www.ait.ie

- Athlone Institute of Technology -

Issued by GEANT eScience SSL CA 4

About this certificate

This digital certificate with serial number 7b:08:d9:b8:d9:2b:8a:d6:79:bf:02:a1:1b:e6:25:f2 was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Athlone Institute of Technology

Organization: Athlone Institute of Technology
Locality: Athlone
Country: IE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:08:d9:b8:d9:2b:8a:d6:79:bf:02:a1:1b:e6:25:f2
Serial Number (int): 163540997784489712609742536393527535090
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ab:9c:9f:57:d2:0e:81:af:8e:e3:96:f6:79:0f:60:76:35:ee:c5:21
AuthorityKeyId: 9a:2b:8a:22:d6:8d:0c:c0:2a:a5:6f:64:33:3f:96:60:67:15:1d:b2

Fingerprint (sha1): ea:29:7f:3d:b5:38:67:86:73:58:44:69:5e:d4:95:96:98:84:8e:74
Fingerprint (sha256): 8a:0c:ee:c8:e3:f4:52:40:e1:8f:e7:af:57:59:c4:28:a6:58:9a:8f:b9:4b:be:d7:53:34:60:f8:ee:25:b3:33

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTeScienceSSLCA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTeScienceSSLCA4.crl

Check the revocation status for certificate www.ait.ie

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ait.ie

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ait.ie

Other certificates including the domain name ait.ie

(limited to 100 certificates)
www.mri.ait.ie
mail.ait.ie
collaboration.ait.ie
modmgrtest.ait.ie
sip.ait.ie
elearning.ait.ie
mail.ait.ie
inplace.ait.ie
autodiscover.ait.ie
*.elearning.ait.ie
libmain.ait.ie
mail.ait.ie

timetable.ait.ie
inplacedev.ait.ie
cpd.ait.ie
library.ait.ie
elearning2014.ait.ie
edocs.ait.ie
elearning.ait.ie
forti.ait.ie
libsearch.ait.ie
eduroam.ait.ie
elearning.ait.ie
www.ait.ie
owa.ait.ie
modmgr.ait.ie
aitstage.ait.ie
idp.ait.ie
apps.ait.ie
vlablive.ait.ie
elearning2015.ait.ie
mail.ait.ie
www.bri.ait.ie
ammt.ait.ie
ait.ie
aitmoodle.ait.ie
adfs.ait.ie
timetable.ait.ie
sri.ait.ie
stu-projects.ait.ie
timetable.ait.ie
elearning.ait.ie
libmain.ait.ie
amm.ait.ie
aitcard.ait.ie
libmain.ait.ie
apps.ait.ie
forti.ait.ie
vlab.ait.ie
onlineexams.ait.ie
mail.ait.ie
extranet.ait.ie
*.ezproxy.ait.ie
AN CHEIM COMPUTER SERVICES
aitmoodle.ait.ie
careers.ait.ie
weblive.ait.ie
tus.ie
elearningm2.ait.ie
libmain.ait.ie
weblive.ait.ie
aitv-bol-f1.staffnet.ait.ie
jobfair.lu
vlab.ait.ie

jobfair.lu
moodlenew.ait.ie
elearning.ait.ie
www.ait.ie
fs.ait.ie
mail.ait.ie
*.ait.ie
fortianalyzer.ait.ie
idp.ait.ie
aitmoodle2019.ait.ie
aitcard.ait.ie
www.ait.ie
vlablive.ait.ie
2019.elearning.ait.ie
www.ait.ie
2019.elearning.ait.ie
www.ait.ie
www.ait.ie
AN CHEIM COMPUTER SERVICES
careers.ait.ie
aitcard.ait.ie
AITP-EDUROAM-A2.ait.ie
fs.ait.ie
jobfair.lu
modmgr.ait.ie
helpdesk.ait.ie
idp.ait.ie
aitcard.ait.ie
2019.elearning.ait.ie
tus.ie
idp.ait.ie
fs.ait.ie
helpdesk.ait.ie
elearning.ait.ie

Certificate

The complete raw certificate details for www.ait.ie in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrhPH2DNpUjGJnOiIHLk
5/dtj8p2f6NWYKdAd8SVoWFid12JHjVoqqzhVCS9p2Kpgzm1GkYwCNwdNSGw5Zeo
YKdF0g/B9ifY27DeM0H04mo08c8eBluGFUg7sV/fgqb/WfD92qrhXixEqvrBnjA2
1OrpJcWBaPfWui0AevPBDuM5z2ZAARI1hFRLTgJCxecGg6shcI7pt9xxLNWHsSnU
PA1R5Xo3KZf7GjbBhm3KIQTgYrVBIYZPsUUHr1DXqDdjixjykoTG78I7eXkzcICq
wvj27nj1FI0R5Pqj7gnnIh7pFXouf2GRyh3NEBHWUDNtQafGK/ESm5nzebuRl2dm
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 163540997784489712609742536393527535090
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT eScience SSL CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'org'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'terena'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'tcs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Athlone'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Athlone Institute of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ait.ie'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22561304475003814949771896788260534394386866828899929164937586931830712831844048503356712199159329361471976746028324342915605050667430031253360132748130919252697387381703768085920130252042623476481642949397042114116978745132414366556992694262291640598544187596799467018634311657979492502805043333769047091804954484000831480430368449400513590982574478658033663072549346767400260477424026417102691272409047565804080573471988618303086695556221573118996145763312385871139402546924414060425411814196043027131771907765971075891496612080861758320006882433807025109219274687776640848923984589431594282736539987874873707292281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9a2b8a22d68d0cc02aa56f64333f966067151db2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab9c9f57d20e81af8ee396f6790f607635eec521
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.3.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.3.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTeScienceSSLCA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTeScienceSSLCA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ait.ie'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0025161cc7d73bcf136c50b65527c0b8624e579f077d283f5bc2bbf17fc7e594e2860061071eceb12fa8698a4b39cd21b2df53256478dfc3bf1d64b816ed45cf47a1fc6ebc28a58271f517ee37bf74c11f7d825de85c965f1e736db0add5e08bfc36b6010512c4638a8d520803a1edbd499c3965f3bec1c3ba6794d40c881629607a8d6c619814ebc4fa9231609e2ab755d52a96adf0147ca35292ef9aaea4467e575a1b2250dc775266802de874c26f077f620511ea3d30d09c09a4fa6428d3983a948f900e2ae62eebcd6423cb137e47deff15f93bcbca45dfe9d94d5c25d657b82f031fb32ef90fd669c1b568d7c405d9d20d3de2298f9d16449889f727ba274cb4ad8d09d692787450f631d14ba935f95b82a080ca64a0dd8611114cab40824954a47f6e3c03b867dc9d5a3573103be5d459447c21396d91f67575deb35019507690e0c601ec6825127bd34a70b2ba6538e90e911bb02e7f65dda8cdca75ad9aaa78e172c7a4827db8a2add1b207f6e0c1744cf1114166fb7aa3bd26845ca4fba64e312e39cc59872ebde002bd82d24f4e7703ebcb13a142a23e3f3663737a033a489c1d673b48d8a9a2f5f628ff6d2cf20c092bba6973af599c69cc7beb274713d2aa809f0a124c535c346bc2527f85bbd228c4f8ce9421c68457a53f654503e36c5af6ba061e93cabd26a7003a63f2b7c6a0ffc3171c0adaef2b9b03b4e3