OV SSL/TLS Certificate for bds-managed-hsm.managedhsm.azure.net Issued to Microsoft Corporation

Certificate is witin its validity period

Issued by Microsoft Corporation (Microsoft Azure RSA TLS Issuing CA 08)

About the bds-managed-hsm.managedhsm.azure.net OV SSL/TLS Certificate

This certificate with serial number 33:02:07:c8:05:ee:fc:0c:a4:c5:f0:b4:5a:00:00:02:07:c8:05 for bds-managed-hsm.managedhsm.azure.net was issued on by Microsoft Corporation.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for bds-managed-hsm.managedhsm.azure.net provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Microsoft Corporation

Organization: Microsoft Corporation
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 33:02:07:c8:05:ee:fc:0c:a4:c5:f0:b4:5a:00:00:02:07:c8:05
Serial Number (int): 1137514877549901571452349233088703775617042437
Serial Number Length: 150 bits, 19 octets

Subject Key Identifier: 89:3c:61:00:c8:93:85:94:d6:e8:f8:e3:97:fb:53:9a:0e:e0:91:32
Authority Key Identifier: f6:7e:2f:bd:80:a3:4a:b2:70:5b:eb:df:9a:1f:d8:ed:ca:61:80:07

Fingerprint (SHA-1): bb:2c:85:99:0c:9b:5b:a8:84:49:a1:b8:41:5a:ec:b9:05:75:fa:c1
Fingerprint (SHA-256): 15:1a:1f:c4:24:96:5d:3d:dc:b5:d8:04:66:d5:5d:1e:2c:73:24:c5:e5:4d:e1:1c:54:c2:4b:52:d3:55:9b:44

Issuing Certificate URL: http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt

Revocation Information

OCSP Server: http://oneocsp.microsoft.com/ocsp
CRL Distribution Point: http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl

Check the revocation status for certificate bds-managed-hsm.managedhsm.azure.net
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for bds-managed-hsm.managedhsm.azure.net

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
12
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for bds-managed-hsm.managedhsm.azure.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwOHN/fIK0fb+ZkNRYMx
OPcFwmj9l+sGCK9PGnnyEhl6ISZr8AfUFTtluNIOohL/0wdkZFqmlXDl9CRwTgRS
icbfrp2DnaZbe/zGcX4BUnXcUXlm17b9mcKdz3jPKrfbmp25uRWr+TnzeZ+JwjES
af+q2c224aW+xephDN4s75yI2prGOIfBDxK8uP00pJTCFw43aEUvgFTQ1QcJtHg3
DM1+HYHFo9ReVL0mfibw+98InMqfczTrfWPT1qxvCBzI8G1FCD75tHTrTDaXq8BK
AQVk6bXHcAl36HWra80fulTxJnFTn1fJ2fRagdODI2oqAL1NVTqHl2ZmU67z27sn
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1137514877549901571452349233088703775617042437
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Azure RSA TLS Issuing CA 08'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-14 08:21:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-07-09 08:21:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redmond'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Microsoft Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bds-managed-hsm.managedhsm.azure.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25123162507401298143961370826394014985026398186491848575650080310968770738074390702707590400128636589278325360862789710552898966942798314748069608778951169481612324449020319423027160349717214664979338508831463317639372103481985477245785090349646187600866525307259476304053477507988107107028238850047124568437589101765021297806831923692389518322769694754524997430631381423075873005825910789072764314102024174971932270085009377367511825765262894501152872543673205171444758232205897268099169931702875477682221136955084638629912548899249040949428967925950898142154046682606298256814795186048607078954514655206868824827793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007600d76d7d10d1a7f577c2c7e95fd700bff982c9335a65e1d0b3017317c0c8c5697700000198080f443a0000040300473045022100ea3602c05489f77960bd08b124cfdd5a05ee9e9530da2d5443d73ac940e7fbfb02200fe33b9ef6db243d088dd5a069c3fd34314d799cf9526233944b1147fcac05eb007700c2317e574519a345ee7f38deb29041ebc7c2215a22bf7fd5b5ad769ad90e52cd00000198080f44e30000040300483046022100843ab846dabab7d6680822a73228db0e475fbcd20d872c02737a050d474827ff0221009c7b005a3a77af7aea912baddddf2fbcb097361bf61800b9b4d338d9a39887fe0077001f56d1ab94704a41dd3feafdf4699355302c1431bfe61346089fffae795dcc2f00000198080f4573000004030048304602210087bb6be909561541f99d7d4ac736396184146bd57c2ae96a35c24702142f0f67022100aa2083ab06fbe46d65e30a9b7b02d6d41b9e480616ca261aa18c5ca1c3df522c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.21.8.15690651.3798470.4214446.239628.16526621.93.4272873.6083518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 100
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://oneocsp.microsoft.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							893c6100c8938594d6e8f8e397fb539a0ee09132
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bds-managed-hsm.managedhsm.azure.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bds-managed-hsm.managedhsm.azure.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.76.509.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.microsoft.com/pkiops/Docs/Repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f67e2fbd80a34ab2705bebdf9a1fd8edca618007
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00437c573c14616a7ceae2b8da3a60023dfe50037760b97dd0900490c46dc18b174477ccdc68e20e2b7f2af02e8be1ef5ed7102bb5e14ae0fe7139be3aa8886053f157649007035583c9519fe16320add5de70e3a905260f0384d56f795162b5010482c22bda3cda3bab65ba069dffec893d4f0c42cc036a4be6683549c2f67ca2df2e2191e1f22624b09b80d8945ea2c8fc6b1b8b55a834bfccce9fe5f82637c57532a1e60d8c5a46b7c09aa3bedc6434bef297dcbaf95e71547bc503e32b5bc93d2f24fd7670f0e49e7e4b1d693c63aaa1cfefb0258fb980de2878fff16be03ecc584cc3f1f4d2d5548bb5d2e20e9a8a3e6c64fbac41145c1a469a17e81d3b57ed927ed51465bb3f1860b1d741a203cc1c524b97a5e8b9fdef3ff84931c7e7a450392ae8fb5836011f437cf768d84203fabd3a54456a6dfb54ac15a106ee650b3b8e1f14b32967c1f5d80f17adeec319bf7000b9ff6dcc9fd9c2c106700e954661edc99cad098282b83b47ec254c25ccf0d2377e6ef35f963daa308e56e6d66ca747776ca8652a3b7333b435f8d488939890585a5958c533b4034c4e7d0db33f7a516fd6b9f030aa77c8e1bf7d8bf2e2b2624b7fe91c421b7d74907ca9e495ee28dc0e114cd53d438eee7145ef10db7cddef90df8d3da14a98b9d201cd93048ee92a4d78a7e4484e729ad9b542b3b372eff2281677852abb5b9f17f004f3a1fa