dubois.newstory.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b9:e1:da:cc:73:2a:81:a5:fc:7d:f5:b0:6b:4e:48:58:a2 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dubois.newstory.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b9:e1:da:cc:73:2a:81:a5:fc:7d:f5:b0:6b:4e:48:58:a2
Serial Number (int): 324589308042157075284194894742449971288226
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f7:52:51:93:87:1c:d5:23:ae:f1:6e:b9:4f:28:62:0c:e8:05:3c:cc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8b:8a:25:c4:e2:af:61:2a:12:ca:7b:c7:1b:3a:b9:45:4c:c8:88:2f
Fingerprint (sha256): ad:db:95:71:19:dc:fe:20:68:a5:11:f8:a8:1f:90:89:f3:c0:b0:96:26:07:79:c8:6a:64:25:18:94:82:24:69

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dubois.newstory.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dubois.newstory.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

berwick.newstory.com
clearfield.newstory.com
dubois.newstory.com
harrisburg.newstory.com
indiana.newstory.com
kenhorst.newstory.com
lancaster.newstory.com
monroeville.newstory.com
perkiomen.newstory.com
throop.newstory.com
www.berwick.newstory.com
www.clearfield.newstory.com
www.dubois.newstory.com
www.harrisburg.newstory.com
www.indiana.newstory.com
www.kenhorst.newstory.com
www.lancaster.newstory.com
www.monroeville.newstory.com
www.perkiomen.newstory.com
www.throop.newstory.com
www.wyoming.newstory.com
www.wyomissing.newstory.com
wyoming.newstory.com
wyomissing.newstory.com

Other certificates including the domain name newstory.com

(limited to 100 certificates)
servicedesk.newstory.com
mail.salisburymgt.com
dubois.newstory.com
dubois.newstory.com
helpdesk.sam-dinesh.com
helpdesk.ineosphenol.net
throop.newstory.com
newstory.com
mail.salisburymgt.com
ithelpdesk.cwc.com
itservices.luminuseducation.com
mail.salisburymgt.com
throop.newstory.com
henleyhelp.vioc.net
helpdesk.ineosphenol.net
henleyhelp.vioc.net
hdesk.amfarconsulting.com
dubois.newstory.com
newstory.com
helpdesk.ineosphenol.net
mesa.aylsoluciones.pw
newstory.com
mesa.aylsoluciones.pw
helpdesk.ineosphenol.net
newcumberland.newstory.com
helpdesk.ineosphenol.net
newstory.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
newstory.com
newcumberland.newstory.com
newstory.com
newstory.com
servicedesk.newstory.com
newstory.com
helpdesk.ineosphenol.net
ithelpdesk.cwc.com
newstory.com
servicedesk.newstory.com
helpdesk.ineosphenol.net
hdesk.amfarconsulting.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
itservices.luminuseducation.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
newcumberland.newstory.com
helpdesk.ineosphenol.net
ithelpdesk.cwc.com
newstory.com
itservices.luminuseducation.com
helpdesk.ineosphenol.net
dubois.newstory.com
newcumberland.newstory.com
helpdesk.ineosphenol.net
newstory.com
newstory.com
newcumberland.newstory.com
newcumberland.newstory.com
hdesk.amfarconsulting.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
newstory.com
helpdesk.sam-dinesh.com
selinsgrove.newstory.com
dubois.newstory.com
mesa.aylsoluciones.pw
mesa.aylsoluciones.pw
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
newstory.com
newstory.com
ithelpdesk.cwc.com
dubois.newstory.com
newstory.com
throop.newstory.com
helpdesk.ineosphenol.net
newcumberland.newstory.com
hdesk.amfarconsulting.com
newcumberland.newstory.com
servicedesk.newstory.com
throop.newstory.com
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net
harrisburg.newstory.com
newholland.newstory.com
monroeville.newstory.com
newcumberland.newstory.com
harrisburg.newstory.com
helpdesk.sam-dinesh.com
helpdesk.ineosphenol.net
perkiomen.newstory.com
helpdesk.ineosphenol.net
indiana.newstory.com
kenhorst.newstory.com
helpdesk.sam-dinesh.com
newstory.com
henleyhelp.vioc.net
helpdesk.ineosphenol.net
helpdesk.ineosphenol.net

Certificate

The complete raw certificate details for dubois.newstory.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn7Z/WZhXxFzT/KMHYJv
5Lmmcy9TybXZqy1i713qRoTQwYphRjBZMETJHBLI4q6wKL39KjtyGmyASP7YKph1
aGykXo+oXOnicmQDkI67wg4PtB6i0LXfIMFG9zvabm9Nt7JN2X5mWFSH4r5ggRgZ
0Yk0gWqDZgNViGlRcqX5rFI99JDmn+RzB8ZEXxkJjUS2fyJWDT3nkZKPG57K6lKY
on5wxXiFbky2OptCjGnBVY31s6JBo6CFgqSAOG+EOUImfGAhFKREEwiN4vH6PRfz
ItE3lGqv3FHI6FdpRMqvczlRo542ZZpkY4ZXdzeqVuvQOaYxewUpygJFFKhMhAGo
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324589308042157075284194894742449971288226
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-18 09:51:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-18 09:51:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dubois.newstory.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21523064661510882616732176318039946192025910371658092072186972039230853060517302780919874946930879483203931534420183407792768257714994921693734407853770616617315596425332153104204699051396567852153275284423023933274721836240086355601596550496018344366236642844218113969458276479557952354229917441135067109619770840446555878236762627895766457373971214354299655689185531866820768751528155630571545897111263662951514140323692687478362031270647779541289107840813576677532362838814525855390198428399118807505050061900387650307065722375542385625530189096556180383472449199488013319057777306614385574350637325779236108216363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7525193871cd523aef16eb94f28620ce8053ccc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (612 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berwick.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearfield.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dubois.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrisburg.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiana.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenhorst.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lancaster.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monroeville.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perkiomen.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'throop.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berwick.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clearfield.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dubois.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harrisburg.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiana.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kenhorst.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lancaster.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monroeville.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perkiomen.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.throop.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyoming.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyomissing.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyoming.newstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyomissing.newstory.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167c0f0d4cf000004030047304502210093bf5137140e3dfafd61a41eeefc720fb8bf539bccac27927380628be47ddb9c0220280e1221b3ce40a73c208d0221e5cf176ccd787937361322828a91fb0b53426000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167c0f0d712000004030047304502200df019df0a67c441bb0d02b29cc85a2adb9f0f0d726604e40e7d4338eb702adb0221008860ab5a7c5d5e3a60323ee0b0f1fcf4ac9e771b6e3b22262fdef0cc195a29b6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004e97f7cf8312921a1854f11f53ef92e4628f93b24b07fd19d7b40bcae9b729caebe27b76ccddaeb351873404b8e632e38b61bde27399c42d8232118803406c26c497ed388b2852583b55d42bb692b31d8934bbd20897a9a87c20aca00a308b47ae1b069affab30047d8b9dc2f6e8022db6fbac6405236369d5f75f59559e6b3a83601e9e321567773b958d852113c17621bd95ba8c74e0980e5ee1d48b7fe93ee4a59e77dead2ace9882d61276d50868013f44183a9edbc457f8dfed66007bca00281dc90c516e0c81d9a58af026bd26bb1217eff2e07ac5ef839d19202739b43670be180e82271408bb75b195910fc703ffcac175e8c38a310dbe160ed813b1