raiffeisen-channel.konverto.eu

Issued by GlobalSign GCC R6 AlphaSSL CA 2023

About this certificate

This digital certificate with serial number 2e:1d:34:52:de:d9:42:38:f2:0b:3a:32 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=raiffeisen-channel.konverto.eu

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 2e:1d:34:52:de:d9:42:38:f2:0b:3a:32
Serial Number (int): 14271616392298759431853390386
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 5d:34:46:c7:04:52:92:45:21:d7:b1:e3:51:77:17:05:f9:04:21:cf
AuthorityKeyId: bd:05:b7:f3:8a:93:3c:73:cb:79:fa:0f:85:12:a1:77:96:18:91:74

Fingerprint (sha1): d9:52:36:af:70:03:24:00:da:e7:79:e3:1d:e0:81:66:10:ed:f4:a4
Fingerprint (sha256): c0:d1:0f:c9:99:bb:d2:98:88:84:0f:26:5c:c6:e9:85:85:19:a0:1d:e0:f4:7b:2c:79:db:25:f5:59:81:a2:64

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr6alphasslca2023
CRL Distribution Point: http://crl.globalsign.com/gsgccr6alphasslca2023.crl

Check the revocation status for certificate raiffeisen-channel.konverto.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for raiffeisen-channel.konverto.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

raiffeisen-channel.konverto.eu

Other certificates including the domain name konverto.eu

(limited to 100 certificates)
www.konverto.eu
konverto.eu
konverto.eu
konverto.ag
konstatus.konverto.eu
konverto.eu
status.konverto.eu
konverto.eu
konverto.ag
konstatus.konverto.eu
status.konverto.eu
amccinema-ksa.status.vistamanaged.services
konverto.ag
olo.konverto.eu
konverto.eu
status.eurabo.be
status.eurabo.be
konverto.eu
status.madviking.eu
status.madviking.eu
dashboard.itavis.dk
status.site24x7.jp
status.site24x7.jp
*.konverto.eu
status.konverto.eu
status.eurabo.be
konverto.ag
status.poweredbydivido.com
status.konverto.eu
konverto.ag
status.eurabo.be
*.konverto.eu
status.konverto.eu
konverto.eu
*.konverto.eu
*.konverto.eu
status.konverto.eu
*.konverto.eu
status.konverto.eu
konverto.ag
raiffeisen-channel.konverto.eu
status.zohocloud.ca
status.eurabo.be
*.konverto.eu
konstatus.konverto.eu
status.eurabo.be
olo.konverto.eu
status.poweredbydivido.com
konstatus.konverto.eu
status.poweredbydivido.com
konverto.eu
konverto.ag
konverto.eu
status.poweredbydivido.com
konverto.eu
konverto.eu
konverto.eu

Certificate

The complete raw certificate details for raiffeisen-channel.konverto.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGAjCCBOqgAwIBAgIMLh00Ut7ZQjjyCzoyMA0GCSqGSIb3DQEBCwUAMFUxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSswKQYDVQQDEyJH
bG9iYWxTaWduIEdDQyBSNiBBbHBoYVNTTCBDQSAyMDIzMB4XDTI0MDEzMDA5NTEy
M1oXDTI1MDMwMjA5NTEyMlowKTEnMCUGA1UEAxMecmFpZmZlaXNlbi1jaGFubmVs
LmtvbnZlcnRvLmV1MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApKwl
NxNjgPmZgOBUhFomMwb/puqS1yL8rGCZ5a/nwk3ST/uy2gXtDwSSUy+HY3vIH5DR
ZpxK3Sx3isuala1NKuOLzPDHLiEf1M+cW+Vm3WG9hWO5Ue7wg3x216t7YNTX6O3q
EEPTS3ph6vTR4h66Gk7nlFgcSJ+mvtkB5U5/M+YHrV6byWx7vhc6lnAbpose7AxL
6pQ4tOUhMc7vXYKlnw6lfo7lyBhavzj3r8Vy4jKWcA7Sh60lLKNBsi0/pudS3400
wo4xSQw7V78145RcNu7ASr7FH2kl4Dtfr+E5xuKa8x/eIshn9dDlHmj+nWWfjASe
r5djrsfDWOBbvHo4SYUlrFY1rQikJfN0XvwKzpMs7+fKcFf0Z4P25Pae9AOV/ND4
hSaYyaXQq3jNabWl2N9WqPvuHSTFYesWeNV7OUzNx3xFQF6Y4ckMsRsF9niBeEcm
FLmONpR/x/xs5McCXF5HP9dZ3EulAWHoawnX/QLKyZnJzDIsBVmCkOSujCa1a68q
fWIXnCcyPZ++cAbPekd6rgMwqK5L23h/3VZ7RYruO+SGxqdDULgaxVXKPxLYOtn+
4zQoUfSh5IXOFv7RDosi3sm9IlBEFoYvVR9eqMwHLre7Xzv1zLH/DPPz/d8CUDAQ
MsOa2CQ6fHBbMeLao11Rl1txEGoAguivZq7Br9MCAwEAAaOCAfwwggH4MA4GA1Ud
DwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMIGZBggrBgEFBQcBAQSBjDCBiTBJBggr
BgEFBQcwAoY9aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3Nn
Y2NyNmFscGhhc3NsY2EyMDIzLmNydDA8BggrBgEFBQcwAYYwaHR0cDovL29jc3Au
Z2xvYmFsc2lnbi5jb20vZ3NnY2NyNmFscGhhc3NsY2EyMDIzMFcGA1UdIARQME4w
CAYGZ4EMAQIBMEIGCisGAQQBoDIKAQMwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93
d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wRAYDVR0fBD0wOzA5oDegNYYz
aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9nc2djY3I2YWxwaGFzc2xjYTIwMjMu
Y3JsMCkGA1UdEQQiMCCCHnJhaWZmZWlzZW4tY2hhbm5lbC5rb252ZXJ0by5ldTAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAUvQW384qT
PHPLefoPhRKhd5YYkXQwHQYDVR0OBBYEFF00RscEUpJFIdex41F3FwX5BCHPMBMG
CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDM4NbU03Rrv+OT
E81MwDhOlnkngZkXjjAyk/kw9Y56Nwd0rWesjdQisIZEbfA3cooYtazIvH7yave9
6GbUP/kQOOojecxtNOtqZf6WuAniGBXUSm2HLGYBlwefpAibGY8ch/xWO0a+dabx
mxfts40RmPgE4FzH/uhprcdCgMop/3yXj9IpkjSZBMPgVJagbR86HFcDISrf9qWh
pgLPnngj5q37Xf9AcMMIEHh3qSzZQ0j1tzUZzGxSHxuDgQkeGk078lhVW9By0njG
KG8z1Z3RiAkIOefd3pZAURvSpBQTVBDJLHvnnWKuKbevfbs3vxlzjjFAneSMRqCm
sd7xHrKU
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14271616392298759431853390386
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R6 AlphaSSL CA 2023'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 09:51:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-02 09:51:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'raiffeisen-channel.konverto.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 671804954671880464320216110038396804547738099132698682888381334011684342371314415867454049407116153699997961473964705892789084317052952760183614619401696868863257386374997644568107129553648562628869899384574310473206524870516613685262636334183525048641172085533073185675979410564347260634913583452331782521645514662390228082717379405755918695542298995023456633591100536291976305760375312781090386835048057410064906969816060262665983005687784675839792656764081907283362078916860477476830727981120093758012425475208253116106149288892178669752680279098456795677294758060657837821969621955654439731320549910381425160315606894687052065401777285046973565096967996617697568353350790001076914855091488037445595873979523662779928067643002938946515258996774789306108512071641857291193317566443495368466952697006365439385411054723402630247330965277331507708651356974254578660767810758329916526934479044134067598620580203951864710234063237776402236195446207628685154472107107747085133220574326569976188967817295753097184682962485110266046246846492767374031294788399038041242864783281016016860632446843669921961083488007183528745553544656754860363991287843635010010159362950112749906961725936487049296454749749230892883568480345057435688139599827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr6alphasslca2023'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr6alphasslca2023.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raiffeisen-channel.konverto.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd05b7f38a933c73cb79fa0f8512a17796189174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d3446c70452924521d7b1e351771705f90421cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00cce0d6d4d3746bbfe39313cd4cc0384e9679278199178e303293f930f58e7a370774ad67ac8dd422b086446df037728a18b5acc8bc7ef26af7bde866d43ff91038ea2379cc6d34eb6a65fe96b809e21815d44a6d872c660197079fa4089b198f1c87fc563b46be75a6f19b17edb38d1198f804e05cc7fee869adc74280ca29ff7c978fd22992349904c3e05496a06d1f3a1c5703212adff6a5a1a602cf9e7823e6adfb5dff4070c308107877a92cd94348f5b73519cc6c521f1b8381091e1a4d3bf258555bd072d278c6286f33d59dd188090839e7ddde9640511bd2a414135410c92c7be79d62ae29b7af7dbb37bf19738e31409de48c46a0a6b1def11eb294