*.orxinsight.org

Issued by SwissSign Server Gold CA 2008 - G2

About this certificate


This digital certificate with serial number 08:e3:8a:2a:85:b6:42:32:cd:0e:e2:b3:9e:fc:c2 was issued on by SwissSign AG .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • WARNING: Using depricated TeletexString for '[*.orxinsight.org]'
  • ERROR: Certificate contains a CRL with an non-preferred scheme ([ldap])

Operational Riskdata eXchange Association (ORX)

Organization: Operational Riskdata eXchange Association (ORX)
State / Province: Zürich
Locality: Zürich
Country: CH

SwissSign AG

Organization: SwissSign AG
State / Province: Zürich
Locality: Zürich
Country: CH

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 08:e3:8a:2a:85:b6:42:32:cd:0e:e2:b3:9e:fc:c2
Serial Number (int): 46153428494752757043896051637877954
Serial Number lenght: 116 bits, 15 octets

SubjectKeyId: 2a:4a:2b:ac:71:b4:21:c1:88:ba:a4:3d:33:0d:f9:93:e5:06:f7:26
AuthorityKeyId: 97:76:de:0a:34:e5:10:9a:40:c4:eb:d8:9d:5a:53:7b:21:cc:47:3e

Fingerprint (sha1): 1c:80:f8:27:54:5c:21:74:5a:9a:ba:c7:5b:75:7d:75:21:8b:2e:11
Fingerprint (sha256): 6d:85:3a:b6:46:db:de:de:3a:bd:96:52:b9:d0:19:57:ec:df:39:59:b4:11:48:b5:96:8f:99:e2:d3:33:d8:ea

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/9776DE0A34E5109A40C4EBD89D5A537B21CC473E

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/9776DE0A34E5109A40C4EBD89D5A537B21CC473E
CRL Distribution Point: http://crl.swisssign.net/9776DE0A34E5109A40C4EBD89D5A537B21CC473E
CRL Distribution Point: ldap://directory.swisssign.net/CN=9776DE0A34E5109A40C4EBD89D5A537B21CC473E%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for the current certificate on *.orxinsight.org
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

*.orxinsight.org
orxinsight.org

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGQTCCBSmgAwIBAgIPCOOKKoW2QjLNDuKznvzCMA0GCSqGSIb3DQEBBQUAMFEx CzAJBgNVBAYTAkNIMRUwEwYDVQQKEwxTd2lzc1NpZ24gQUcxKzApBgNVBAMTIlN3 aXNzU2lnbiBTZXJ2ZXIgR29sZCBDQSAyMDA4IC0gRzIwHhcNMTQwMzMxMDgxNTUy WhcNMTUwMzMxMDgxNTUyWjCBhjELMAkGA1UEBhMCQ0gxEDAOBgNVBAgMB1rDvHJp Y2gxEDAOBgNVBAcMB1rDvHJpY2gxODA2BgNVBAoTL09wZXJhdGlvbmFsIFJpc2tk YXRhIGVYY2hhbmdlIEFzc29jaWF0aW9uIChPUlgpMRkwFwYDVQQDFBAqLm9yeGlu c2lnaHQub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwhZFpIl DZhUOJp3Ff6JGLJnk57dF64ieLMII0tFwad0Ni14CnKsu1TuljACU2bDFq2vM5kx turbDtQwIP4vWo9YTLjxsz9STj0nXti760iGOIZ7t1lLf8vbR+T2N+OrmcF7S0s6 RoyaXfwQyD10WftMYvU8QpIYfkzc1Shpm5ECpWjsznDsvJqEl17x4XPdyl9DOFa5 ueHx088I3V4/4McNFIuY87kZnd+FpYdX19bxLlA35m3gnIUJjy8xxMG5IWGzPL12 4fu5HaqdxcIjwBaPbrMiB4N46WUJ87qOk89DLxMoZUGOqLQnW4/Dc4ahoNQgEQit 4+lHMDV4y5dOjwIDAQABo4IC3jCCAtowKwYDVR0RBCQwIoIQKi5vcnhpbnNpZ2h0 Lm9yZ4IOb3J4aW5zaWdodC5vcmcwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQUKkorrHG0IcGIuqQ9Mw35k+UG 9yYwHwYDVR0jBBgwFoAUl3beCjTlEJpAxOvYnVpTeyHMRz4wgf8GA1UdHwSB9zCB 9DBHoEWgQ4ZBaHR0cDovL2NybC5zd2lzc3NpZ24ubmV0Lzk3NzZERTBBMzRFNTEw OUE0MEM0RUJEODlENUE1MzdCMjFDQzQ3M0UwgaiggaWggaKGgZ9sZGFwOi8vZGly ZWN0b3J5LnN3aXNzc2lnbi5uZXQvQ049OTc3NkRFMEEzNEU1MTA5QTQwQzRFQkQ4 OUQ1QTUzN0IyMUNDNDczRSUyQ089U3dpc3NTaWduJTJDQz1DSD9jZXJ0aWZpY2F0 ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0aW9u UG9pbnQwYgYDVR0gBFswWTBXBglghXQBWQECAQUwSjBIBggrBgEFBQcCARY8aHR0 cDovL3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS9Td2lzc1NpZ24tR29sZC1DUC1D UFMtUjUucGRmMIHVBggrBgEFBQcBAQSByDCBxTBkBggrBgEFBQcwAoZYaHR0cDov L3N3aXNzc2lnbi5uZXQvY2dpLWJpbi9hdXRob3JpdHkvZG93bmxvYWQvOTc3NkRF MEEzNEU1MTA5QTQwQzRFQkQ4OUQ1QTUzN0IyMUNDNDczRTBdBggrBgEFBQcwAYZR aHR0cDovL2dvbGQtc2VydmVyLWcyLm9jc3Auc3dpc3NzaWduLm5ldC85Nzc2REUw QTM0RTUxMDlBNDBDNEVCRDg5RDVBNTM3QjIxQ0M0NzNFMA0GCSqGSIb3DQEBBQUA A4IBAQC9DPZjz0VD3eEBKgh64cpk0xMhqWjQNFEFb4wBCskg2vVd0Rhl6xmKP0CF qJqO8c5BvFmpiv8L0ZzaExqO6jPYB58MVnssUogDCN5tlaIY2RJnwZe39Sy8HPQ7 B4X5kXvpcaKGBbnMmgzR4gz6eReEptNh64mLU8IfK4xK27ox32nkywvSukc3CL86 eAIiXNve6yLPneulp0Uy6NOe0OefFAI7i1Rv4SykR5OqVoC75Wi+QgIRcKt7jeCe 44UykWap+7nX/AKEG6KLvrekXsnlB9u7lX7ko8YTdiSiJbX/yDO7pvRjIHyTj6aN bUi3Y0XZYtnEZOlTaL4DGEsQXsBP -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwhZFpIlDZhUOJp3Ff6J GLJnk57dF64ieLMII0tFwad0Ni14CnKsu1TuljACU2bDFq2vM5kxturbDtQwIP4v Wo9YTLjxsz9STj0nXti760iGOIZ7t1lLf8vbR+T2N+OrmcF7S0s6RoyaXfwQyD10 WftMYvU8QpIYfkzc1Shpm5ECpWjsznDsvJqEl17x4XPdyl9DOFa5ueHx088I3V4/ 4McNFIuY87kZnd+FpYdX19bxLlA35m3gnIUJjy8xxMG5IWGzPL124fu5HaqdxcIj wBaPbrMiB4N46WUJ87qOk89DLxMoZUGOqLQnW4/Dc4ahoNQgEQit4+lHMDV4y5dO jwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 46153428494752757043896051637877954 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2008 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-31 08:15:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-31 08:15:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zürich' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zürich' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Operational Riskdata eXchange Association (ORX)' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.orxinsight.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20076007042151953412649047179442139918222713056242869499561937321730639380236187645675576251051368547204662579135454796525964280765777298264450737314419789420121285578236740759223367381960196413272144314172913290189673292106361989292485011913118024496479725921001506696571232821991618365420625474447906972336749746753822022053885921815213953281063656008921173374257015746015034087660569646469116669392645574096217257979216443329821215330364361750437322187652969599907603697179277677481962974415163000349204789060911594439963061210329615682326711647504399498304948550485449132606723040320096976923037321190140389314191 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.orxinsight.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orxinsight.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2a4a2bac71b421c188baa43d330df993e506f726 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9776de0a34e5109a40c4ebd89d5a537b21cc473e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/9776DE0A34E5109A40C4EBD89D5A537B21CC473E' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=9776DE0A34E5109A40C4EBD89D5A537B21CC473E%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS-R5.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/9776DE0A34E5109A40C4EBD89D5A537B21CC473E' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/9776DE0A34E5109A40C4EBD89D5A537B21CC473E' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00bd0cf663cf4543dde1012a087ae1ca64d31321a968d03451056f8c010ac920daf55dd11865eb198a3f4085a89a8ef1ce41bc59a98aff0bd19cda131a8eea33d8079f0c567b2c52880308de6d95a218d91267c197b7f52cbc1cf43b0785f9917be971a28605b9cc9a0cd1e20cfa791784a6d361eb898b53c21f2b8c4adbba31df69e4cb0bd2ba473708bf3a7802225cdbdeeb22cf9deba5a74532e8d39ed0e79f14023b8b546fe12ca44793aa5680bbe568be42021170ab7b8de09ee385329166a9fbb9d7fc02841ba28bbeb7a45ec9e507dbbb957ee4a3c6137624a225b5ffc833bba6f463207c938fa68d6d48b76345d962d9c464e95368be03184b105ec04f