alf.hs-schmalkalden.de

- Hochschule Schmalkalden -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 9c:de:f7:af:68:2a:31:e0:c5:5a:f3:5a:2b:90:52:17 was issued on by GEANT Vereniging.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Hochschule Schmalkalden

Organization: Hochschule Schmalkalden
State / Province: Thüringen
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 9c:de:f7:af:68:2a:31:e0:c5:5a:f3:5a:2b:90:52:17
Serial Number (int): 208517280897379601313474446468328739351
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: bd:bf:64:38:09:8a:ca:df:8b:07:3a:64:a7:58:33:70:7f:30:d1:9a
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): d2:db:d4:9d:da:76:57:c4:e8:49:be:00:6d:42:27:da:ac:01:fb:fe
Fingerprint (sha256): 90:a7:cb:9f:c9:f9:00:62:e6:6a:59:82:bc:34:d7:70:af:6e:70:27:0e:1f:9a:eb:f7:47:4d:7f:d3:a6:03:19

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate alf.hs-schmalkalden.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alf.hs-schmalkalden.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alf.hs-schmalkalden.de

Other certificates including the domain name hs-schmalkalden.de

(limited to 100 certificates)
EXP-E.hs-schmalkalden.de
rzhs935cm01-ms.hs-schmalkalden.de
wdb.hs-schmalkalden.de
owa.hs-schmalkalden.de
webmail.hs-schmalkalden.de
exp-e.hs-schmalkalden.de
owa.hs-schmalkalden.de
moodle-sm.hs-schmalkalden.de
evaluation.hs-schmalkalden.de
wiki.rz.hs-schmalkalden.de
stura.hs-schmalkalden.de
erpinfo.hs-schmalkalden.de
rzhs935im01-ms.hs-schmalkalden.de
stura.hs-schmalkalden.de
alf.hs-schmalkalden.de
rzhs935im02.hs-schmalkalden.de
wiki.hs-schmalkalden.de
rz.hs-schmalkalden.de
npr.hs-schmalkalden.de
webdavinf.hs-schmalkalden.de
vpn.hs-schmalkalden.de
owa.hs-schmalkalden.de
owa.hs-schmalkalden.de
rzhs935uc01-ms.hs-schmalkalden.de
qis.hs-schmalkalden.de
webtime.hs-schmalkalden.de
metacoon.fh-schmalkalden.de
vpn.hs-schmalkalden.de
webmail.hs-schmalkalden.de
802-1x.hs-schmalkalden.de
gil.hs-schmalkalden.de
webtime.hs-schmalkalden.de
wdb.hs-schmalkalden.de
owa.hs-schmalkalden.de
pwm.hs-schmalkalden.de
moodle-sm.hs-schmalkalden.de
wiki.rz.hs-schmalkalden.de
cucm-01-ms.fh-schmalkalden.de
cube.hs-schmalkalden.de
qis.hs-schmalkalden.de
webdavinf.fh-schmalkalden.de
cube.hs-schmalkalden.de
rzhs935im01-ms.hs-schmalkalden.de
webmail.hs-schmalkalden.de
webdavwr.fh-schmalkalden.de
qis.hs-schmalkalden.de
ml.hs-schmalkalden.de
apps.hs-schmalkalden.de
smtp.fh-schmalkalden.de
rzhs935im01.hs-schmalkalden.de
rzhs935uc01-ms.hs-schmalkalden.de
greenlight.hs-schmalkalden.de
helpdesk.hs-schmalkalden.de
vpn5.hs-schmalkalden.de
imap.hs-schmalkalden.de
vpn4.hs-schmalkalden.de
webdavinf.hs-schmalkalden.de
webprint.hs-schmalkalden.de
webdavinf.hs-schmalkalden.de
alf.hs-schmalkalden.de
idp.hs-schmalkalden.de
nm.hs-schmalkalden.de
vpn.hs-schmalkalden.de
imap-hs.hs-schmalkalden.de
alf.hs-schmalkalden.de
bc4sb03.hs-schmalkalden.de
studip.hs-schmalkalden.de
zwin.informatik.fh-schmalkalden.de
ci.hs-schmalkalden.de
moodle.hs-schmalkalden.de
helpdesk.hs-schmalkalden.de
studmail.hs-schmalkalden.de
studip.hs-schmalkalden.de
www.hs-schmalkalden.de
rz.hs-schmalkalden.de
webmail.hs-schmalkalden.de
webauth.hs-schmalkalden.de
evaluation.hs-schmalkalden.de
idp.hs-schmalkalden.de
idp.hs-schmalkalden.de
ci.hs-schmalkalden.de
webtime.hs-schmalkalden.de
alf.hs-schmalkalden.de
cups.fh-schmalkalden.de
dokus.hs-schmalkalden.de
moodle.hs-schmalkalden.de
qis.hs-schmalkalden.de
post.hs-schmalkalden.de
apps.hs-schmalkalden.de
wiki.rz.hs-schmalkalden.de
stura.hs-schmalkalden.de
studip.hs-schmalkalden.de
qis.hs-schmalkalden.de
tfs.hs-schmalkalden.de
rzhs935cm01-ms.hs-schmalkalden.de
802-1x.hs-schmalkalden.de
cups.fh-schmalkalden.de
bbb.hs-schmalkalden.de
evaluation.hs-schmalkalden.de
cucn.fh-schmalkalden.de

Certificate

The complete raw certificate details for alf.hs-schmalkalden.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 208517280897379601313474446468328739351
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Thüringen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hochschule Schmalkalden'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alf.hs-schmalkalden.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 904457878927290473904081414574717126545079062168392641075057834330578802355895835788460071545987948596632218482558025592444057278126337324025316385532273056769128887943206623158560151878838834026317408404606059674431527027209940606213631591822889197505515292134481716333962426927710963994341573002060900883196119507960821360850894385008130572966128392777288124059825379741566458413801455234400644602149328243187216059730932893903328254493810304847099427966793759210434551803552319092968628702950831544881643800395041505298613909450337227027266673654735001595136476435635042417527681939909976923966545974934185736181293858168004344924761763935944511124673287916001036801580851777217942992672945188481384853776093756854813211689928508419060679448239539674761180880373284153250073324384650323056721381113676105229755567295974659975310555998876265329975470697735627756265704745621533259503629887005322704669345717592879795543181392835146724580124363728683178963903509899455393767486957504988486396311784817680462559607448560701608949605673454027677731558460977675205908677686549308714303397518599828512133491628596617516485211630053202403922568287354642067548633180830430209459210675161536968256150102261263893411131489433561834293791323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bdbf6438098acadf8b073a64a75833707f30d19a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c152e3320000004030047304502201fed30f63e2433927b451807d073270bfbcc75b06343b1857dbe1b7be3cc4c20022100907b5b39df3a073872d809dbbe0dadf7065703b21c9744fbcf23ba353f2adc7a0077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018c152e33fb0000040300483046022100f7d6d39294f86f49da2ecd047969bdafc46cb63836c0e9724810e82da7d58baf0221008573d9874d4f00a7acc669f13fd3317bca9a33591b529cefbbdcc9aca8756f87007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c152e334a00000403004730450220643e205e7a62e564c0eba4a4514edc20b7abbbc7447af5bdbb10ec191582c98a022100dbb8df6304350d16341b40c8ea3a1b1dcebdd0362f60d34340bb8e140d81b6aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alf.hs-schmalkalden.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0041dd5acb6a48bda4645b54b824f60e060c73ba3a62442750a679a6f548cac3b95c0799e3b61fb33309bb1d39a749cc55e267f302c912e26a1f9ecc28dbe687d03a4bddf42da8de3e12b89edb97d4de74ff7d9791303a95031204f6c0b699c2b0eba8f8f78e138682255f77641743cc62cb95f9613e04326300c3c05acc6085d6869537d085189ecca0272104f9751bec8a2938e9fc8a07333514f61866482803dd66eafafc1873e0df460b530a978cbc44d2de9f05f4bb9eebd8d6e8207a3d6452d44dd232a2a9dec879114177e433817b5ef9b501cdc939aa7456bf080f3928d9161ef17d25c6e7fd11295c60cee29752d2d87207832231f7fd536b8b3c5db9cd0203341c3b09b1cc468dd1b03c987a909e1f678991b67187efd733d19fadbb81eac6a928a9bfaf03cff69f816a7497b707cffccb6586b839594d867ecc7167e90c94a6102641e243e432b138fe866ddd3a1c8bf884288bfcf3017538da6dd4853d0fe9b481665c534c341438b9721ba0b4f3e55aaf1dae2c5ec1c06b78ce9cb247eadefd855b2c58dd2549928a338949ef9ba187d2909513070cc02e5c8153432358beb405d68e869586a335f256f6eb314cfc161ea066ad3c45369f5c9e72d067781655e39ae2e20c060323ee08a4db8cd03790d824836b2d36b380bbb7287c37950aeb7eeb62526fee9a77d35f5856205ea491a9dab014fc04231b995eb3