*.gfn.de

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 4b:f3:cf:65:61:94:e4:ee:46:c2:f8:76:f5:b9:9e:1f was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.gfn.de

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:f3:cf:65:61:94:e4:ee:46:c2:f8:76:f5:b9:9e:1f
Serial Number (int): 100958034311525071486949825682073034271
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b3:db:c7:11:de:47:9e:fb:4f:35:61:41:9d:48:0a:17:28:81:13:18
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 45:ea:b2:b9:dd:a2:08:fa:94:78:76:50:87:f6:84:99:a5:d1:aa:b3
Fingerprint (sha256): 8b:cb:b1:71:9d:ea:4b:d8:0f:61:6f:73:d8:86:f9:e5:c9:c7:57:fe:90:f6:9f:a2:69:ea:dc:a5:07:3b:40:32

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.gfn.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.gfn.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.gfn.de
gfn.de

Other certificates including the domain name gfn.de

(limited to 100 certificates)
*.gfn.de
www.mercedcapital.com
flexicon.space
d-pro.monsuivilogement.fr
www.bemote.works
old.hugo.eynard-home.fr
*.gfn.de
emails.webcat.app
jrguimarae.online
earthtimelines.com
leadin-preview.gfn.de
www.blacksapphiregoa.com
stevensonprice.com
4leaf.co.in
mail.gfn.de
smart.nilsh.ch
codemiro.com
www.windowtising.com
*.gfn.de
www.woodofmetal.com
qa-m.dlg1.app
asvntech.com
cancom-akademie.gfn.de
*.gfn.de
*.gfn.de
tallogsymboler.no
cancom-akademie.gfn.de
www.docode.se
seo3.gfn.de
swarm.work
www.gianhomes.ca
demo.medconference.com.br
hedonism.pl
www.igloo.property
lernplattform.gfn.de
dspot.studio
smart.nilsh.ch
qa-m.dlg1.app
sodexo.seguimiento.rayoapp.com
seo.gfn.de

Certificate

The complete raw certificate details for *.gfn.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHHTCCBgWgAwIBAgIQS/PPZWGU5O5Gwvh29bmeHzANBgkqhkiG9w0BAQsFADCB
jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD
Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB
MB4XDTIyMTAxODAwMDAwMFoXDTIzMTEwNDIzNTk1OVowEzERMA8GA1UEAwwIKi5n
Zm4uZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC3REelPlg8TlJH
E3TQNVezYWoCwpYB/3o6sBengoftXRlMTt9kq5kBXJa9PR5xPnlgF3DQX2IvY4Fi
i2pWcJa5CPVObQGqfDXQA1fJlS2RBfglER+qqmtWYVUmoyrU38p+AznYPDkwatD9
hRseZ3TR8HSfV90wSrA9Df/7/WrYWr/B6Wl8bvbpKct86YDXx0rLsE7vSx/8bbA5
K/Vl0O2uUc8AG89OAYmLqk+noZz2wt6I8zlnvpvI8Yfaf2FM+Z3WqJ9nCCjjmUby
dBDE6Z9TAIvM1+hIlzZWE0Zlu8js01X3JGjSDDDYBRPsuRMoieXs5MG9sehhiTZF
299R82iuF8NFBl1cGo4ANxAHYI1rmSn03pXuuAYMSx0bNMMzGJNy2aIxS5AzOTdl
6pTkYq4LtQ/XGZHBwXCi14fw1CeFBIUBym9QR1WCdQEHdfMc00jY/vv3SAJQz0Nb
uBGE1Zn6kiPpBYKg6Dhk91QWsRB8F1TtbFQoMv3vDRRWyL7j0ZKsG4jqGfhFZ4vf
wly3caq64QyqeVcm56j11aST6R60GqKq9H0NPoKCMKsTCNyEbtv2MroHWEbx48nF
QMzQLymjjC3Wf1XwVVkpc7M7CLC2tN9e0+8OGE9C6YtkMAYuZf9UrKD41/PNiXjm
SkO7QfabILNXu5zpQgyWXGK1yioUHwIDAQABo4IC7jCCAuowHwYDVR0jBBgwFoAU
jYxexFStiuF36Zv5mwXhuAGNYeEwHQYDVR0OBBYEFLPbxxHeR577TzVhQZ1IChco
gRMYMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgIHMCUwIwYI
KwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECATCBhAYI
KwYBBQUHAQEEeDB2ME8GCCsGAQUFBzAChkNodHRwOi8vY3J0LnNlY3RpZ28uY29t
L1NlY3RpZ29SU0FEb21haW5WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCMG
CCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTAbBgNVHREEFDASgggq
Lmdmbi5kZYIGZ2ZuLmRlMIIBegYKKwYBBAHWeQIEAgSCAWoEggFmAWQAdACt9776
fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAYPrjTSIAAAEAwBFMEMCH08w
q/NdwB8xGUO1vaI1n6OnTCaMdV3mLzttkhecg78CIA2yFyCZRscHRBbdHYUkrQhA
MGL0vrptBCS/VbtKBYE/AHUAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS
61IAAAGD6400pgAABAMARjBEAiBOOLPEYABsggBfqeIutAWN72Ke6ni3qsf+eAhU
ZZ3vMAIgZAWx7VyaAVpwc8RzKgFwQaKUVREgqHWuDVf/URUukGsAdQDoPtDaPvUG
NTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYPrjTRpAAAEAwBGMEQCIFVxk8Nw
tDlQ/rGdKRvGr2RYhqHG0+i93Fy76jEtXWaRAiA+rUg8cG5ANVyiWFFizwbDcyfG
5MeKccCiiHdOzkeveDANBgkqhkiG9w0BAQsFAAOCAQEAexC7Jer04EDZYb8o8G99
4mgH0816nglTl1xM6eGdOW+o2FTigaU+6Hig8KcPSAv5ttNwwwkketJTpDdWpecF
T1tOaZtpUPgJOUNv+R4vw7v965cLK9NVD48xtRbFL2Udpb+MPVQw0qKkKRu7EpJT
tQAm9CzAYrm6kcc5kqI5fjx5u8h/UZ9q4FOEMlJidIBOIox2w1FdGV+kZnuKGVgM
jzGwzKDUhpe7pxUfZ+LD2i3Ven8O9HxJToOhJQR7oRXUtYJuQjF5dBHGFN10qvce
jPLUbs695f9JCD7IrKDL0GaRX2H9VEEJ2nV1RhOIj3SfIZfkDsNsKcTItuw+64m1
xg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 100958034311525071486949825682073034271
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gfn.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 747662979865224694365965455032306580732300110341928650661430837711170544266474178829392548624106461783458443965962755658590276420128096271540359336780338671875979418420474238652767503205629795576533207305388031479072219011574472036491247809661818173310042699190165534334138135111317346461192059214138607791137737408471497211732995214876142233252754747148286571859048497767725669422239754669921812032680274219375007931728801089422659461461400856918533419526179790378648759944367811486986041633490645751776761392593586267513244870545916944043961542016226422622709621149784406666257473128480463972591404032864781015817010014018722434933604288862652212759856870532936635316995722733951149385283803051515617778033040831546219742974245485880884343750724624501500623271083902740435032721056895464959720726975552055982826125211289001422430390940395284228438335038467139671409344943801440455282246614816470287616013120455433741589660931731182835374192682027149351041522006307183065552142036093354174285938110574546177829502923935170028669983291969529555038110017297399200621637015703433647420256464582009210900706535315100007103860113276615898331741670407058341564185893363793396222951235010124332574210729855640087756403878308773685484983327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3dbc711de479efb4f3561419d480a1728811318
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gfn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfn.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (358 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007b10bb25eaf4e040d961bf28f06f7de26807d3cd7a9e0953975c4ce9e19d396fa8d854e281a53ee878a0f0a70f480bf9b6d370c309247ad253a43756a5e7054f5b4e699b6950f80939436ff91e2fc3bbfdeb970b2bd3550f8f31b516c52f651da5bf8c3d5430d2a2a4291bbb129253b50026f42cc062b9ba91c73992a2397e3c79bbc87f519f6ae0538432526274804e228c76c3515d195fa4667b8a19580c8f31b0cca0d48697bba7151f67e2c3da2dd57a7f0ef47c494e83a125047ba115d4b5826e4231797411c614dd74aaf71e8cf2d46ecebde5ff49083ec8aca0cbd066915f61fd544109da75754613888f749f2197e40ec36c29c4c8b6ec3eeb89b5c6