www2.schneider-electric.com

- Schneider Electric Industries SAS -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 39:ce:b8:25:cf:d0:0b:40:84:11:fe:df:9c:c4:ce was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Schneider Electric Industries SAS

Organization: Schneider Electric Industries SAS
Organization unit: Global Operations
State / Province: Hauts de Seine
Locality: Rueil Malmaison
Country: FR

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 39:ce:b8:25:cf:d0:0b:40:84:11:fe:df:9c:c4:ce
Serial Number (int): 300153686998915511413166617332073678
Serial Number lenght: 118 bits, 15 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 50:c6:9f:ee:b3:dc:1e:72:77:12:d4:0d:72:10:43:f6:25:58:9a:e6
Fingerprint (sha256): 90:71:a3:bd:50:52:ce:b5:57:79:ba:58:fd:fd:d6:90:de:01:d9:69:92:25:e4:df:8c:95:e1:d7:1a:0f:9a:26

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www2.schneider-electric.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www2.schneider-electric.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

services.modicon.com
www2.schneider-electric.com

Other certificates including the domain name schneider-electric.com

(limited to 100 certificates)
bigoudi.fr.schneider-electric.com
2020.pasupport.schneider-electric.com
qa-downloads.schneider-electric.com
plcupload.schneider-electric.com
subscriptions.schneider-electric.com
identity-pprd.schneider-electric.com
rexel.mie3c.schneider-electric.com
ecoxpert.schneider-electric.com
mel.vpn.ems.schneider-electric.com
www.quantil.com
support5.cdnetworks.net
ib2diag.schneider-electric.com
secure08.lithium.com
support5.cdnetworks.net
spiceportal.schneider-electric.com
tango.us.schneider-electric.com
*.struxureware.schneider-electric.com
secure08.lithium.com
nsi.us.schneider-electric.com
www.bem.schneider-electric.com
www.appgate.schneider-electric.com
lamtraveler01.schneider-electric.com
dalton.tr.schneider-electric.com
devportalint-test.schneider-electric.com
consulting.schneider-electric.com
conextpowercloud.schneider-electric.com
*.dev.schneider-electric.com
support5.cdnetworks.net
supportmsi.schneider-electric.com
vfast-portal.schneider-electric.com
hca.pme-central.schneider-electric.com
www.wesop.schneider-electric.com
identity-pprd.schneider-electric.com
nsi.jp.schneider-electric.com
support5.cdnetworks.net
ping-access.schneider-electric.com
www.schneider-electric.com
sip-res.schneider-electric.com
secure08.lithium.com
mam.schneider-electric.com
appserver.leetechnologies.com
www.wesop.schneider-electric.com
support5.cdnetworks.net
aliases2.schneider-electric.com
facilityexpert-us.schneider-electric.com
p7vci.eud.schneider-electric.com
xsl.schneider-electric.com
vendor-uk.schneider-electric.com
dcimassets.schneider-electric.com
akamaisecure2.qualtrics.com
lamtraveler01.schneider-electric.com
support5.cdnetworks.net
gtp-pp.schneider-electric.com
aliases6.schneider-electric.com
motion.schneider-electric.com
onlinekatalog.schneider-electric.com
webexperience.schneider-electric.com
onewo.eud.schneider-electric.com
psr.fr.schneider-electric.com
*.buildings.schneider-electric.com
app.ppr.schneider-electric.com
*.fi.schneider-electric.com
ezlist.schneider-electric.com
facilityinsights-us.schneider-electric.com
*.raproxy.dsp.schneider-electric.com
isel-sqe.dev.schneider-electric.com
intranet-maison.schneider-electric.com
facility-insights.assessment.schneider-electric.com
www.quantil.com
mysecn-pp.dev.schneider-electric.com
www.bem.schneider-electric.com
www.schneider-electric.com
stage-systemplatform.marketplace.software.schneider-electric.com
trm.fr.schneider-electric.com
ping-access.schneider-electric.com
www.schneider-electric.com
conextpowercloud.schneider-electric.com
es-training-courses.schneider-electric.com
seifoundation.schneider-electric.com
bigoudi.fr.schneider-electric.com
echange-uat.cn.schneider-electric.com
mft.schneider-electric.com
smsurvey-ksa.schneider-electric.com
stage.teamforge.schneider-electric.com
www.appgate.schneider-electric.com
e-mail-internal-northamerica.schneider-electric.com
support5.cdnetworks.net
schneider-electric.com
www.schneider-electric.com
hca.pme-mountain.schneider-electric.com
mft.schneider-electric.com
facilityinsights-preprod.schneider-electric.com
jira.au.schneider-electric.com
vfast-pp.schneider-electric.com
secure0079.hubspot.com
services.modicon.com
www.schneider-electric.com
vmanage-emea.schneider-electric.com
support5.cdnetworks.net
popeye.ae.schneider-electric.com

Certificate

The complete raw certificate details for www2.schneider-electric.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizcJJRg5MCHDBZq3mPOI
MurkticYbQ9hyUaJMuFAqEE0rlqw1Op4aN/xgNQ+uM6X3gZHkPrxjEFIjSiHihWC
uKBh8ig8isKlYZDc5iu+P2ss8Pt36Df2ydYTqewcSWQeRm3tZqqs+BFxm3XEyXho
hDaeMDPlCfL2WVPkxu2OsXCu17P9O3YbkV+YDSZEE9mqphcRazuiqMN8fy1Pd9zm
UXhOjziemM5CcUrhU2qviQyqoM3kT6GvuiMXrtEtEMlruDwFw4HbKpEv9sMcDdTd
uCOWplvD3Bpj4Lvhmmj6RU1G32geuiwtC/palZ7bHzl3pg0de25uG5XsYV66rKQY
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300153686998915511413166617332073678
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hauts de Seine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rueil Malmaison'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schneider Electric Industries SAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Global Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www2.schneider-electric.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17574263516422086353214468937486328287313933547653591016954769537676967853543780237347421450025078580851307562973324809780561467565629519767493101445567991925984265977116488123186510622450248399739525648365091884173674569460889022791343615859100970784163067616266587882725398426161396999425922637679243011244834327598337553874748676196494888949946865557016800404803330192290850810275620392004017573867197202148812869598245824545545713583538249084107050367123216970982394529278398393109682727714286117886953806305540646415364596903206929959995906789446962671354230527008574422356175854163594609687652797096567433861199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.modicon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.schneider-electric.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015e3e227f43000004030046304402201c283ae02f414625ad096b5ddd4936a9ebfcb773337efd44382d53aa8715c0be022026ab573b3a36f3861687bc032867af1426491d13e7fa4bd1a1f6db699192edab007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015e3e22803d0000040300473045022100b19408444624918fa61ab21a181881bb60ded39ff49ce6db441e7edd4c7e7ea1022079f590987e38bf3acf749ea8e9887df4626a3327e65593c90666b20cad9bcd43
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00209adc7c31ae206b2daef874707656f7ee68e549f20ee3fe170ccd76adbc58f530a6f357d7c0da7e753fb0218891323a938df12f79e2245f2010a4bcf8e036f711cac3a1493211038927b27dd9f4fcb385db0d5f95ddc35c078e5f89585593536706a2f3fca7062c6e5cc2008c822cce0bbecf0286b33a7e0b4dd49547c7adfcf0d2a39a223de9b6eca5a607be82548d758fa2a1634ded92cce5955cfe3f61b4817f7c90a5f14d2c0a16cc6df1bc74146db0949a857c8cf0f5f00a37a3dd9b810dd6a8a51dfab3b489d8d5c83a430b3a37b48fbe632c4417f53cc325bc2e5388c51548cc1c484200170da1c0a6704307215cdee17351882ef8fae7f95d524308