sv.doheny.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0d:92:0f:fb:25:6a:89:12:24:f2:89:53:7c:96:fa:c3 was issued on by Amazon.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sv.doheny.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:92:0f:fb:25:6a:89:12:24:f2:89:53:7c:96:fa:c3
Serial Number (int): 18038363420542575836100845460908341955
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f6:d7:7f:2e:1f:be:ed:fb:c7:91:09:9b:39:3b:e9:33:79:e4:37:31
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 53:b9:cf:94:1c:cd:72:77:55:07:c7:ca:51:7a:78:b5:82:39:27:62
Fingerprint (sha256): 75:f4:c9:44:7c:c7:29:66:5c:ee:dc:b6:1e:e9:d2:9b:21:d2:d5:bb:74:27:e5:67:63:1b:57:b8:02:7d:ed:08

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate sv.doheny.com

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sv.doheny.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sv.doheny.com
sv.anntaylor.com
sv.verabradley.com
sv.metlifepetinsurance.com
sv.kansascitysteaks.com
sv.dearfoams.com
sv.duckfeetusa.com
sv.spoonflower.com
sv.reebok.com
sv.iccoin.com
sv.buyglobelifetrustedcoverage.com
sv.readyrefresh.com
sv.brooksbrothers.com
sv.negativeunderwear.com
sv.dxl.com
sv.bjs.com
sv.karenkane.com
sv.nobullproject.com
sv.valleyvet.com
sv.valuecityfurniture.com
sv.aeropostale.com
sv.littlewordsproject.com
sv.mrsfields.com
sv.luckybrand.com
sv.loft.com
sv.baggallini.com
sv.globelifeinsurance.com
sv.bountyhunterwine.com

Other certificates including the domain name doheny.com

(limited to 100 certificates)
www.doheny.com
mail.doheny.com
em.doheny.com
enews.doheny.com
sni.cloudflaressl.com
sv.doheny.com
staging3.doheny.com
sv.doheny.com
sni.cloudflaressl.com
sv.doheny.com
sv.doheny.com
www.doheny.com
mail.doheny.com
sv.doheny.com
sni.cloudflaressl.com
sv.doheny.com
ssl440158.cloudflaressl.com
sni.cloudflaressl.com
sv.doheny.com
sv.doheny.com
mail.doheny.com
sv.doheny.com
sv.doheny.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ssl440160.cloudflaressl.com
sv.doheny.com
sv.doheny.com
sv.doheny.com
sni.cloudflaressl.com
sv.doheny.com
ssl440159.cloudflaressl.com
staging2.doheny.com
mail.doheny.com
sv.doheny.com
sv.doheny.com
sv.doheny.com
sv.doheny.com
doheny.com
sni.cloudflaressl.com
sv.doheny.com
sv.doheny.com
sv.doheny.com
sv.doheny.com
www.doheny.com
enews.doheny.com
staging3.doheny.com
sv.doheny.com
sv.doheny.com
sv.doheny.com
sv.doheny.com
sv.doheny.com
mail.doheny.com
sv.doheny.com
enews.doheny.com
www.doheny.com
sv.doheny.com
em.doheny.com
sni.cloudflaressl.com
www.doheny.com
sv.doheny.com
www.doheny.com
sv.doheny.com
sv.doheny.com
enews.doheny.com
sv.doheny.com
sv.doheny.com
sv.doheny.com
sv.doheny.com
sv.doheny.com
staging2.doheny.com
enews.doheny.com
sv.doheny.com
sv.doheny.com
enews.doheny.com
sni.cloudflaressl.com
sv.doheny.com
sv.doheny.com
sv.doheny.com
enews.doheny.com
sv.doheny.com
em.doheny.com
ssl440160.cloudflaressl.com
doheny.com
sni.cloudflaressl.com
sv.doheny.com
ssl440160.cloudflaressl.com
sv.doheny.com
ssl440160.cloudflaressl.com
www.doheny.com
sv.doheny.com
sv.doheny.com
staging.doheny.com
ssl440159.cloudflaressl.com
sv.doheny.com
sv.doheny.com
staging.doheny.com
ssl440158.cloudflaressl.com
enews.doheny.com
sv.doheny.com

Certificate

The complete raw certificate details for sv.doheny.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIgaBOI2oLvyfm5lK6lT
+LlkNaIDdSjWUKeS7A8zQuctU7hkjeE/RsRM6RM+eJu2VGgz3uWtOmkzNoK/6uKh
dwC4i5ASc28qlfnM7H0iX76WhcFKgyO4y9HSA0WOXsc5SP+M7D/UQDHS1Uda86VT
vXuX58oluZ0TiRhXlf6i23bXwL35qKUPV2OhnyreiTnHy1y68WQdyYucudxe2t6+
/10syroFQMzOgJ46M+kN7E/DQuL6F6ZoYjqxGGF1lj/PwF5SCt/qcd66GglYu5Qq
2BApRrf2RNpyKK0x4DfOl7qHpqUqkvOtNeNXQmOBZeOU1VGmpAbd9iVzJL07ZTty
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18038363420542575836100845460908341955
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sv.doheny.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24809821991942507050158577189014198714411159518675056627106014272288051626181217459679974576746833706309248560147550698536461269575666168923607009082702210870891069299482399925518761413257686006682679773776914360922065838304501749532843968500124545851889128816706529305775329879445157132370230596110380156719252929818751586991169886160261296181499610438338847236105077288821179610883921772220173426744442028772558954976795452058407053966877059522426428437887332592971675411128577547190712295955039204259255390285423388717113622213438919825285208310111098289836908057043926963014923679082498926088025452644083647083123
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6d77f2e1fbeedfbc791099b393be93379e43731
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (581 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.doheny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.anntaylor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.verabradley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.metlifepetinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.kansascitysteaks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.dearfoams.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.duckfeetusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.spoonflower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.reebok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.iccoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.buyglobelifetrustedcoverage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.readyrefresh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.brooksbrothers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.negativeunderwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.bjs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.karenkane.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.nobullproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.valleyvet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.valuecityfurniture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.aeropostale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.littlewordsproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.mrsfields.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.luckybrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.loft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.baggallini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.globelifeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sv.bountyhunterwine.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00012802cc1f957888af09a077ab11b6ca682530e2fd42b1490801f66375d58fd535e0c06ead4885805e04ba491efb8de8aff7f359fa02626da234e539e30e3c3e39aab828a87d84be400381330ff8d42d7aed36fad21b3fbe16de1b88959ad42a88e386671d0d4a76e2e4cb9de03ffd35cc5b6f5c2e6a5af0a175f2766e679af1e27b23baf889fdb5b3d4089b36b11746ea44e63e167cdb181f45f05ecb95678da621d84910ebb435657d297446824936bd0ded77a026871af4841f1325c245f895b6486266e6664e5411e3924edf2176978c2e14d18f12c7ffa2d8c50b2392d849a890eff4dd3de8cdb491ce4d0e484fc8b8148ec8b355e81f236da41b259351