banninghs.org
Issued by ZeroSSL RSA Domain Secure Site CA
About this certificate
This digital certificate with serial number 26:9b:19:5d:ba:cb:91:17:67:83:5c:66:1e:50:c5:9d was issued on by ZeroSSL.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=banninghs.org
ZeroSSL
Organization:
ZeroSSL
Country:
AT
This certificate has expire since
Certificate Details
Serial Number (hex): 26:9b:19:5d:ba:cb:91:17:67:83:5c:66:1e:50:c5:9dSerial Number (int): 51315984339169215514136879403222746525
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: d9:2e:23:22:6f:d0:e8:7c:72:63:5e:cc:e4:21:8f:8d:39:db:1c:6f
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6
Fingerprint (sha1): 2e:0f:7e:b2:a0:7e:18:b5:92:9a:6a:08:50:26:7f:5b:4d:63:48:b9
Fingerprint (sha256): ec:b2:a2:e1:fc:49:01:d8:8d:7c:b5:7b:4e:0a:dc:b0:f8:5f:13:0d:1f:0f:ff:c4:78:f3:d4:34:5c:fb:de:1e
Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt
Revocation information
OCSP Server: http://zerossl.ocsp.sectigo.comCheck the revocation status for certificate banninghs.org
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for banninghs.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
banninghs.org
admin.banninghs.org
www.banninghs.org
admin.banninghs.org
www.banninghs.org
Other certificates including the domain name banninghs.org
(limited to 100 certificates)
highschool.kiskiarea.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
ps33.jcboe.org
banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
beverlyvistaschool.us
banninghs.org
revbrownschool.org
admin.revbrownschool.org
admin.banninghs.org
banninghs.org
banninghs.org
admin.banninghs.org
bhas.bhusd.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
ps33.jcboe.org
banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
admin.banninghs.org
beverlyvistaschool.us
banninghs.org
revbrownschool.org
admin.revbrownschool.org
admin.banninghs.org
banninghs.org
banninghs.org
admin.banninghs.org
bhas.bhusd.org
Certificate
The complete raw certificate details for banninghs.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGkTCCBHmgAwIBAgIQJpsZXbrLkRdng1xmHlDFnTANBgkqhkiG9w0BAQwFADBL MQswCQYDVQQGEwJBVDEQMA4GA1UEChMHWmVyb1NTTDEqMCgGA1UEAxMhWmVyb1NT TCBSU0EgRG9tYWluIFNlY3VyZSBTaXRlIENBMB4XDTIzMTEyNjAwMDAwMFoXDTI0 MDIyNDIzNTk1OVowGDEWMBQGA1UEAxMNYmFubmluZ2hzLm9yZzCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBANbyyurYyu6lUqsKZmoiw2SimNs0o1TxBMOo n/5xlLog82Jt0KV4l0DeEiS86Ga7dTfZvyMkX51GjP9n4p5dFWAVi1MSfPvc4si+ Ez1AuIGY1K3RoT/aVt0md5ap2a8ejcJKMuEPy3nP5Sw7Ujk77sxVLZk+gt824ecx xLC792noEPQeAE8ImMFBEKkFNa0qGSXMPCCTfSkAaUQr6r5bNykKLdO9YOCf5ane gImxID9Yjyqazp3VtqgIuN3gd+FGi+c6E5h8I6LsOuO6fFXNuW8KWZLoPWihG507 p6EnSwOEOiL+R/lDaVKYSxb0yQVxATgfabA3LJaguKlcQFMUKfMCAwEAAaOCAqIw ggKeMB8GA1UdIwQYMBaAFMjZeGii2Rlo1T1y3l8KPty1hoamMB0GA1UdDgQWBBTZ LiMib9DofHJjXszkIY+NOdscbzAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIw ADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0Bgsr BgEEAbIxAQICTjAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQ UzAIBgZngQwBAgEwgYgGCCsGAQUFBwEBBHwwejBLBggrBgEFBQcwAoY/aHR0cDov L3plcm9zc2wuY3J0LnNlY3RpZ28uY29tL1plcm9TU0xSU0FEb21haW5TZWN1cmVT aXRlQ0EuY3J0MCsGCCsGAQUFBzABhh9odHRwOi8vemVyb3NzbC5vY3NwLnNlY3Rp Z28uY29tMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAdv+IPwq2+5VRwmHM9Ye6 NLSkzbsp3GhCCp/mZ0xaOnQAAAGMCQuMawAABAMASDBGAiEA9QLWueT28VYCjSj0 x8QXk59SbN1OqNY86U6irSprUbQCIQDIk5p8lI7rGpnoBQAQf02h+Q1VGpHJKW6A sVlWPySkuwB2ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjAkL jJQAAAQDAEcwRQIgGnFnR7rBA9yQP7z8NXzNHbGEonxA36Iptn4m0RnsiR8CIQDE UNV7Qwqr3NDSVNi6f7Ab3AiGGAeDhJnty+T3LZDXADBABgNVHREEOTA3gg1iYW5u aW5naHMub3JnghNhZG1pbi5iYW5uaW5naHMub3JnghF3d3cuYmFubmluZ2hzLm9y ZzANBgkqhkiG9w0BAQwFAAOCAgEAQGgZjieHDY7PDY98OtxBm3Ytfz8Ri1sfNsss +dQu5Zqk3jt79SRnbERHEO60lfEXbL8CCkQR1YP3AqH6SEtXnbiyofmGtSIGGvoe ebqclDQZlou0luQQeRsp6Pw3QTQL1yA7svZfoiFu3b22E8YN7FHWX+KFWRBrg6v7 2zOy4w6gj1KY+eh0iIdkZOmjgQejWaKJaJfRxe4TVEf+8ft64xoXdXvUTo6ec7PN +IMS1tob9RRZgeeMuVYQk6imIjWN8+mqQoV9mz54gSh4pJK5LylZt8VscNBrmBeN Gl45CFKaV1U8k/+90ZCNxami4xjoPV/sBZTG4edTYSZxoddWlyQnNRUgF+LCWbBO s92wR9pr8TRzYVQ1R1whef/+VlnAAD/4YFSnNUzML8J6KdCnO5szqi9Yf/NRS8gb MOxM9MYUAp8BNMgWzUj3AGXGifCcOmc0ocx9+9rwweVef4tALmAtqU0S5gcUOfY8 xsEGic5yrp0UpgrrpBHSLugbVPxAtH8UGlAdzyr2XFjv1j+uU/C/YuZVrWJcwSSs nrspUaypRnfKHo/2tQBpW83qa+e1KWN5P7GMvmI/Flwn6QlHRUyNiG5FWELeINDi Vf0Ddr+dKrx0cEMXmeE0OIjcrCrikTC+7bTKGzJg8VTSin4S37u8wmy9+ySbqxTO +nDaLyY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vLK6tjK7qVSqwpmaiLD ZKKY2zSjVPEEw6if/nGUuiDzYm3QpXiXQN4SJLzoZrt1N9m/IyRfnUaM/2finl0V YBWLUxJ8+9ziyL4TPUC4gZjUrdGhP9pW3SZ3lqnZrx6Nwkoy4Q/Lec/lLDtSOTvu zFUtmT6C3zbh5zHEsLv3aegQ9B4ATwiYwUEQqQU1rSoZJcw8IJN9KQBpRCvqvls3 KQot071g4J/lqd6AibEgP1iPKprOndW2qAi43eB34UaL5zoTmHwjouw647p8Vc25 bwpZkug9aKEbnTunoSdLA4Q6Iv5H+UNpUphLFvTJBXEBOB9psDcslqC4qVxAUxQp 8wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 51315984339169215514136879403222746525 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'banninghs.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27134722778699628260109968007524872315174117022293785353355762717387241955565256134546054123350967417840033542066571045078439132005676680627492688334234659171920918347405778747415279028177871207503898961013739030205682061568982088338531407063798520005265944835115889956124315064509751457788361097289826348168275312715217730054586695254542901547089662915079959937836734551547683061045847665766343553092256520470864993901320209094295300236842097869850977345671682142880259889776468373623257572948513443622257307636084485400104329153555085644217589777273818483531635194895209567059145032951109718725074674194718993426931 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d92e23226fd0e87c72635ecce4218f8d39db1c6f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c090b8c6b0000040300483046022100f502d6b9e4f6f156028d28f4c7c417939f526cdd4ea8d63ce94ea2ad2a6b51b4022100c8939a7c948eeb1a99e80500107f4da1f90d551a91c9296e80b159563f24a4bb0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c090b8c94000004030047304502201a716747bac103dc903fbcfc357ccd1db184a27c40dfa229b67e26d119ec891f022100c450d57b430aabdcd0d254d8ba7fb01bdc08861807838499edcbe4f72d90d700 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banninghs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.banninghs.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banninghs.org' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 004068198e27870d8ecf0d8f7c3adc419b762d7f3f118b5b1f36cb2cf9d42ee59aa4de3b7bf524676c444710eeb495f1176cbf020a4411d583f702a1fa484b579db8b2a1f986b522061afa1e79ba9c943419968bb496e410791b29e8fc3741340bd7203bb2f65fa2216eddbdb613c60dec51d65fe28559106b83abfbdb33b2e30ea08f5298f9e87488876464e9a38107a359a2896897d1c5ee135447fef1fb7ae31a17757bd44e8e9e73b3cdf88312d6da1bf5145981e78cb9561093a8a622358df3e9aa42857d9b3e78812878a492b92f2959b7c56c70d06b98178d1a5e3908529a57553c93ffbdd1908dc5a9a2e318e83d5fec0594c6e1e753612671a1d75697242735152017e2c259b04eb3ddb047da6bf13473615435475c2179fffe5659c0003ff86054a7354ccc2fc27a29d0a73b9b33aa2f587ff3514bc81b30ec4cf4c614029f0134c816cd48f70065c689f09c3a6734a1cc7dfbdaf0c1e55e7f8b402e602da94d12e6071439f63cc6c10689ce72ae9d14a60aeba411d22ee81b54fc40b47f141a501dcf2af65c58efd63fae53f0bf62e655ad625cc124ac9ebb2951aca94677ca1e8ff6b500695bcdea6be7b52963793fb18cbe623f165c27e90947454c8d886e455842de20d0e255fd0376bf9d2abc7470431799e1343888dcac2ae29130beedb4ca1b3260f154d28a7e12dfbbbcc26cbdfb249bab14cefa70da2f26