www.ait.ie

- Athlone Institute of Technology -

Issued by GEANT eScience SSL CA 4

About this certificate

This digital certificate with serial number 7a:ae:a9:f5:62:76:bf:d3:dd:9f:69:8b:46:fc:ee:cc was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Athlone Institute of Technology

Organization: Athlone Institute of Technology
Locality: Athlone
Country: IE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 7a:ae:a9:f5:62:76:bf:d3:dd:9f:69:8b:46:fc:ee:cc
Serial Number (int): 163072722307740719718130294702408003276
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: bf:47:7b:4f:9a:50:a0:2d:aa:68:c5:28:53:2a:a5:f1:bf:38:fa:23
AuthorityKeyId: 9a:2b:8a:22:d6:8d:0c:c0:2a:a5:6f:64:33:3f:96:60:67:15:1d:b2

Fingerprint (sha1): b5:16:20:73:5c:89:17:eb:88:86:70:df:78:7c:82:bb:e2:d8:f9:15
Fingerprint (sha256): ab:ac:b3:6e:da:46:c9:92:36:f4:72:7b:a9:72:03:83:b7:3b:e7:8c:fa:10:07:83:c9:33:09:b0:78:b2:f3:a9

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTeScienceSSLCA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTeScienceSSLCA4.crl

Check the revocation status for certificate www.ait.ie

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ait.ie

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ait.ie

Other certificates including the domain name ait.ie

(limited to 100 certificates)
www.mri.ait.ie
mail.ait.ie
collaboration.ait.ie
modmgrtest.ait.ie
sip.ait.ie
elearning.ait.ie
mail.ait.ie
inplace.ait.ie
autodiscover.ait.ie
*.elearning.ait.ie
libmain.ait.ie
mail.ait.ie

timetable.ait.ie
inplacedev.ait.ie
cpd.ait.ie
library.ait.ie
elearning2014.ait.ie
edocs.ait.ie
elearning.ait.ie
forti.ait.ie
libsearch.ait.ie
eduroam.ait.ie
elearning.ait.ie
www.ait.ie
owa.ait.ie
modmgr.ait.ie
aitstage.ait.ie
idp.ait.ie
apps.ait.ie
vlablive.ait.ie
elearning2015.ait.ie
mail.ait.ie
www.bri.ait.ie
ammt.ait.ie
ait.ie
aitmoodle.ait.ie
adfs.ait.ie
timetable.ait.ie
sri.ait.ie
stu-projects.ait.ie
timetable.ait.ie
elearning.ait.ie
libmain.ait.ie
amm.ait.ie
aitcard.ait.ie
libmain.ait.ie
apps.ait.ie
forti.ait.ie
vlab.ait.ie
onlineexams.ait.ie
mail.ait.ie
extranet.ait.ie
*.ezproxy.ait.ie
AN CHEIM COMPUTER SERVICES
aitmoodle.ait.ie
careers.ait.ie
weblive.ait.ie
tus.ie
elearningm2.ait.ie
libmain.ait.ie
weblive.ait.ie
aitv-bol-f1.staffnet.ait.ie
jobfair.lu
vlab.ait.ie

jobfair.lu
moodlenew.ait.ie
elearning.ait.ie
www.ait.ie
fs.ait.ie
mail.ait.ie
*.ait.ie
fortianalyzer.ait.ie
idp.ait.ie
aitmoodle2019.ait.ie
aitcard.ait.ie
www.ait.ie
vlablive.ait.ie
2019.elearning.ait.ie
www.ait.ie
2019.elearning.ait.ie
www.ait.ie
www.ait.ie
AN CHEIM COMPUTER SERVICES
careers.ait.ie
aitcard.ait.ie
AITP-EDUROAM-A2.ait.ie
fs.ait.ie
jobfair.lu
modmgr.ait.ie
helpdesk.ait.ie
idp.ait.ie
aitcard.ait.ie
2019.elearning.ait.ie
tus.ie
idp.ait.ie
fs.ait.ie
helpdesk.ait.ie
elearning.ait.ie

Certificate

The complete raw certificate details for www.ait.ie in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqbgkdap2fm4IJy1NoVr
DVBjSsqqpdCGBXuF+73+IMlIITPXpHyQDAtZQsQIFaxk9vtoblxvpt8drRnz6fqe
iZWAR0s+mYOw7FNLqDhLWqtH3QF93RPq0ibSBlOKgw9bcK4DzQ3sbB467JpkMO5y
3pD+A1gsys/9PIe7NfOB6Cqha6ycU7MDGgVLI8LTkRbdgfiXPL55A/VETOgCr5Sj
dLIu7yTenJD/GnuHyB3u6Ihmj8SGriwwhrLLPHZn102mycCBmMztkE47mq9He2eE
/hr70gSN2oiOf1hM6X+zBuun4iH+U/luxmxmKt0/6gY9HolJemJdMuSa+fqAjd2k
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 163072722307740719718130294702408003276
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT eScience SSL CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'org'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'terena'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'tcs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Athlone'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Athlone Institute of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ait.ie'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20532895631305224832440614051289296562495187016786144899050410271368983136109373251229774300996438329998694439488762848840495386952634218196996991083188745951771859510881440448804207759267979447837040402246028134039805477028811245441096281150164513058253403138275362908179367982523112116306769311271432257007250019026574223960713333944785403780064129568711446863826220961867933400597351511328632898210941428678738368910775591498665697706173288413166963434009324566072925841414859915562829947616495241608649698561375582000488337013069192498665352537471486163411713066342347447558581555761161323940571979265490454160567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9a2b8a22d68d0cc02aa56f64333f966067151db2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf477b4f9a50a02daa68c528532aa5f1bf38fa23
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.3.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113612.5.2.3.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTeScienceSSLCA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTeScienceSSLCA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ait.ie'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		004043e40588b66a6b1b251abd619ed8f9ea52b7ce855de1ac029a3cb5a34ac0a4703a8059f59b07847c3c43999b5c79cb8c689f05299b676a081c8712ff8d3eb5277025465ef9d9a3b45a8fc20a00850a10b54b178b0385abf3107c83cbc238882feccf25259f56c2576baee8f3fe076a1232910e057693c2c7c4d56e0338481de3596a9f3117a951171c9ef9c711f4cc0064612101fd146e52feb6b5e30839ec0925361341deedd74183f1c8823ffa3dde2c1ea18d81d776a0f88c85ac01cdfd20958fbfd077a8b5140d3139479e6ce55b8fd7a99e29b37bfa6d4872456202ee2b0576d962f6dd2d468adce0b8381bb273116e2bfe60b40a12156a8927a9bec05ffee3123e76a47fca872c55c0f25347d87c04f86b276cf67e0eea4f704fe950ecbcdb0e1a19f294cedcc3b711a4d8dc775fb4ae120563b083047769a92a417d28855930d50cb08a93174b18ab871f146e5c0198b87f5a4826152fe23b006f77c0000b7b1996b30d2c0c7fa542b737e7aadf3e2292d2ca8d9bef2c547a82e75db001ae0d9bae58d7a4b0f9aafffe7efecb928ab00509bdeed3f4294bfba63e0a4ad014c3fde969f61c3c04ce962241168a72cb09b6173fba36bfff480a5c3c147b8be7aa730285791039dc50d47150c4b7ec2516c421bfa9a401b7f01dd05357464701252281c301af4186ad5e01c063574f37bd62cc99874bbf5b0927819892