derspiegel.eu

Issued by R3

About this certificate

This digital certificate with serial number 04:59:63:f9:8e:e3:49:65:be:e5:77:65:8e:ef:06:e2:d2:5f was issued on by Let's Encrypt.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=derspiegel.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:59:63:f9:8e:e3:49:65:be:e5:77:65:8e:ef:06:e2:d2:5f
Serial Number (int): 378867163734614663696215402743851965928031
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 73:17:b5:f5:b7:12:c7:cd:25:7b:1b:4d:9c:15:ea:55:29:e7:b2:ad
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 57:ce:4d:a8:6f:60:76:9e:46:4f:c0:19:58:33:fb:d8:05:19:11:de
Fingerprint (sha256): f7:0a:59:23:95:44:f3:fa:8f:9b:a2:b5:82:15:0b:74:8e:a7:89:01:21:72:0f:14:58:f0:3e:bc:27:89:ee:aa

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate derspiegel.eu

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for derspiegel.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

der-spiegel.eu
derspiegel.eu
derspiegel.info
investors-darling.de
konferenzen.spiegel.de
manage-forward.com
manage-forward.eu
manageforward.de
manageforward.eu
radar.manager-magazin.de
radar.spiegel.de
rudolf-augstein-stiftung.com
rudolf-augstein.de
spiegel-bestseller.de
spiegel-bestsellerliste.de
spiegel-plus.de
spiegel-veranstaltungen.de
spiegel-verlag.de
spiegel.blog
spiegel.club
spiegel.plus
spiegel.tv
spiegelgruppe-rechteerwerb.de
spiegelgruppe-veranstaltungen.de
spiegelverlag.de
spon.de
wissen.spiegel.de
www.der-spiegel.eu
www.derspiegel.eu
www.derspiegel.info
www.investors-darling.de
www.rudolf-augstein-stiftung.com
www.rudolf-augstein.de
www.spiegel-bestseller.de
www.spiegel-bestsellerliste.de
www.spiegel-plus.de
www.spiegel.blog
www.spiegel.club
www.spiegel.plus
www.spiegel.tv
www.spiegelgruppe-veranstaltungen.de
www.spiehel.de
www.spigle.de
www.spirgel.de
www.spon.de

Other certificates including the domain name derspiegel.eu

(limited to 100 certificates)
apiegel.de
derspiegel.eu
derspiegel.eu
derspiegel.eu
derspiegel.eu
bento.app
der-spiegel.eu
apiegel.de
dasdeutschenachrichtenmagazin.de
der-spiegel.eu
derspiegel.eu
bento.app
apiegel.de
apiegel.de
der-spiegel.eu
bento.app
arztsuche.spiegel.de
derspiegel.eu
der-spiegel.eu
bento.app
bento.app
derspiegel.eu
apiegel.de
derspiegel.eu
derspiegel.eu

Certificate

The complete raw certificate details for derspiegel.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHoJyD6ehy2D9JleBrWm
4fljIPTRIu5sGdW7vtymi2Q0wHHWjJikRI18lLT8N9ub/AhzjB9/dC/fZeLRZM6/
iPKfPxnzX6I+DVE4Vuur4owxfZV1EGnTFyJ9YxlzoMippdXA+DWhqBuG2EaobtGX
+32DGxVl4SSv/lqf1VFiF6YY5b6gniDQZNnVvnaIlaZEGG2x9E3oQgNDi8diV0qz
roW6tfvkV147lV/wkt5nwuwFKaXxuzK3zDPwUNzE1Y4ClisUsGp1mwKXqtIqItw1
WWA6oJMeN3Wys/iyyEKSwlXL2dRWbaNv9sGr6drc6/1t5m7xg8p4HYvWl+0RRgGf
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378867163734614663696215402743851965928031
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 01:22:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 01:22:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'derspiegel.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19753354859826915187849628560965696694297045669222272064038974094574696359795265971400732178647682865960781204161642698462779784651545238278174478247765754738266531067010972331511403200892004194206275677335587754948995502672306954430225386990703384209483574223583684803094992252235867415857930564433804793812424093569755369640051238881203123945743182860659321293989931257153509771249104169226848521963922574985773721522719226113202580302710812108443486856935425036224147799290168320238405055007024920600856146040857147030812245102324090403206763855032448686062325021535752794772697354586899673493317643844716677144471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7317b5f5b712c7cd257b1b4d9c15ea5529e7b2ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (939 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'der-spiegel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derspiegel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derspiegel.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors-darling.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konferenzen.spiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage-forward.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manage-forward.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manageforward.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manageforward.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radar.manager-magazin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radar.spiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rudolf-augstein-stiftung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rudolf-augstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel-bestseller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel-bestsellerliste.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel-plus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel-veranstaltungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel-verlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegelgruppe-rechteerwerb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegelgruppe-veranstaltungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegelverlag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wissen.spiegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.der-spiegel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derspiegel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derspiegel.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investors-darling.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rudolf-augstein-stiftung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rudolf-augstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel-bestseller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel-bestsellerliste.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel-plus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel.blog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegelgruppe-veranstaltungen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiehel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spigle.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spirgel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spon.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bacbd607200000403004630440220409e116ef3ba5cc773b4e99d65e96f4faf283d186b6e4745c40c7541e4da5b0c022048df9d877b3fdd51d2e2948f9e4c316c6f7a32c3548d33530777f15871ce2b8b00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bacbd60ae0000040300483046022100ebf0f90434f07f81c2f49cadd8bbe357dff84b2620a691d1801f803084a0dc92022100df95befc745cb72e30f68c3a143d283b4d9a8e3341d99828b130ee073d00a3b6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0074ec3649bc4360de377b2950b711b613fc282431f0a9f77e1e50901297f2c7b8f8e5c9e08fbbdff090e0b3f45e3aafe3ad637a668ae39ab3e6150e96421e28b43ea985b0aa4f3252014eb8d79df6fe4b9ee706f1e39a4d7e976b2d3925b2c07a134b3d2745842dae468608e3cf9335fe52fd3e3c65cb89847d5ff39ef9a48ee0b01564b80323dc78ea58aa60b6f41a3b3ac5029e11c47a7721368543802596deffebfc0f06951b46e8d42ac1213dc061e9704e6b9c41afe4a3a62daec827337ceb997310f4a56e7d34c59866802ec5ca942b08144c0c5ed82c9ee0f6da9141c21623f5271b22873077a73c312fd2a59119e2e1331e5797fc098f0953d8fc3d97