selfservicetest.ikano.dk

- Ikano Bank AB (Publ) -

Issued by GlobalSign Extended Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 35:c7:22:ef:60:07:de:ac:31:c7:b9:6b was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Ikano Bank AB (Publ)

Company registration number: 516406-0922
Organization: Ikano Bank AB (Publ)
Address: Hyllie Boulevard 27
State / Province: Skåne
Locality: Malmö
Country: SE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 35:c7:22:ef:60:07:de:ac:31:c7:b9:6b
Serial Number (int): 16643446734786595216328997227
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 10:a6:b4:80:61:3c:6d:bd:a9:c5:ea:f4:6d:32:b2:2c:1c:10:01:bd
AuthorityKeyId: dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d

Fingerprint (sha1): 5e:1a:ff:6c:16:b1:2d:33:e8:56:5a:c6:7b:93:b0:11:41:b0:51:bf
Fingerprint (sha256): 99:1c:ee:21:d6:0d:b6:21:0c:3d:fd:04:1c:e9:4f:db:7e:26:28:50:8f:cf:8a:b5:8d:4e:aa:2c:96:85:2e:e2

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g3r3
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl

Check the revocation status for certificate selfservicetest.ikano.dk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for selfservicetest.ikano.dk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

selfservicetest.ikano.dk

Other certificates including the domain name ikano.dk

(limited to 100 certificates)
selfservice.ikano.dk
mail.ikano.nu
selfservice.ikano.dk
selfservice.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
irw.ikano.dk
www.ikano.dk
selfservice.ikano.dk
citrix.ikano.dk
www.ikano.dk
mail.ikano.nu
citrix.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
selfservice.ikano.dk
www.ikano.dk
www.ikano.dk
mail.ikano.nu
sip.ikano.nu
test.ikano.dk
www.ikano.dk
www.pengeautomaten.dk
access.ikano.nu
www.ikano.dk
www.ikano.dk
mail.ikano.nu
www.ikano.dk
www.ikano.dk
selfservice.ikano.dk
selfservice.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
mail.ikano.nu
LyncWebDC.ikano.nu
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
citrix.ikano.dk
sip.ikano.nu
irw.ikano.dk
access.ikano.nu
selfservice.ikano.dk
selfservicetest.ikano.dk
sts.ikano.nu
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
LyncWebDC.ikano.nu
www.ikano.dk
www.ikano.dk
www.ikano.dk
selfservicetest.ikano.dk
www.ikano.dk
citrix.ikano.dk
www.ikano.dk
test.ikano.dk
www.ikano.dk
selfservice.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
www.ikano.dk
mail.ikano.nu
mail.ikano.nu
mail.ikano.nu
www.ikano.dk
sip.ikano.nu
www.ikano.dk
LyncWebDC.ikano.nu
www.ikano.dk
www.ikano.dk
mail.ikano.nu
www.ikano.dk
selfservice.ikano.dk
selfservice.ikano.dk
test.ikano.dk
www.ikano.dk
selfservice.ikano.dk
sip.ikano.nu
www.ikano.dk
capgemini.ikano.dk
test.ikano.dk

Certificate

The complete raw certificate details for selfservicetest.ikano.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16643446734786595216328997227
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 13:06:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-11 13:06:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '516406-0922'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Skåne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Malmö'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hyllie Boulevard 27'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ikano Bank AB (Publ)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'selfservicetest.ikano.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802317701034278455700088229204837271312657573083627557397788330256512137580092021173667415372021887834863696673477829264798217324282840803555412415834227806186952918920033936038527876397732027258789378003694268392201757572143502715155997161128738375875043532292583112910949340332801726928237202438611026438208053349832298617743094142594491388838844774718561872928367066475313509152780965911157816869581365863828836290382093889199953904247234894187617955337037075480757416378360900781212195053116877172912677531163706819326324714660683761245143641641595610205661004381367946443095116663886182118642187409064817191949958678640025425911179583357361413546192822047140489528066552581899238785475139043495929822134495050860956775311342157321239822629952818560916561507985935750877165167952990605613551630783109872492101937723869926553698322230297462393889579914071661271804001515168428508987139448566380220805428057366007653496109564272900709325182514628826641359255266100812468476579651197834252777932157431393289885683645889532211525183972552658225756290607901249745226106263018850931288136624553734106721575667226482928464908368659606329905063658330208425162166866590454345396451099032414500291348709361140509896072956216705722081243013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g3r3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfservicetest.ikano.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ddb3e76da82ee8c54e6ecf74e6753c9415cee81d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10a6b480613c6dbda9c5eaf46d32b22c1c1001bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001f18d1c955f399abaf4fb8d0cd0d741fd59a2c764fdae3e98bf1b286ddabcb8d878d8b9b9bf1bab5e8fcc8ea9d823e6dde8529d31c05b33db6f105053fb3dffd416197c0249e9213b74d14d16ec9b573f6be8916af3bec705a059c968b79a0c01bcb584ce3dbb1e7ba86fb65906a7fc68142c066ee24473388aa7f6261cbe1f59d0ff24d5608439d331b66e67d462e857ae3b7fe4138f1ffa9aa0e19f126a1aeb10c37c8e15caa24b91fc5d009436f7e063434f093f31823df619d1cb7e08c76e467975c9fcb5c7fb849b86d548d34cfd52058dcaa08bc947f08c05538f16ecb00f2be5cd3e30f0f838f88f02617654ad28aa18c96660b8efd1de1ee72e4c01a