rota.cjscp.org.uk

Issued by Gandi Standard SSL CA 2

About this certificate

This digital certificate with serial number 5c:47:0c:62:6b:0b:82:fe:61:7e:74:5b:81:e2:a1:60 was issued on by Gandi.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rota.cjscp.org.uk,OU=Domain Control Validated+OU=Gandi Standard SSL

Gandi

Organization: Gandi
State / Province: Paris
Locality: Paris
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:47:0c:62:6b:0b:82:fe:61:7e:74:5b:81:e2:a1:60
Serial Number (int): 122657879875572216121766717775180636512
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 38:97:78:6f:67:e3:02:2b:23:96:33:ba:b6:7d:1a:77:b1:bf:73:93
AuthorityKeyId: b3:90:a7:d8:c9:af:4e:cd:61:3c:9f:7c:ad:5d:7f:41:fd:69:30:ea

Fingerprint (sha1): dd:ea:4c:53:29:09:f3:d5:37:73:07:3e:c0:c6:c3:d0:6a:f7:88:ca
Fingerprint (sha256): e1:3c:59:4e:40:b5:0d:ba:b2:26:d4:67:69:cf:d4:70:ec:2c:a0:2a:ae:eb:31:2f:bc:dc:7e:dc:37:f1:17:0f

Issuing Certificate URL: http://crt.usertrust.com/GandiStandardSSLCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/GandiStandardSSLCA2.crl

Check the revocation status for certificate rota.cjscp.org.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rota.cjscp.org.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rota.cjscp.org.uk
www.rota.cjscp.org.uk

Other certificates including the domain name cjscp.org.uk

(limited to 100 certificates)
saml-token.cjscp.org.uk
sit.cpp.cjscp.org.uk
saml-login.prp.cjscp.org.uk
onlineplea.cjscp.org.uk
prosecuting.cjscp.org.uk
sit.cjscp.org.uk
apigw.cjscp.org.uk
rota-sit.nftpr1.cjscp.org.uk
apigw.nft.cjscp.org.uk
nft.cpp.cjscp.org.uk
prosecuting.cjscp.org.uk
cjscp.org.uk
rota.cjscp.org.uk
nft.cjscp.org.uk
onlineplea.cjscp.org.uk
sit.cpp.cjscp.org.uk
redact.prosecuting.nft.cjscp.org.uk
cjscp.org.uk
sit.cjscp.org.uk
onlineplea.sit.cjscp.org.uk
defending.sit.cjscp.org.uk
api.nft.cjscp.org.uk
prosecuting.cjscp.org.uk
prosecuting.cjscp.org.uk
login.cjscp.org.uk
prosecuting.cjscp.org.uk
prosecuting.cjscp.org.uk
redact.nft.cpp.cjscp.org.uk
saml-login.cjscp.org.uk
redact.prosecuting.nft.cjscp.org.uk
rota.sit.cjscp.org.uk
defending.prp.cjscp.org.uk
rota-sit.nftpr1.cjscp.org.uk
rota.cjscp.org.uk
login.cjscp.org.uk
apigw.prp.cjscp.org.uk
prosecuting.cjscp.org.uk
onlineplea.sit.cjscp.org.uk
redact.nft.cpp.cjscp.org.uk
demo.cjscp.org.uk
manage-users.nft.cpp.cjscp.org.uk
api.sit.cjscp.org.uk
api.sit.cjscp.org.uk
saml-gateway.prp.cjscp.org.uk
defending.sit.cjscp.org.uk
onlineplea.sit.cjscp.org.uk
saml-gateway.prp.cjscp.org.uk
prosecuting.cjscp.org.uk
api.cjscp.org.uk
saml-token.prp.cjscp.org.uk
prosecuting.cjscp.org.uk
identity-gateway.nft.cpp.cjscp.org.uk
saml-login.cjscp.org.uk
prosecuting.cjscp.org.uk
saml-login.prp.cjscp.org.uk
defending.nft.cjscp.org.uk
apigw.nft.cjscp.org.uk
saml-gateway.cjscp.org.uk
token.nft.cpp.cjscp.org.uk
defending.cjscp.org.uk
sit.cpp.cjscp.org.uk
cjscp.org.uk
sit.cpp.cjscp.org.uk
prosecuting.cjscp.org.uk
saml-token.prp.cjscp.org.uk
saml-gateway.cjscp.org.uk
api.prp.cjscp.org.uk
prosecuting.cjscp.org.uk
apigw.dev.cjscp.org.uk
rota.cjscp.org.uk
defending.nft.cjscp.org.uk
apigw.dev.cjscp.org.uk
api.nft.cjscp.org.uk
sit.cpp.cjscp.org.uk
prosecuting.cjscp.org.uk
prosecuting.cjscp.org.uk
defending.cjscp.org.uk
prosecuting.cjscp.org.uk
nft.cjscp.org.uk
onlineplea.prp.cjscp.org.uk
prosecuting.cjscp.org.uk
rota.sit.cjscp.org.uk
defending.prp.cjscp.org.uk
sit.cpp.cjscp.org.uk
api.prp.cjscp.org.uk
cjscp.org.uk
prosecuting.prp.cjscp.org.uk
prosecuting.cjscp.org.uk
onlineplea.cjscp.org.uk
saml-token.cjscp.org.uk
rota.cjscp.org.uk
apigw.prp.cjscp.org.uk
prosecuting.cjscp.org.uk
prosecuting.cjscp.org.uk
my-services.nft.cpp.cjscp.org.uk
login.cjscp.org.uk
apigw.cjscp.org.uk
prosecuting.cjscp.org.uk
api.cjscp.org.uk
prosecuting.cjscp.org.uk

Certificate

The complete raw certificate details for rota.cjscp.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq56Y/KYQWjAHDMjBPrqo
UeZ/7m9xp6b7D7UJZhhz1ywL+JcmtWrDCQsO4Byv7EXcA9uxXKw9vWIcF1AePN/+
QGsFFWtKhyBaKyj+xpSSygHzKn5bIuafi3HG/8wlMgTYGOng0uTOurA/SoCNO076
SGZPbdyDpATXxy2DvGIu2Kr6AB6wGYD2JAZuYYlFeSQEGZGToVgjjt/Y3ZyYdRxN
+IVMNkRF57U0g+E2vn6Dy69b50Ihh0S3qsCtF+wY28v6fyQXRP0x7V5+p+sQVO81
CKAQuf07vnrPrFe1JsD9/oCm8FSsdLGrzYtN9zoWp74es7kXpq1yrUukPdY3XjZq
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 122657879875572216121766717775180636512
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gandi Standard SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rota.cjscp.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21664957543106744024607875206975830969344747986938558367431975277293473062879247865366392646956546007222513015451481951221698340859958933747517908087697672521813601978333781107480507487577807020003814222605317608064940741962401099881841204958637249094322592280724994936252895062218703061610701127439382168032918147937814554443378263439722453408118794137190260289629709678539784258101961229849081646856037338625632368385828906344415396080517094189263743025825844589748436386302782283548181178741755691574547565571126299988683958893016775932591233408407494837618498402511469803345171515651252994923286502710436217383483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b390a7d8c9af4ecd613c9f7cad5d7f41fd6930ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3897786f67e3022b239633bab67d1a77b1bf7393
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.26
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/GandiStandardSSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/GandiStandardSSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rota.cjscp.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rota.cjscp.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00040cac8b3c8ff9900dfc3b702ac00a5a86b9957e6bf2d9b9e40165f22c5f85860e3fb7562152f3c1eae47cb75ceaff067ab5cb7c5cfa9b24a56e3b2408745d36ff7f6bd1372a10da5fe5302a1a12bc3477998d6c5a170584274ed0996985f8900f753721e123e9edc600044ffc34890ebc1b0d258d5b8274e662b488b94f90a439ff6ffe73e5c0518c836638053781228917da92ea5a711b1ebe9f21758061c8a17db84a2583760705d0bf63dd182bd2b11fb69d121dd566b90ea002096a0e5e125e852e0974007b9d5ab642d29cf0a45abe0541f1886ae2474b751f088157a3da2eeb7b8597557a3792994ef547ddd0b4f9d4b2ae1944fae83edea4068090ec