zeposia.com

- BRISTOL-MYERS SQUIBB COMPANY -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 02:c9:de:85:e8:23:b0:1e:b0:1c:e7:f9:c7:12:2c:7c was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BRISTOL-MYERS SQUIBB COMPANY

Organization: BRISTOL-MYERS SQUIBB COMPANY
State / Province: New Jersey
Locality: Pennington
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:c9:de:85:e8:23:b0:1e:b0:1c:e7:f9:c7:12:2c:7c
Serial Number (int): 3706620964256623551965408257968843900
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 28:a4:40:ad:a8:7d:07:c8:e9:95:83:e6:57:2f:b3:71:08:4e:65:af
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 1e:50:09:7d:bd:dd:26:c6:36:cb:8b:67:03:b7:18:aa:3a:ba:66:0f
Fingerprint (sha256): e5:66:16:a4:4e:9e:78:86:26:44:bc:ff:e2:88:3a:59:e5:fb:44:00:d1:f5:e5:23:a1:ad:1f:5b:8a:21:61:24

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate zeposia.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zeposia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zeposia.com
www.understandingHCM.ca
www.themissingucstep.com
www.onureg.ca
understandingHCM.ca
themissingucstep.com
onureg.ca
www.mmtreatmentoptions.com
hcm-angehen.at
mmtreatmentoptions.com
www.hcm-angehen.at
www.mmcenterfornurses.com
www.myelomacentral.com
www.bmsesign.com
www.sprycel.com
mmcenterfornurses.com
myelomacentral.com
bmsesign.com
sprycel.com
www.zeposia.com
www.mysotyktu.co.uk
www.tjekdinpuls.dk
www.podriasercmh.com
www.sotyktu.no
www.bmshcpresources.com
www.sotyktuespanol.com
buildeasy.bms.com
mysotyktu.co.uk
tjekdinpuls.dk
podriasercmh.com
sotyktu.no
bmshcpresources.com
sotyktuespanol.com
www.takaisintahtiin.fi
www.sotyktu.se
www.bmsimmunologi.no
takaisintahtiin.fi
sotyktu.se
bmsimmunologi.no
www.cardiomiopatiahipertrofica.com.br
www.camzyosfinder.com
cardiomiopatiahipertrofica.com.br
camzyosfinder.com
www.hcm-institute.be
www.camzyos.se
www.opdivo-cm577.ca
opdivo-cm577.ca
hcm-institute.be
camzyos.se
www.sotyktu.co.uk
sotyktu.co.uk
www.immunoscienceacademy.be
immunoscienceacademy.be
www.psoriasis-initiative-ich.de
psoriasis-initiative-ich.de
www.bmsaccesssupport.com
bmsaccesssupport.com
www.zeposiaespanol.com
zeposiaespanol.com
www.gemeinsam-gegen-krebs.de
gemeinsam-gegen-krebs.de
www.pflege-onkologie.de
pflege-onkologie.de
www.bmscopay.com
bmscopay.com
www.krebs.de
krebs.de
www.augtyro.com
augtyro.com
www.augtyrohcp.com
augtyrohcp.com
www.seropositiverisks.com
seropositiverisks.com
www.hcmrealtalk.com
hcmrealtalk.com
www.eliquis.bmscustomerconnect.com
eliquis.bmscustomerconnect.com
bmscartmanagedcare.com
www.redefineemd.com
redefineemd.com
www.opdivopatient.se
opdivopatient.se
www.lbclrealworldevidence.com
lbclrealworldevidence.com
www.bmspsa054recruitmentvideo.com
bmspsa054recruitmentvideo.com
www.reblozyl.jp
reblozyl.jp
www.celltherapy360.com
celltherapy360.com
www.laanemiaeslaclave.mx
laanemiaeslaclave.mx
www.connect2bms.com
connect2bms.com
www.laanemiaeslaclave.co
laanemiaeslaclave.co
www.mysotyktu.ie
mysotyktu.ie
www.parlemoisante.fr
parlemoisante.fr

Other certificates including the domain name zeposia.com

(limited to 100 certificates)
connect2bms.com
connect2bms.com
connect2bms.com
media.zeposia.com
www.celgene.com
www.celgene.com
www.celgene.com
www.celgene.com
connect2bms.com
connect2bms.com
connect2bms.com
bms.com
www.celgene.com
connect2bms.com
zeposia.com
zeposia.com
connect2bms.com
connect2bms.com
smetrics.orencia.com
www.celgene.com
www.celgene.com
zeposia.com
connect2bms.com
zeposia.com
www.celgene.com
connect2bms.com
connect2bms.com

Certificate

The complete raw certificate details for zeposia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOnTCCDYWgAwIBAgIQAsnehegjsB6wHOf5xxIsfDANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe
Fw0yNDA0MDUwMDAwMDBaFw0yNTA0MDQyMzU5NTlaMHQxCzAJBgNVBAYTAlVTMRMw
EQYDVQQIEwpOZXcgSmVyc2V5MRMwEQYDVQQHEwpQZW5uaW5ndG9uMSUwIwYDVQQK
ExxCUklTVE9MLU1ZRVJTIFNRVUlCQiBDT01QQU5ZMRQwEgYDVQQDEwt6ZXBvc2lh
LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKunwUmJ0DYB60Dj
mRWVF/D6Lh+veC/7dj3frAdScO97ZafiL9/ITsldZilLThAfj4IXqENDpYrisobZ
balt3A+XLgdcmHi8UADjhr4GcN4w3dxO8B531XSkDDgW2AG+aMsSFaKHR79tvbjd
qTqPP8GDCjoVTM64RI4jpsatbs0GvRcTRrkdb4lijmUZj4aocAA9Wv6dkn8mpioN
JI6fNiLYeJG6QJazEs2qLlGpdWV0CNwUlbJe0TrUIfGJ9jCG6ipmjPI6GnsA8Dpu
0ArwjU+ev1t4FjovuQ5HDzwAVsg5ukxMBzz284cjuCIaK5M18oj0qk/ViHIBrYPz
/aQLb1sCAwEAAaOCCz8wggs7MB8GA1UdIwQYMBaAFKWM/jLM6w8s1BnGCLgAJIhd
w8W3MB0GA1UdDgQWBBQopECtqH0HyOmVg+ZXL7NxCE5lrzCCCEgGA1UdEQSCCD8w
ggg7ggt6ZXBvc2lhLmNvbYIXd3d3LnVuZGVyc3RhbmRpbmdIQ00uY2GCGHd3dy50
aGVtaXNzaW5ndWNzdGVwLmNvbYINd3d3Lm9udXJlZy5jYYITdW5kZXJzdGFuZGlu
Z0hDTS5jYYIUdGhlbWlzc2luZ3Vjc3RlcC5jb22CCW9udXJlZy5jYYIad3d3Lm1t
dHJlYXRtZW50b3B0aW9ucy5jb22CDmhjbS1hbmdlaGVuLmF0ghZtbXRyZWF0bWVu
dG9wdGlvbnMuY29tghJ3d3cuaGNtLWFuZ2VoZW4uYXSCGXd3dy5tbWNlbnRlcmZv
cm51cnNlcy5jb22CFnd3dy5teWVsb21hY2VudHJhbC5jb22CEHd3dy5ibXNlc2ln
bi5jb22CD3d3dy5zcHJ5Y2VsLmNvbYIVbW1jZW50ZXJmb3JudXJzZXMuY29tghJt
eWVsb21hY2VudHJhbC5jb22CDGJtc2VzaWduLmNvbYILc3ByeWNlbC5jb22CD3d3
dy56ZXBvc2lhLmNvbYITd3d3Lm15c290eWt0dS5jby51a4ISd3d3LnRqZWtkaW5w
dWxzLmRrghR3d3cucG9kcmlhc2VyY21oLmNvbYIOd3d3LnNvdHlrdHUubm+CF3d3
dy5ibXNoY3ByZXNvdXJjZXMuY29tghZ3d3cuc290eWt0dWVzcGFub2wuY29tghFi
dWlsZGVhc3kuYm1zLmNvbYIPbXlzb3R5a3R1LmNvLnVrgg50amVrZGlucHVscy5k
a4IQcG9kcmlhc2VyY21oLmNvbYIKc290eWt0dS5ub4ITYm1zaGNwcmVzb3VyY2Vz
LmNvbYISc290eWt0dWVzcGFub2wuY29tghZ3d3cudGFrYWlzaW50YWh0aWluLmZp
gg53d3cuc290eWt0dS5zZYIUd3d3LmJtc2ltbXVub2xvZ2kubm+CEnRha2Fpc2lu
dGFodGlpbi5maYIKc290eWt0dS5zZYIQYm1zaW1tdW5vbG9naS5ub4Ild3d3LmNh
cmRpb21pb3BhdGlhaGlwZXJ0cm9maWNhLmNvbS5icoIVd3d3LmNhbXp5b3NmaW5k
ZXIuY29tgiFjYXJkaW9taW9wYXRpYWhpcGVydHJvZmljYS5jb20uYnKCEWNhbXp5
b3NmaW5kZXIuY29tghR3d3cuaGNtLWluc3RpdHV0ZS5iZYIOd3d3LmNhbXp5b3Mu
c2WCE3d3dy5vcGRpdm8tY201NzcuY2GCD29wZGl2by1jbTU3Ny5jYYIQaGNtLWlu
c3RpdHV0ZS5iZYIKY2Ftenlvcy5zZYIRd3d3LnNvdHlrdHUuY28udWuCDXNvdHlr
dHUuY28udWuCG3d3dy5pbW11bm9zY2llbmNlYWNhZGVteS5iZYIXaW1tdW5vc2Np
ZW5jZWFjYWRlbXkuYmWCH3d3dy5wc29yaWFzaXMtaW5pdGlhdGl2ZS1pY2guZGWC
G3Bzb3JpYXNpcy1pbml0aWF0aXZlLWljaC5kZYIYd3d3LmJtc2FjY2Vzc3N1cHBv
cnQuY29tghRibXNhY2Nlc3NzdXBwb3J0LmNvbYIWd3d3LnplcG9zaWFlc3Bhbm9s
LmNvbYISemVwb3NpYWVzcGFub2wuY29tghx3d3cuZ2VtZWluc2FtLWdlZ2VuLWty
ZWJzLmRlghhnZW1laW5zYW0tZ2VnZW4ta3JlYnMuZGWCF3d3dy5wZmxlZ2Utb25r
b2xvZ2llLmRlghNwZmxlZ2Utb25rb2xvZ2llLmRlghB3d3cuYm1zY29wYXkuY29t
ggxibXNjb3BheS5jb22CDHd3dy5rcmVicy5kZYIIa3JlYnMuZGWCD3d3dy5hdWd0
eXJvLmNvbYILYXVndHlyby5jb22CEnd3dy5hdWd0eXJvaGNwLmNvbYIOYXVndHly
b2hjcC5jb22CGXd3dy5zZXJvcG9zaXRpdmVyaXNrcy5jb22CFXNlcm9wb3NpdGl2
ZXJpc2tzLmNvbYITd3d3LmhjbXJlYWx0YWxrLmNvbYIPaGNtcmVhbHRhbGsuY29t
giJ3d3cuZWxpcXVpcy5ibXNjdXN0b21lcmNvbm5lY3QuY29tgh5lbGlxdWlzLmJt
c2N1c3RvbWVyY29ubmVjdC5jb22CFmJtc2NhcnRtYW5hZ2VkY2FyZS5jb22CE3d3
dy5yZWRlZmluZWVtZC5jb22CD3JlZGVmaW5lZW1kLmNvbYIUd3d3Lm9wZGl2b3Bh
dGllbnQuc2WCEG9wZGl2b3BhdGllbnQuc2WCHXd3dy5sYmNscmVhbHdvcmxkZXZp
ZGVuY2UuY29tghlsYmNscmVhbHdvcmxkZXZpZGVuY2UuY29tgiF3d3cuYm1zcHNh
MDU0cmVjcnVpdG1lbnR2aWRlby5jb22CHWJtc3BzYTA1NHJlY3J1aXRtZW50dmlk
ZW8uY29tgg93d3cucmVibG96eWwuanCCC3JlYmxvenlsLmpwghZ3d3cuY2VsbHRo
ZXJhcHkzNjAuY29tghJjZWxsdGhlcmFweTM2MC5jb22CGHd3dy5sYWFuZW1pYWVz
bGFjbGF2ZS5teIIUbGFhbmVtaWFlc2xhY2xhdmUubXiCE3d3dy5jb25uZWN0MmJt
cy5jb22CD2Nvbm5lY3QyYm1zLmNvbYIYd3d3LmxhYW5lbWlhZXNsYWNsYXZlLmNv
ghRsYWFuZW1pYWVzbGFjbGF2ZS5jb4IQd3d3Lm15c290eWt0dS5pZYIMbXlzb3R5
a3R1LmllghR3d3cucGFybGVtb2lzYW50ZS5mcoIQcGFybGVtb2lzYW50ZS5mcjA+
BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRp
Z2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY2RwLnRoYXd0
ZS5jb20vVGhhd3RlVExTUlNBQ0FHMS5jcmwwcAYIKwYBBQUHAQEEZDBiMCQGCCsG
AQUFBzABhhhodHRwOi8vc3RhdHVzLnRoYXd0ZS5jb20wOgYIKwYBBQUHMAKGLmh0
dHA6Ly9jYWNlcnRzLnRoYXd0ZS5jb20vVGhhd3RlVExTUlNBQ0FHMS5jcnQwDAYD
VR0TAQH/BAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcATnWjJ1yaEMM4
W2zU3z9S6x3w4I4bjWnAsfpksWKaOd8AAAGOrgEzHQAABAMASDBGAiEAs5WX2Z4x
9xWMWoXQAlt5ED4QAtXWBnhHKAxH7pDukq0CIQCpcX27E8CCEN7vhhfrJSr8wx2n
LYVQqq2NvEKBFkTMdwB2AH1ZHhLheCp7HGFnfF79+NCHXBSgTpWeuQMv2Q6MLnm4
AAABjq4BMtoAAAQDAEcwRQIgINpFsdQZQDHhpSpOOdOP1i3T+podX1RRmwXGIT2v
HKsCIQCxCiZZSl5oNnHu+eo5xlsehboANEG7dDYdWUT+JqcCwgB2AKLjCuRF772t
m3447Udnd1PXgluElNcrXhssxLlQpEfnAAABjq4BM2gAAAQDAEcwRQIgBNWjMzDI
M0bMR4uuoaaRmU8YcY9/YSd5lu+lGtImNpECIQC2v4QyZxtuvKI5cuyKJ1jrha3J
ZAu5JM9E7dvCJLXVzDANBgkqhkiG9w0BAQsFAAOCAQEAKiq0jVzN9hvNGKJ1vnKf
WVnzHwTDtQRLLAt6RZ4W/w4lxvCPgbHXWyeLwrewBLRyNjrA8WXdJElhJqzh//K2
IHJdAV1On1g7uaayLBZOoRhKN09dF2Ha75DDIXR9VRK5nAi+qQ7k0T3yXHJXujDw
7R3Fzp2eSNW3DbcvCcPLEFDfD2ZLKn8sCWGN1wiJUxwwQhSF7zZtwdhB45EJvcFX
4+XX+RquMEfOl+W86SBJ/CrY//CWpvzapGgAQYz4JjYMBr3azXuIwb1cUSzGKaLs
8l07GaZ/EyICh48+LgOupDXv6YgjhJBo0x1AuBfmfW5zAYhEByTUM8tbbuDj13Mg
bQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6fBSYnQNgHrQOOZFZUX
8PouH694L/t2Pd+sB1Jw73tlp+Iv38hOyV1mKUtOEB+PgheoQ0OliuKyhtltqW3c
D5cuB1yYeLxQAOOGvgZw3jDd3E7wHnfVdKQMOBbYAb5oyxIVoodHv229uN2pOo8/
wYMKOhVMzrhEjiOmxq1uzQa9FxNGuR1viWKOZRmPhqhwAD1a/p2SfyamKg0kjp82
Ith4kbpAlrMSzaouUal1ZXQI3BSVsl7ROtQh8Yn2MIbqKmaM8joaewDwOm7QCvCN
T56/W3gWOi+5DkcPPABWyDm6TEwHPPbzhyO4IhorkzXyiPSqT9WIcgGtg/P9pAtv
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3706620964256623551965408257968843900
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BRISTOL-MYERS SQUIBB COMPANY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zeposia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21669473236810024053548607916034147540134919081544347836848914934111092038688541133548792462922868998669187358504769016372369585443744219969244606454792287867699220376397681900939812016932460738013653991091453671769651936874422885940685321512754226410971911564796526645026185417926355364574852334909311527928501998657904508262391632232713738269470423287382270672720348450472258684958451281137992498584269399112360550207989245668000471180895179343900545161277845786219851712737735685646815616690194149403941251001042622438711209755134572778204639717953246106183187366298806535948170371120094596273959334785309752389467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28a440ada87d07c8e99583e6572fb371084e65af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeposia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.understandingHCM.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themissingucstep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onureg.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'understandingHCM.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themissingucstep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onureg.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmtreatmentoptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcm-angehen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmtreatmentoptions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcm-angehen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmcenterfornurses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myelomacentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sprycel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmcenterfornurses.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myelomacentral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmsesign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprycel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zeposia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysotyktu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tjekdinpuls.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.podriasercmh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sotyktu.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmshcpresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sotyktuespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildeasy.bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysotyktu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjekdinpuls.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podriasercmh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sotyktu.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmshcpresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sotyktuespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takaisintahtiin.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sotyktu.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsimmunologi.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takaisintahtiin.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sotyktu.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmsimmunologi.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardiomiopatiahipertrofica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camzyosfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardiomiopatiahipertrofica.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camzyosfinder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcm-institute.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.camzyos.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opdivo-cm577.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opdivo-cm577.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcm-institute.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camzyos.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sotyktu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sotyktu.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immunoscienceacademy.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immunoscienceacademy.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psoriasis-initiative-ich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psoriasis-initiative-ich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmsaccesssupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmsaccesssupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zeposiaespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeposiaespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gemeinsam-gegen-krebs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemeinsam-gegen-krebs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pflege-onkologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pflege-onkologie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmscopay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmscopay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krebs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krebs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.augtyro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augtyro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.augtyrohcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'augtyrohcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seropositiverisks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seropositiverisks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcmrealtalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcmrealtalk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eliquis.bmscustomerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliquis.bmscustomerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmscartmanagedcare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redefineemd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redefineemd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opdivopatient.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opdivopatient.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lbclrealworldevidence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbclrealworldevidence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmspsa054recruitmentvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmspsa054recruitmentvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reblozyl.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reblozyl.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celltherapy360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'celltherapy360.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laanemiaeslaclave.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laanemiaeslaclave.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connect2bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect2bms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laanemiaeslaclave.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laanemiaeslaclave.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysotyktu.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysotyktu.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parlemoisante.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parlemoisante.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002a2ab48d5ccdf61bcd18a275be729f5959f31f04c3b5044b2c0b7a459e16ff0e25c6f08f81b1d75b278bc2b7b004b472363ac0f165dd24496126ace1fff2b620725d015d4e9f583bb9a6b22c164ea1184a374f5d1761daef90c321747d5512b99c08bea90ee4d13df25c7257ba30f0ed1dc5ce9d9e48d5b70db72f09c3cb1050df0f664b2a7f2c09618dd70889531c30421485ef366dc1d841e39109bdc157e3e5d7f91aae3047ce97e5bce92049fc2ad8fff096a6fcdaa46800418cf826360c06bddacd7b88c1bd5c512cc629a2ecf25d3b19a67f132202878f3e2e03aea435efe98823849068d31d40b817e67d6e730188440724d433cb5b6ee0e3d773206d