*.nordenta.dk

Issued by AlphaSSL CA - SHA256 - G4

About this certificate

This digital certificate with serial number 2d:e4:7f:7b:9a:aa:04:d5:e3:82:61:b9 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.nordenta.dk

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:e4:7f:7b:9a:aa:04:d5:e3:82:61:b9
Serial Number (int): 14203062549470234600238375353
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: c7:d7:10:c9:60:dc:5c:13:51:4f:39:77:5c:2a:5e:b2:a1:0e:b7:26
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15

Fingerprint (sha1): 49:94:e7:80:be:d3:a0:04:5a:c8:01:c1:bd:41:06:4d:20:a9:f0:23
Fingerprint (sha256): 97:8b:08:53:71:6a:60:ba:b7:36:7e:80:84:81:83:e5:c0:0a:2d:50:dc:04:58:eb:37:c8:24:e8:50:88:c9:ac

Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4
CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl

Check the revocation status for certificate *.nordenta.dk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.nordenta.dk

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nordenta.dk
nordenta.dk

Other certificates including the domain name nordenta.dk

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.nordenta.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGwzCCBaugAwIBAgIMLeR/e5qqBNXjgmG5MA0GCSqGSIb3DQEBCwUAMEwxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB
bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEc0MB4XDTIzMDIyNzA5MDg0M1oXDTI0MDMz
MDA5MDg0MlowGDEWMBQGA1UEAwwNKi5ub3JkZW50YS5kazCCAaIwDQYJKoZIhvcN
AQEBBQADggGPADCCAYoCggGBAOnYKlbTv375v/RJpb8RNp+6dRG8fE0MTmsKkvFm
G4Y6gnyTy7+195pYlXBUBj4APUUModn4FAY3U7wubQekBotKX2i/R5YZVYrIpy/3
DmXp3wA6uovKbn6bZG7XCxls88rJOt49m6yDvpFG5frUb47HN5nGDLdTF/vMAa7T
x6g+BPGLWqbHF3Sh0Yf9wdb6lS8/fOIAwL1bGyIbc2+DKkuDoXPTGa2qsnY7hjeO
g9mfnV1rdw3O6TgtSpp0wFTY6JPauGwcKB3zhTLwSosn685rk0FhcpLM28R3sawi
U1iB0HuAqREPOTBiPsbPavk2l4TRY2NZx01tm6Nyw8BLMvoChPYVD8ZhgdQ79UUp
IEOKxXkJxICxlbCvrEbfOCjqqF2ct68/4htbbD5VFzRaY7YY/Hw0fvKsxQ1i7jQt
C7AQoiKUQPk/7kbuo91H5RT1bkjnnH4hqbe1XYJ2VsIRyLwF4JZsh/cmbUBbJ2Sx
e/peUUxgfAPWZ4Flwipvo4V2kQIDAQABo4IDVzCCA1MwDgYDVR0PAQH/BAQDAgWg
MIGTBggrBgEFBQcBAQSBhjCBgzBGBggrBgEFBQcwAoY6aHR0cDovL3NlY3VyZS5n
bG9iYWxzaWduLmNvbS9jYWNlcnQvYWxwaGFzc2xjYXNoYTI1Nmc0LmNydDA5Bggr
BgEFBQcwAYYtaHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vYWxwaGFzc2xjYXNo
YTI1Nmc0MFcGA1UdIARQME4wCAYGZ4EMAQIBMEIGCisGAQQBoDIKAQMwNDAyBggr
BgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8w
CQYDVR0TBAIwADBBBgNVHR8EOjA4MDagNKAyhjBodHRwOi8vY3JsLmdsb2JhbHNp
Z24uY29tL2FscGhhc3NsY2FzaGEyNTZnNC5jcmwwJQYDVR0RBB4wHIINKi5ub3Jk
ZW50YS5ka4ILbm9yZGVudGEuZGswHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMB8GA1UdIwQYMBaAFE/LrKjC76vdg29rv86YPVxYJXYVMB0GA1UdDgQWBBTH
1xDJYNxcE1FPOXdcKl6yoQ63JjCCAXwGCisGAQQB1nkCBAIEggFsBIIBaAFmAHUA
c9meiRtMlnigIH1HneayxhzQUV5xGSqMa4AQesF3crUAAAGGkiG+SwAABAMARjBE
AiAsCSVaZblAvcyQOgebW/elATyryN+Ci/ftqNjooKpBKQIgTXlxmua1T3WQEV5i
ZcblRarHS+2r4va47c5ozcpxmhMAdQDuzdBk1dsazsVct520zROiModGfLzs3sNR
SFlGcR+1mwAAAYaSIb6pAAAEAwBGMEQCIAhg4BJCUDEPST1MM7lPgzcgs241TGrl
tGRWbK3dKpxMAiBl763yBYuqiGyQA4MLZ/TfW6R0I5nmFoaEdDc6mxFiqQB2AEiw
42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABhpIhvfYAAAQDAEcwRQIh
APZQoyLaTmONk31CPzRvF/NO1dyjRDXP+EBzhJCzioPQAiAeuFwlqWnJv1cVYtBg
QsEr+PVorNv8I7y2wjRU2GFCqDANBgkqhkiG9w0BAQsFAAOCAQEAavnPzm+9kI5q
M3+KGtwM5hm5+BW9/3Hn5v6z+o6Orbmx3HFr/Zlct8zeCWHTkoVW2IshLQ6SOEwV
ITdRZV6pR+zoPBRfXRhWJ1VJJr5R5HuHwvl5TdckZNegWdFHnYu4mpR98QmjAoAd
k5qR7BwLZSXmMfDtAhv3mHnZO6vVq0qQSALlqXwh3ksGP0oxDRcT81qGmbzLH9WJ
ytj7Lzeeb/HJ0iMKVQyrEl8OGzI3A668LW/nU5fB0gLA6RxEmz6xYSLhqFs4XRsm
3Wfc/zQ1p1HwoSRj7kcF+SyXADlefqGVSxiwHrY/RCKhRBGbFirTy2xcgz6pGn3a
B1K+RuqVXg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEA6dgqVtO/fvm/9EmlvxE2
n7p1Ebx8TQxOawqS8WYbhjqCfJPLv7X3mliVcFQGPgA9RQyh2fgUBjdTvC5tB6QG
i0pfaL9HlhlVisinL/cOZenfADq6i8pufptkbtcLGWzzysk63j2brIO+kUbl+tRv
jsc3mcYMt1MX+8wBrtPHqD4E8YtapscXdKHRh/3B1vqVLz984gDAvVsbIhtzb4Mq
S4Ohc9MZraqydjuGN46D2Z+dXWt3Dc7pOC1KmnTAVNjok9q4bBwoHfOFMvBKiyfr
zmuTQWFykszbxHexrCJTWIHQe4CpEQ85MGI+xs9q+TaXhNFjY1nHTW2bo3LDwEsy
+gKE9hUPxmGB1Dv1RSkgQ4rFeQnEgLGVsK+sRt84KOqoXZy3rz/iG1tsPlUXNFpj
thj8fDR+8qzFDWLuNC0LsBCiIpRA+T/uRu6j3UflFPVuSOecfiGpt7VdgnZWwhHI
vAXglmyH9yZtQFsnZLF7+l5RTGB8A9ZngWXCKm+jhXaRAgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14203062549470234600238375353
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-27 09:08:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-30 09:08:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nordenta.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5306811739232243281177088856282039181992527972229235568626020332230529807286803691397386299377490330516227313775990849126745204389554925682669074454955416386617996600899863725152037899232143945824769317037396209619169994888931198800866958103346979820771353977300874910752276469478615110897270213630575436109522799133204095173606670977609074578669300679851413321870161866124828845263512628581786092409904635895363834880694743437339392899366664152004315188522150870604741573093764682409400124990577723695659950617821933368072154667646949997271789760353050506623930259770298242049987288322541882835261175669339482487450257814864986641533023746879115638808604540260588928962975027868587091926533314383772144610039125650236117851689781984168589271058611997649226416431717305898611268612322309324373378318479981578073346677135247939601154860691340497279216082657337094486410685693466648616727031535847779888856992676418086290945681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nordenta.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordenta.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7d710c960dc5c13514f39775c2a5eb2a10eb726
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006af9cfce6fbd908e6a337f8a1adc0ce619b9f815bdff71e7e6feb3fa8e8eadb9b1dc716bfd995cb7ccde0961d3928556d88b212d0e92384c15213751655ea947ece83c145f5d185627554926be51e47b87c2f9794dd72464d7a059d1479d8bb89a947df109a302801d939a91ec1c0b6525e631f0ed021bf79879d93babd5ab4a904802e5a97c21de4b063f4a310d1713f35a8699bccb1fd589cad8fb2f379e6ff1c9d2230a550cab125f0e1b323703aebc2d6fe75397c1d202c0e91c449b3eb16122e1a85b385d1b26dd67dcff3435a751f0a12463ee4705f92c9700395e7ea1954b18b01eb63f4422a144119b162ad3cb6c5c833ea91a7dda0752be46ea955e