suap01.impresainungiorno.gov.it

Issued by Actalis Domain Validation Server CA G3

About this certificate

This digital certificate with serial number 24:01:22:fc:59:32:30:b7:f0:c5:33:ae:51:52:1d:ed was issued on by Actalis S.p.A..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=suap01.impresainungiorno.gov.it

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate will expire on

Certificate Details

Serial Number (hex): 24:01:22:fc:59:32:30:b7:f0:c5:33:ae:51:52:1d:ed
Serial Number (int): 47858109740143826235348188216396226029
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: e0:24:a7:eb:af:f0:83:4a:17:7b:3a:e6:1f:ba:81:33:cc:82:99:32
AuthorityKeyId: 42:83:6d:80:7c:09:84:67:fd:80:57:ab:f1:26:f5:77:c8:22:82:71

Fingerprint (sha1): 44:ad:48:c8:cc:ad:ba:32:33:d5:b0:4a:0d:38:48:4b:44:58:f2:33
Fingerprint (sha256): c2:41:02:40:42:de:0f:14:69:7f:1b:b5:53:5d:b8:bb:bb:8e:2c:37:17:41:df:8a:9c:c1:2b:7b:b3:11:6c:ee

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg3

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G3
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL

Check the revocation status for certificate suap01.impresainungiorno.gov.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for suap01.impresainungiorno.gov.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

suap01.impresainungiorno.gov.it

Other certificates including the domain name impresainungiorno.gov.it

(limited to 100 certificates)
suap03.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapservices.impresainungiorno.gov.it
coll.impresainungiorno.gov.it
suapnewcl.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
pa-demo.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
www.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
pacl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapservicescl.impresainungiorno.gov.it
suapservicescl.impresainungiorno.gov.it
api.impresainungiorno.gov.it
suapnewcl.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapservices.impresainungiorno.gov.it
suapservices.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suapservicescl.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapservicescl.impresainungiorno.gov.it
suapnew.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
adminsuapcl.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
subf.impresainungiorno.gov.it
adminsuap.impresainungiorno.gov.it
adminsuapcl.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
coll.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
comunicazionireaws.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
api.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapnew.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
test.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
coll.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suapnew.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suap01.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suap03.impresainungiorno.gov.it
adminsuap.impresainungiorno.gov.it
suap.impresainungiorno.gov.it
suap02.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
test.impresainungiorno.gov.it
pa.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it
suapctn.impresainungiorno.gov.it
suapservices.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
suapcl.impresainungiorno.gov.it
www.impresainungiorno.gov.it

Certificate

The complete raw certificate details for suap01.impresainungiorno.gov.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoYT2p6egVM81I++W/FM
x2rbCFbJOEASFkX6wiUBo6eRnJOA9M3FRBqOadg9sN01SpsWTxWCAAD+aPtg3QZN
ABuF+pro0HcA8KIGRMWDqmuTCgzF61DdVHWuO4M+zDcdLntB4esgk09RgyViGRF3
gDwzGZP14Sr1+jc1YmFnLlG/FX//xwRFaq0LjY1ikE0+x9ewvYNpTFXLQeQURiX/
mDiyHy/nzIz/dhQ2UJukLruMmrUweRRknFS+//X8J2mGr9Z1w+oFnWLybWYErChe
r6FGXhOlke3QzGjmE5jsBw4Mt3weapyTo8nrb1xRvrzLtFAwAR0gOTzF/Dtg5MGX
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 47858109740143826235348188216396226029
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-06 10:00:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-06 10:00:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'suap01.impresainungiorno.gov.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26071206929372452359285580270847090414988227447868490751269217175562152472217036974314229398074881842811312361807470917418737441437000676829187836912111738901869306367293328939433096093228934992118379398375418438695982814254724449072992083842502851631988804262412896903050561297753731880529025589407869874607783640086566920812234047806441417348685547855854366486120360052346921864819921938580939509682812480983219348937030955848497264407748689246539554905780892974298462175076265795835156115204296651356033817923894324192467395040198638537425655121199970850658813454497051213694165931529917963865194801661465031972843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 42836d807c098467fd8057abf126f577c8228271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suap01.impresainungiorno.gov.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.22.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e024a7ebaff0834a177b3ae61fba8133cc829932
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001892aaeffea0000040300473045022100af3a6aa281762890e64bbe27e59c624746c2a4888590a0991100076f8b53c2d602200b143b122fc957b3b3a0fdd89b7da3c3d4ae8d2e5c0fe8ce2bef778f2d79ef6300770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001892aaeff920000040300483046022100f4a4e7a2244f7cc3140f16b24dfa1fd537737027d45c62d50b10908654d78e2c022100fc55f20c8d6d0b751250d34f082807052ec700389a70b35e23c25730cc57f333007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001892aaeffc60000040300483046022100bdd347d5c650bfdc7dcda7dcfc5539368aa968c82e2833b1678785c60d8cdd1702210089afdcf779f49882961d7cec5c9be30e29fe6033efd322e0c52dcbc41cfcd865
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0070356cb9c5ead3a78ce3e2de735f104d9d1075f8093f98bc4d8abdc101b27cb73db2e082e0c6b8986d9239c3397192fa795f424d41542a84e67aaddf4501aaba90f7f1fb894b9a9046a21b995fd7d20075b325e7e257d3cfec9582e419587a1cc5f3a2a159378d4e85256f7deeb8562b82efe1ae78bb6d6dde87313fde5313b4efaef27a0afc623d3aad3dedebcd7691355d03f788a8e75237b98ffdd8162d7fa6825426f5eb585a2915e5c657f9cc51c3d261a0ab688746ab000f41e8472aaea4776b494984b848b4560361bac2382d343b79d6a228742188da887a9352328433ebca9209fa06ccd1bc819809ab516d4d2bd9b27caad0e5e29dd9e971017d01e445e14aafb542dead45c556a28ac367fb5e15b6a829a667e812fad437cf572b93c6b763c6e91f4b900cae3a421d8b375278ea3217b73b36727df617a1a192393f1306e79be353c08df37a31f03d4c797ee5f2b66c0d26fc8cab4fbf6100173a7aa3d5b299b8744ef53ef22422207865824223e8fee9e741d54008881866cc6f85f8ed5a5d1403e4d7a7ffc14963c462e4a688203ac3e856698eea9079e4db9c6ef6e048303a105d8e54ff486bb17e8c731a310dbad510caf36c557b773e7e65179c453a7dd71068c52c85e6dce6206807f76224ba2f05fb73469d90e6adbd8fd2579957c8b8439f56852f2cd00a40869f4c216e98756f53b12b76c1991491e1