webmail.valmont.com
mysite.valmont.com
v2o.valmont.com
webmail.valmont.com

Certificate

The complete raw certificate details for apacvalley.valmont.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tuPFoXqXlj2WhxhYq05
APTeEbi9GLanIu2BN4mc7jA8CqMIEGf35GWubTlM2PoCFb3SrAZ1+Oh1rjjftCPN
ajgxaQtFjd0DQNU4pAyjCBPXkYW3SDef4SOKa2+6LQ8NZ5HHtkcqGffIbHzeD/bx
D6Btn3nn7KumWAO44Qx/BqmP5A/cs0T/wHMdMkur+4cb4Q64KGjRWbT8rvLVsOJc
Z8FhcERnFt6kdNv26moGllBtrnEgdxPMQoNx3j4QxzzPf6nIMSbjGsJwm1Oa4cRe
YSAdwRlKXTybHJLNhS46XkcUCkXzoQQVwiXymIHL9uumcWt3ARI3ZJPFi6x8vO6F
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6937827672564505469650136283963585168
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nebraska'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Valley'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Valmont Industries, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apacvalley.valmont.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27628219029869234822704191234403946978024978352069430474708805873005309665354339900893931311220890589768670584054504750458569332963427119550864769227560242593872588642226079951556165584160858319546958337455199191867675467666592216513432266595744068880900658781846463413653692063098785034272795473675732050016315731353957585057626383697517616319088321927022272427889944667664009462075280481817502299738056914376022237910703462630462762206651830799895906727219231885887050001042145022421090193585287968224129910300988998637392559966520854900061876562223097684980969016261465742772982145740638160317864928146870697362867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e7035b926a65a9acc3798f9de51ec48b7884e93
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apacvalley.valmont.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c1bed00e900000403004730450220126ea084061e664386dc82640803d6e009b9d7f727bfce4570de1fd6c3800a00022100dc2e393fdb74f1066c7f457fd151bd07b27cc5c4e08bf21434e1827a758edefa00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c1bed00a40000040300473045022100f75831ca0bc70423a0ccf57ae832074e72e072425da081b110539820777dc97502204511d80e4cef5f06ca26de93eb5ea6ae524b6957b7ed73c83ab3d14d39ce7dd8007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018c1bed00870000040300483046022100806a7c5e7c8a733add2f43b4551da19127cb80c3b3f4e1cdaa25368a622d3a67022100b240b007cab94a60b0f997b040f75be417f02b8e3b383a3b8f4f62609bdded78
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009627696c8082241b966d40aae3899b28b0610430c47cd84edd08d1b1ee82d7116f9706b3522a93390cee6a62172aff14c0dd4b6663a2e997330a5e97def8cb5b04a6251ff5692f10e0d6c5d2eca28932cfe574fd4f22712b3a094e0cceb3bbdc63d0a53f4d567f2268c065771ab4984c143dee16e4e9137f66a57a1812f443950ef39166f8aa90866316acc30bbbc4114ec86d1ca5b981c5a0d0cd691f44a378de7cafcef84815fb29ebbb0d164d59018f3f5d6e9c849f93879af807e01f9f52ab1cebcc88a3462fb6786668be3f56f804deb236734a905d1e5183867d91426bee789dae4af2122a81d0bb563fd8df38f5b423ca7b6fb0462ecb6d066eafad57