coloradoacademyconnect.org

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 01:f8:11:d9:12:ed:f7:21:7f:05:cc:ba:65:41:7e:d6 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=coloradoacademyconnect.org

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:f8:11:d9:12:ed:f7:21:7f:05:cc:ba:65:41:7e:d6
Serial Number (int): 2617279616034493436987483557105598166
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 58:9a:18:ba:e6:d2:e4:e3:b4:5a:99:dc:b6:fa:9d:63:f5:f7:73:df
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 62:85:58:2b:fc:35:e3:51:1c:2d:f0:fd:de:4a:03:01:ff:f2:02:6c
Fingerprint (sha256): a1:9d:9a:11:1a:46:44:32:56:c0:f6:cb:73:67:66:64:f4:ea:24:46:0e:ee:06:ab:5d:6f:fa:31:08:ec:7e:65

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate coloradoacademyconnect.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for coloradoacademyconnect.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

coloradoacademyconnect.org
www.coloradoacademyconnect.org

Other certificates including the domain name coloradoacademyconnect.org

(limited to 100 certificates)
connect.woodstockacademy.org
canterburycommunity.org
cecconnect.com
connectlatinschool.org
coloradoacademyconnect.org
canisiusconnect.com
canisiusconnect.com
coloradoacademyconnect.org
coloradoacademyconnect.org
cecconnect.com
coloradoacademyconnect.org
canterburycommunity.org
coloradoacademyconnect.org
coloradoacademyconnect.org
coloradoacademyconnect.org
cecconnect.com
cadetcommunity.com
connectgettysburg.com
coloradoacademyconnect.org
cecconnect.com
coloradoacademyconnect.org
coloradoacademyconnect.org
cecconnect.com
coloradoacademyconnect.org
collegecrusadenetwork.com
canterburycommunity.org
cecconnect.com
cualumni.network
coloradoacademyconnect.org
cardinalsconnect.com
canisiusconnect.com
cadetcommunity.com
coloradoacademyconnect.org
coloradoacademyconnect.org
coloradoacademyconnect.org
canterburycommunity.org
canterburycommunity.org
canterburycommunity.org
coloradoacademyconnect.org
coloradoacademyconnect.org
coloradoacademyconnect.org
coloradoacademyconnect.org
connect.pepperdine.edu
cecconnect.com
coloradoacademyconnect.org
coloradoacademyconnect.org
cecconnect.com
canisiusconnect.com
coloradoacademyconnect.org
coloradoacademyconnect.org
cardinalsconnect.com
collegecrusadenetwork.com
coloradoacademyconnect.org
cardinalsconnect.com
canterburycommunity.org
cecconnect.com
cecconnect.com
collegecrusadenetwork.com
canterburycommunity.org
collegecrusadenetwork.com
coloradoacademyconnect.org
collegecrusadenetwork.com
cardinalsconnect.com
coloradoacademyconnect.org
coloradoacademyconnect.org
connect.woodstockacademy.org
cecconnect.com
canisiusconnect.com
coloradoacademyconnect.org
coloradoacademyconnect.org
coloradoacademyconnect.org
collegecrusadenetwork.com
coloradoacademyconnect.org
coloradoacademyconnect.org
collegecrusadenetwork.com

Certificate

The complete raw certificate details for coloradoacademyconnect.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgIQAfgR2RLt9yF/Bcy6ZUF+1jANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTI0MDUyMjAwMDAwMFoXDTI1MDYyMTIzNTk1OVowJTEj
MCEGA1UEAxMaY29sb3JhZG9hY2FkZW15Y29ubmVjdC5vcmcwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQCjplTSiUgYm8up9kIOdG46cx8o3Inz7DirQ+y7
KgZciPFMvRa7clChKZy/MYP8gP5RAe8a2ASygC1fE6GQ3dH4M7YLqVpu/QlVpCZS
EY1lmwhFGRbfQQBe+lAUC/YFTdhuWYQb+mZ662+kLGwR9dqy2k2rL7zriJ/LDIhA
2kvNsGnJ6APRKxqd64lHtRcUhs1ek+vO78bSCD4abvjKlazW4gB4JeZBeJtyW61b
wpQpLM5gVX1WKu00pF9z1RhPUsy3kj3Z36xU8kUCq+UP4+i7jKYngE+DDqAkaeRp
awX/nqCi/hY3c2H+mWUfWNaexKWnK3bRvKV61598xmxqxFojAgMBAAGjggMQMIID
DDAfBgNVHSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQUWJoY
uubS5OO0WpnctvqdY/X3c98wRQYDVR0RBD4wPIIaY29sb3JhZG9hY2FkZW15Y29u
bmVjdC5vcmeCHnd3dy5jb2xvcmFkb2FjYWRlbXljb25uZWN0Lm9yZzATBgNVHSAE
DDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDMu
YW1hem9udHJ1c3QuY29tL3IybTAzLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYB
BQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0LmNvbTA2BggrBgEF
BQcwAoYqaHR0cDovL2NydC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY2Vy
MAwGA1UdEwEB/wQCMAAwggF7BgorBgEEAdZ5AgQCBIIBawSCAWcBZQB1AE51oydc
mhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABj55wg/AAAAQDAEYwRAIgVvIe
0k1eWn2q94u95JT7hbz1FhyNHfGYNajrRyNOhUUCIEYQEEr45BNO6b7JQ8sfVTKy
1IQSmArmLHusnVKXypVHAHUAfVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowu
ebgAAAGPnnCDagAABAMARjBEAiApycRVNwoUiEXdN8HPsyVbhB2dND88ungxWron
zdHdEwIgBqhyT5kLZirdWOkSr63ewE/wOGZaDcy4XjaAOXZ5EWwAdQDm0jFjQHeM
wRBBBtdxuc7B0kD2loSG+7qHMh39HjeOUAAAAY+ecIOEAAAEAwBGMEQCIGqa/PYR
cAyJAedeZG/OaFPq3Oj5GfPRzElfnSrEkizRAiAtFSRQXyKmNPQ1eIQiJESc+EGp
hQk/EV8/hIKUCSYhLTANBgkqhkiG9w0BAQsFAAOCAQEAPQasKZ1e8ukrbgNiucHA
O+VYnUnBZfgHn/lNdv3zPJU+dkm2B9iQvfbX2tlh86O4ed74EYltvniKjmYLt9Pc
IIGgAV6FjJL1yZ3msUmt7Qj0QqxCamiubkUVyevdnoHIxqaBG3yA9VacyZtQGZ07
Ctg3RDOTZSerQCiQSa2ydnaunANC4VMVXxRZhSQX7AUq7nw3oDKFb/y5tRfY5rFT
gR0TkHpNpYMrFSM2vcJcA59Rv+PTdV9nMvtPhbkdqsHWnGOQls4oX3PQUh1W17q5
swSnJUrizzvcXj6wGJq7HZ7HkJe9q35bHCj4flDghosxx6BvSjFNja8rlq2VOtI/
VQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6ZU0olIGJvLqfZCDnRu
OnMfKNyJ8+w4q0PsuyoGXIjxTL0Wu3JQoSmcvzGD/ID+UQHvGtgEsoAtXxOhkN3R
+DO2C6labv0JVaQmUhGNZZsIRRkW30EAXvpQFAv2BU3YblmEG/pmeutvpCxsEfXa
stpNqy+864ifywyIQNpLzbBpyegD0SsaneuJR7UXFIbNXpPrzu/G0gg+Gm74ypWs
1uIAeCXmQXibclutW8KUKSzOYFV9VirtNKRfc9UYT1LMt5I92d+sVPJFAqvlD+Po
u4ymJ4BPgw6gJGnkaWsF/56gov4WN3Nh/pllH1jWnsSlpyt20byleteffMZsasRa
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2617279616034493436987483557105598166
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'coloradoacademyconnect.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20658864748968778884448418741726309221430885998655565975414820073027116496109945325925612454711964619500775650167556206182995483356181062374918883880093872495909284146525104667332182108330055456703748150391164513401104507283670973880078219498924019924196642705191689212586421771559077548887351707903468756539587787140642797599563694072216127944385683755823952156955990362876290021324764773199461177880686540117970665222871651415068005108473293055866369255628259092702028769791858241578313552426210203254599243676069713755035854380331174226143315155238655124159981031602171878066382728909470512507339826472639709600291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							589a18bae6d2e4e3b45a99dcb6fa9d63f5f773df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coloradoacademyconnect.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003d06ac299d5ef2e92b6e0362b9c1c03be5589d49c165f8079ff94d76fdf33c953e7649b607d890bdf6d7dad961f3a3b879def811896dbe788a8e660bb7d3dc2081a0015e858c92f5c99de6b149aded08f442ac426a68ae6e4515c9ebdd9e81c8c6a6811b7c80f5569cc99b50199d3b0ad8374433936527ab40289049adb27676ae9c0342e153155f1459852417ec052aee7c37a032856ffcb9b517d8e6b153811d13907a4da5832b152336bdc25c039f51bfe3d3755f6732fb4f85b91daac1d69c639096ce285f73d0521d56d7bab9b304a7254ae2cf3bdc5e3eb0189abb1d9ec79097bdab7e5b1c28f87e50e0868b31c7a06f4a314d8daf2b96ad953ad23f55