webmail.nycsca.org

- New York City School Construction Authority -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number da:48:8d:93:61:fd:18:27:00:00:00:00:50:ff:68:8b was issued on by Entrust, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

New York City School Construction Authority

Organization: New York City School Construction Authority
State / Province: New York
Locality: Long Island City
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): da:48:8d:93:61:fd:18:27:00:00:00:00:50:ff:68:8b
Serial Number (int): 290148419951546190605923118285231974539
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 8f:46:16:d6:0f:5b:31:5e:1b:a0:b7:88:30:23:85:e5:fd:56:4d:c7
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 98:b5:08:5a:8a:46:bd:35:82:f1:ee:a1:d3:54:f8:af:a8:c3:b3:9a
Fingerprint (sha256): 81:e9:10:21:38:f1:dd:96:4c:1a:9c:6c:bb:c6:e3:3f:46:cb:54:0c:c5:37:b3:ac:32:11:48:80:1a:a9:46:74

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate webmail.nycsca.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.nycsca.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.nycsca.org
autodiscover.nycsca.org
nycsca.org
relay.nycsca.org

Other certificates including the domain name nycsca.org

(limited to 100 certificates)
afstest.nycsca.org
smstest.nycsca.org
ifatest.nycsca.org
gethelp.nycsca.org
xtregtest.nycsca.org
uidev.nycsca.org
edocs.nycsca.org
adlds.nycsca.org
extwsdev.nycsca.org
extranet.nycsca.org
partnerstest.nycsca.org
msg.nycsca.org
erfp.nycsca.org
erfp.nycsca.org
dobusiness.nycsca.org
tobss.nycsca.org
partners.nycsca.org
scacsg.nycsca.org
bidset.nycsca.org
extwsdev.nycsca.org
cmwsprod.nycsca.org
ssrs.nycsca.org
msg.nycsca.org
partnerstest.nycsca.org
ifa.nycsca.org
extwsuat.nycsca.org
app.mylcm.com
extranetnew.nycsca.org
tk.nycsca.org
ifa.nycsca.org
erfpuat.nycsca.org
portal.nycsca.org
extranet.nycsca.org
cmwsprod.nycsca.org
tobss.nycsca.org
ifauat2016.nycsca.org
tobssuat.nycsca.org
dobusiness.nycsca.org
extwsuat.nycsca.org
laborlaw.nycsca.org
filepad.nycsca.org
adlds.nycsca.org
SCAENEC02.nycsca.org
dobusiness.nycsca.org
SCAENEC01.nycsca.org
laborlaw.nycsca.org
extranet.nycsca.org
partners.nycsca.org
tobss.nycsca.org
sda.nycsca.org
enfovdatest.nycsca.org
dobusiness.nycsca.org
webmail.nycsca.org
laborlaw.nycsca.org
xtregtest.nycsca.org
tobssuat.nycsca.org
adldstest.nycsca.org
Webmail.NYCSCA.ORG
ifaqa.nycsca.org
bidset.nycsca.org
ui.nycsca.org
partners.nycsca.org
smstest.nycsca.org
bidset.nycsca.org
cmwsprod.nycsca.org
ifauat.nycsca.org
portaluat.nycsca.org
tobss.nycsca.org
survey.nycsca.org
laborlaw.nycsca.org
ifa.nycsca.org
ifa.nycsca.org
filepad.nycsca.org
erfpuat.nycsca.org
bidsettest.nycsca.org
laborlaw.nycsca.org
erfp.nycsca.org
smstest.nycsca.org
laborlaw.nycsca.org
sts.nycsca.org
cmwstest.nycsca.org
extranet.nycsca.org
partners.nycsca.org
sitescheduling.nycsca.org
llis.nycsca.org
ifasync.nycsca.org
uiuat.nycsca.org
tobss.nycsca.org
www.nycsca.org
tobss.nycsca.org
dobusinesstest.nycsca.org
dobusiness.nycsca.org
extws.nycsca.org
webmail.nycsca.org
gcu.nycsca.org
webmail.nycsca.org
scacswfe01.nycsca.org
laborlaw.nycsca.org
scacsg.nycsca.org
scazlsrvuat01.nycsca.org

Certificate

The complete raw certificate details for webmail.nycsca.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndUaBqcb5IqhNaUYS5/X
CsvMIdqo86NQrgNRAKi9VbKqxK1wr0XnuOs4Srice2xyVaRDGqC1vgnBNzGZsyZs
VBRgfUeEEag1Kke/fOXRE6QLaNEOKzyClHAM3KKyjAQz3qjHYy2HjPDMUH4bAq5/
epkYgToXx13PVHZ6YuIb7QJ2o12iJd6sxwkEMBkls/hOCwQdp4LO5Fa6NfO9r+6M
rjIIcsmBxO6sE7ltX6jJ3uckyC2ge5x2lj2HJLmZX5D5A+BjegMY6NNabBu1I82U
zb0qR29yIqKvJ7kkjfWBiR0qiWqnE7FAKj67nr9RTeHT8t/6pzHjs4bq8ntqGx4n
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290148419951546190605923118285231974539
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-24 19:46:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-22 20:16:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Long Island City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York City School Construction Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.nycsca.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19924498226743365606570522680807087010356612730621457374888707878089077788259969662831208910041088702765833693188914308094822477850487336678833564964898951016374503881305883262502491148190364981684338957387210749626898261353946917216529877168943841992479324381968034738499375995901603476317066658354601503726483009920037939853607142553662128753978453194236281158018556138411530207712897620128217948765966711664291032401560962311521743462751895956448219001032273128581057470259552766318259833906708061294047246742881982314235242038110046123453495035522250104526955965429174482359803961268606937458029190326198843877267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.nycsca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nycsca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nycsca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relay.nycsca.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f4616d60f5b315e1ba0b788302385e5fd564dc7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b4fb25ab4efd4502d2adf9b2010b57eee1fc717f8451514e525e9d6d94acf89ae4d7645bc8e05995c7f24d051fc925c2b4e7d0722c5239aead944a1711a3a881bbe157fc5bc134c5d2ce99f3a0529d3530b0aabca44ec0ad3455583bd08408ff5691181274a0af10e069abb359a45df87331e9404f15dd9cba1b159b412c504110ab94cb3ed87a718e2f94ba4b37c057e8e93b7e39836690bdbd36db694d51a9bf97a4f1397b43830fbd43ca468807a7bec42915ab8eb848623774b47cebdd4b855749a76784faf67de61d8c89ea95bfa1244bb429bf95d5e6a8a0d35615e5da0e9954f2e4fa7ac2f5def50e6fc3349df5420ad2ebb70102e1a9f5de6d407c99