infact-hom.societegenerale.cga.fr

- Societe Generale SA -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 01:bc:4c:24:44:85:42:07:23:e9:85:47:ab:cc:5a:04:fb:cf:eb:5f was issued on by QuoVadis Limited.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Societe Generale SA

Organization: Societe Generale SA
Organization unit: 552120222
State / Province: Île-de-France
Locality: Paris
Country: FR

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 01:bc:4c:24:44:85:42:07:23:e9:85:47:ab:cc:5a:04:fb:cf:eb:5f
Serial Number (int): 9908163743123038007676361509613417671326427999
Serial Number lenght: 153 bits, 20 octets

SubjectKeyId: 2f:6e:f3:db:fd:c0:85:95:00:6f:b6:74:8c:d5:b0:cc:fd:45:c3:10
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 0d:12:e4:35:fc:6b:3f:4b:e6:ea:fc:c6:72:bd:dd:e4:cc:70:a9:70
Fingerprint (sha256): 85:84:52:e6:fb:84:84:1f:20:53:66:3c:4f:ba:78:0b:ff:86:c8:be:64:08:8f:86:a5:e1:92:4b:88:27:ac:a5

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate infact-hom.societegenerale.cga.fr

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for infact-hom.societegenerale.cga.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

infact-hom.societegenerale.cga.fr
infact-hom.bfcoi.cga.fr
infact-factoring-hom.societegenerale.com
infact-hom.etoile.cga.fr
infact-hom.afactorcontact.com
mesremisesdailly-hom.groupecdn.fr
infact-oi-factoring-hom.societegenerale.com
infact-hom.cgaoi.cga.fr

Other certificates including the domain name cga.fr

(limited to 100 certificates)
infact.factoring.societegenerale.fr
factoring.societegenerale.com
accessws-hom.cga.fr
edge.im.cga.fr
bypass.cga.fr
portail-pca.factoring.societegenerale.com
infact.factoring.societegenerale.fr
accessnewapc.cga.fr
portail.factoring.societegenerale.com
scf-solutions.cga.fr
infact-hom.societegenerale.cga.fr
infact.factoring.societegenerale.fr
infact.factoring.societegenerale.fr
access.cga.fr
infact.factoring.societegenerale.fr
access.cga.fr
infact.factoring.societegenerale.fr
CGA.FR
infact-hom.societegenerale.cga.fr
CGA.FR
infact-hom.societegenerale.cga.fr
infact-hom.societegenerale.cga.fr
infact-hom.factoring.societegenerale.fr
accessws.cga.fr
portail-pca.cga.fr
factoring.societegenerale.com
sso.cga.fr
portail-byod.factoring.societegenerale.com
infact-hom.societegenerale.cga.fr
access-pca.cga.fr
accesssa.cga.fr
accessws.cga.fr
infact-hom.societegenerale.cga.FR
edge.im.cga.fr
access-pca.cga.fr
infact.factoring.societegenerale.fr
accessnewapc.cga.fr
factoring.societegenerale.com
bypass-hom.cga.fr
accessmdm.cga.fr
portail.factoring.societegenerale.com
access-pca.cga.fr
infact.factoring.societegenerale.fr
portail-byod.cga.fr
infact-hom.societegenerale.cga.fr
edge.im.cga.fr
portail.cga.fr
infact-hom.societegenerale.cga.fr
infact.factoring.societegenerale.fr
accessws-hom.cga.fr
www.cga.fr
accessws.cga.fr
portail-crise.factoring.societegenerale.com
infact.factoring.societegenerale.fr
portail-byod.factoring.societegenerale.com
infact.factoring.societegenerale.fr
factoring.societegenerale.com
infact.factoring.societegenerale.fr
infact.factoring.societegenerale.fr
accesssa.cga.fr
portail-crise.cga.fr
infact-hom.factoring.societegenerale.fr
CGA.FR
infact-hom.societegenerale.cga.fr
accessnewmdm.cga.fr
accessmdm.cga.fr
www.cga.fr
accessmdm.cga.fr
infact.factoring.societegenerale.fr
infact-hom.societegenerale.cga.fr
scf-solutions.cga.fr
portail-crise.cga.fr
edge.im.factoring.societegenerale.com
edge.im.cga.fr
edge.im.factoring.societegenerale.com
portail-byod.cga.fr
accessmdm.cga.fr
infact.factoring.societegenerale.fr
portail.factoring.societegenerale.com
scf-solutions.cga.fr
accessws-hom.cga.fr
infact-hom.societegenerale.cga.fr
accessnewmdm.cga.fr
infact-hom.societegenerale.cga.fr
infact.factoring.societegenerale.fr
infact-hom.societegenerale.cga.fr
edge.im.cga.fr
scf-solutions.cga.fr
sso.cga.fr

Certificate

The complete raw certificate details for infact-hom.societegenerale.cga.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmUrDxK+6+4LFQwYg19g
68lGOO0uvE5aO+ZuNLb1qzs3BHzaN16iHRSPQWqNy4BR8xZN1sgVXjGctEhLyQhM
yFp8jsPlIXumuz+lib6BmXDeEy4flRkpmkyzpUis35b5tfjYtOHWds8S8edmEND1
hmLoSUwzQ23n6nB2DGv9lScEQr97BUv79QZlPezsUUHPz3e9ViMzhZ7MHHYJOLIp
QNP5VWMPepXPd8FWxWlfCVXZxbVvz+s1QD9RkTkEAIL/owZfzTU5qsiuX8/TM+X5
GCwzU4sYMHlB+0gxkF0IcJ3U+7+c5tIDclHc+Ov5dacqkDvk77XLKvE5/G9GifJf
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9908163743123038007676361509613417671326427999
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 17:06:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-27 17:16:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Societe Generale SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '552120222'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'infact-hom.societegenerale.cga.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22520306182109078506561798263769274231207883974244160615325910434453836691862052809541724743535310654353354134687833094319762799467481366577417307694821275933493059792813011571660212279484081852513219079009827312730858341965397775542796295543424731158764062325396567105881502011069614199918511333623393245293103413766074905571572711631489857916661784690118142711911566332414166306150805067859609534239515804486853845824987452173406326110667379147366748131132873789851885194527876304056370569868074261333152690703968198315324871354722015920600973141936784401184162851583776092179657702582711005234423160546536675499809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (268 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infact-hom.societegenerale.cga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infact-hom.bfcoi.cga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infact-factoring-hom.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infact-hom.etoile.cga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infact-hom.afactorcontact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesremisesdailly-hom.groupecdn.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infact-oi-factoring-hom.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infact-hom.cgaoi.cga.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6ef3dbfdc08595006fb6748cd5b0ccfd45c310
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00c5fc41b46c781b45c7fec6dbfd39d26dbe3c9c3da3bb6d42cbedef51ffccbf11821c0166d4ecbf35d1ddd08f9e16df47a85134cc4dab15d4baf8583ac4cbf2fd0e0b4e7546ba341216bf02650ad994fbe7bb98749fabc56db26aee095f105d46773d695308866ab8ccccbeee161323f57066257885f8c2bee07be24096ae10ae92a4df08b72a856c9de8d18228d1039b83f7b5c9db014ab5f71f9f5f5895a0098ca81f8bd7ba1d962ddd521a9f01ea4deecb290b9854304447fec2216d7e8a87cf3ba11ef783105af792e75014324e552ee3121845ed632fcb933f154885fcd956fb1d9793ad36fb492e150cf3c825444d40949d5613ff534fae342a41330d1a93b2a6c06400b52fbab1eaf64f9eb262a06b5dc17b3de9d2cfccf4f81cfc3ee3f17dfa235a12457b5b552b44f1f91eae8eff89a780074b47f088f22e03d90fd57baca74692e971e1977748c4c0df77aeedcfee03a897a684046e7fad48ed3b32a14ba9e8bb0d937e8a446db5c1c279126e68882067f9601f3774ca4ea4718518cf3342598460e64857af9cd00c3e9aaec80161f5064b86c5f8876a98e3a2e8b1870551aa6f98723f554d176e6312e2a2a918979caa3842daebe68df1f8ccc2cf77afbe5962bd1e6bf9c04024a2bd2352b37a439da66e271ccf4b95ceb610c16e7e37a7cf217603703dd16d790b521a75caf82bd7e0338147f10aff3f92b52cd5