wiconnect.fr

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:31:69:91:1b:b5:b4:c4:b6:83:10:5f:cd:ad:ad:76:44:d6 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wiconnect.fr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:31:69:91:1b:b5:b4:c4:b6:83:10:5f:cd:ad:ad:76:44:d6
Serial Number (int): 278151016159029930193031927309452342346966
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a7:a0:02:85:85:ab:4a:bb:3b:e7:51:7a:3b:4c:62:8c:33:8c:e4:23
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d1:15:2e:ab:a5:18:06:1b:0e:cc:24:3c:67:60:28:94:d3:c0:6f:9d
Fingerprint (sha256): f4:dd:ff:c2:6b:21:8b:59:13:7a:43:65:1d:81:4f:59:3b:5c:76:be:5f:2d:f0:3f:b8:db:a5:d3:71:f3:f3:7a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate wiconnect.fr

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wiconnect.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

client.wiconnect.fr
new.wiconnect.fr
wiconnect.fr
www.new.wiconnect.fr
www.wiconnect.fr

Other certificates including the domain name wiconnect.fr

(limited to 100 certificates)
wiconnect.fr
wiconnect.fr
wiconnect.fr
extranet.wiconnect.fr
www.wiconnect.fr
supervision.wiconnect.fr
wiconnect.fr
wi-fi.wiconnect.fr
wiconnect.fr
wiconnect.fr
wi-fi.wiconnect.fr
wiconnect.fr
eurotunnel.wiconnect.fr
hotspot.wiconnect.fr
www.new.wiconnect.fr
wiconnect.fr
wiconnect.fr
wiconnect.fr
wiconnect.fr
wiconnect.fr
radius.wiconnect.fr
wiconnect.fr
wi-fi.wiconnect.fr
wiconnect.fr
hm1.wiconnect.fr
*.wiconnect.fr
vpn.wiconnect.fr
secure.wiconnect.fr
login.wiconnect.fr
*.wiconnect.fr
hm1.wiconnect.fr
wiconnect.fr
wi-fi.wiconnect.fr
new.wiconnect.fr
wiconnect.fr
echange.wiconnect.fr
wi-fi.wiconnect.fr
secure.wiconnect.fr
wi-fi.wiconnect.fr
wiconnect.fr
wiconnect.fr
wiconnect.fr
wiconnect.fr
hm1.wiconnect.fr
secure.wiconnect.fr
wiconnect.fr
eurotunnel.wiconnect.fr
secure.wiconnect.fr
wi-fi.wiconnect.fr
wiconnect.fr
hm1.wiconnect.fr
vpn.wiconnect.fr
wiconnect.fr
*.wiconnect.fr
hm1.wiconnect.fr
secure.wiconnect.fr
*.wiconnect.fr
extranet.wiconnect.fr
wiconnect.fr
*.wiconnect.fr
echange.wiconnect.fr
wiconnect.fr
wiconnect.fr
wi-fi.wiconnect.fr
wiconnect.fr

Certificate

The complete raw certificate details for wiconnect.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgISAzFpkRu1tMS2gxBfza2tdkTWMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA0MjIyMjUxMDBaFw0x
NzA3MjEyMjUxMDBaMBcxFTATBgNVBAMTDHdpY29ubmVjdC5mcjCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBAMQOov5Z0sJxPn+D8q2b/mUO9cdjOucSqJQe
WXURJ2t+QgsvuZLXEknkAQO+1A/pc9EmABlTTYUWw03hkZ7kyncPv64bzL/UGzJA
BCo10VoYl1tcrZVdoGtAPL3udJ9BkoCFCE4Kq62ceXrXfjDi6WuuxSSVw/najwhT
ctaM3ExkQ21nhPPG0gLqge9gMp2BNpVp16bvnd8Jod+r9EcRVkHRySVMayjlcPNL
RuV7J8ZSyTx2SsBmsZiZq1PECMnyS7HLM3KIk3zAApNWFuh3AbKvlMcKhAb5Ql5G
1skQK8cGOZrTM4qrrLUQoGDLdpH6aaehj8wV11/Gz3rstQRwtEjMlEzCrf54CFDE
PUNeHkkZgjKnIZaKeFgE4zpRQAUL7bA/U8X01Yr5Y5i2Axi7YmgqHy3LAncuSh/5
uvf1vPxmSI2Un1qSr2RYS8kiQjOa0tNqtDp8EyBPfrgWklIZAMv7L8zWpZvnYS4g
u5/R8PsLoc/zF/wxsk8PS0BmpPdRNB+9wve4xJtHfqoerkR3kWDYguOoPcff/Wwg
ZBF4zEFktQZzTZFkTEUr6GYXWB2xptJJqJlV9YRKOSFbza7nNb59XPdlfK/43828
azHZy1s5+XkcgZjyKekjAz8q6OeHjlxyFaieobdFqbMNWTUgJ4bARuZ1Y5R1ICjh
6A0BEZSTAgMBAAGjggJcMIICWDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKegAoWF
q0q7O+dRejtMYowzjOQjMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMGYGA1UdEQRfMF2CE2NsaWVudC53aWNvbm5lY3Qu
ZnKCEG5ldy53aWNvbm5lY3QuZnKCDHdpY29ubmVjdC5mcoIUd3d3Lm5ldy53aWNv
bm5lY3QuZnKCEHd3dy53aWNvbm5lY3QuZnIwgf4GA1UdIASB9jCB8zAIBgZngQwB
AgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxl
dHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRl
IG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQg
b25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBm
b3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkq
hkiG9w0BAQsFAAOCAQEAaycE6mc3X7g4Olk2PNL3Ht0QqR8tJsNYVZA8qd1ji74J
a0HWWBlc25jkqP09MgL5U0GSCFNaboX/BFK1NG7Cc/hbPq3/cgGfzWseh15CpHwG
zBKgImZJsHfO/WEciXCT8gGDmtsxkCuKGyKlnwmpGakJifSRzg0xHB+aNthF9G69
8DxcFrR5C2QVSZg6/C8zraYn1Gdr8h5O23rKmyhTVqcGwns06AxECtj0N7ypiTMk
J2r1zijocIXl5/SCvUVGeLmtt4Z6uFOGnrb81ZA9qhyrw5YcDPIzIOKlcGHhWANX
bSAdv/ZkIXY/ZbFLOw8FQCTMyCXCiaVv/tycJKJZeg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278151016159029930193031927309452342346966
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-22 22:51:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-21 22:51:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wiconnect.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799843489285713652436731671982073461159198771590231430645394293038601484954339566975264523109272951588448028532945470419722982764095338933704362694706812006063503848187868161189406501669262904322721523772336504629585071469986673055600488451047068504672581296525450132475070004949715801150024495191178048022195901686961870579112905854385173511401683321229182212219132547352578644584787342772755152030350294645585214058293764947062119160122474776918493967348239985351602174921921208271724631983178516038564822202938688163917580925668665247141813551574905435369271930390862843594729692367130387001375151556849185636067061220329378328238658157035056172166476033040609652920849770950942014154349563876944315950394177406007481653461832837431458132933524188896131668197089965143052646908890384456441324085931433116924422053363596822803863904944875817228302223942449687178389411423469241227551984040367417235062619883283601958741584728715556425809786591371328483675848486967475431778109446161209609107110674445329851550427927133521255323767853038413210847012545886813268077883918686907583804834361346532985543218660448277857787907393889274503854591824763818824555042798387547445669835004983923692637867310707211757343777892146420260751381651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a7a0028585ab4abb3be7517a3b4c628c338ce423
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.wiconnect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.wiconnect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiconnect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.new.wiconnect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiconnect.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006b2704ea67375fb8383a59363cd2f71edd10a91f2d26c35855903ca9dd638bbe096b41d658195cdb98e4a8fd3d3202f953419208535a6e85ff0452b5346ec273f85b3eadff72019fcd6b1e875e42a47c06cc12a0226649b077cefd611c897093f201839adb31902b8a1b22a59f09a919a90989f491ce0d311c1f9a36d845f46ebdf03c5c16b4790b641549983afc2f33ada627d4676bf21e4edb7aca9b285356a706c27b34e80c440ad8f437bca9893324276af5ce28e87085e5e7f482bd454678b9adb7867ab853869eb6fcd5903daa1cabc3961c0cf23320e2a57061e15803576d201dbff66421763f65b14b3b0f054024ccc825c289a56ffedc9c24a2597a