webmail.truni.sk

- Trnavská univerzita v Trnave -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 09:59:66:c7:f5:77:53:cb:09:40:2e:d2:37:3d:7b:71 was issued on by TERENA.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Trnavská univerzita v Trnave

Organization: Trnavská univerzita v Trnave
Organization unit: CIS
Locality: Trnava
Country: SK

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 09:59:66:c7:f5:77:53:cb:09:40:2e:d2:37:3d:7b:71
Serial Number (int): 12427251030625840604597293528909708145
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 36:41:e5:1f:ec:70:25:ec:de:9d:01:e1:10:8e:19:cc:82:13:50:1f
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): 93:d7:14:40:fd:45:fa:42:23:6b:f2:0f:ae:dc:3b:02:aa:a4:5e:5c
Fingerprint (sha256): fe:88:52:48:32:07:8a:37:ff:e9:0f:79:1f:23:25:c7:ee:91:3d:ea:85:35:7c:bf:ca:c0:56:8f:5b:4c:42:5e

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate webmail.truni.sk

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.truni.sk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.truni.sk
z1-mbox1.truni.sk
mail.truni.sk
smtp.truni.sk
smtp2.truni.sk
z1-ldap.truni.sk
z1-mta1.truni.sk
z1-mta2.truni.sk
z1-proxy.truni.sk

Other certificates including the domain name truni.sk

(limited to 100 certificates)
webmail.truni.sk
webmail.tvu.sk
www.truni.sk
idmportal.truni.sk
wap.truni.sk
webmail.truni.sk
meteo.truni.sk
pdf.truni.sk
strava.truni.sk
indukcia.truni.sk
www.truni.sk
ezp.truni.sk
sts.truni.sk
ff.truni.sk
www.truni.sk
sibidp.truni.sk
meteo.truni.sk
vpn.truni.sk
pdf.truni.sk
shib-idp.truni.sk
rlgc.truni.sk
strava.truni.sk
moodle.truni.sk
webmail.tvu.sk
www.truni.sk
strava.truni.sk
strava.truni.sk
connect.truni.sk
rdgateway.truni.sk
radius2.truni.sk
esmc.truni.sk
strava.truni.sk
strava.truni.sk
ezp.truni.sk
strava.truni.sk
www.truni.sk
eshop.truni.sk
sts.truni.sk
mais.truni.sk
3point.truni.sk
idmportal.truni.sk
radius1.truni.sk
fzsp.truni.sk
mais.truni.sk
www.truni.sk
moodletest.truni.sk
mais.truni.sk
rlgc.truni.sk
student.truni.sk
kybez.truni.sk
3point.truni.sk
webmail.truni.sk
ezp.truni.sk
sip.truni.sk
fmc.truni.sk
mais.truni.sk
remlabgrab.truni.sk
idmportal.truni.sk
rdweb.truni.sk
webmail.tvu.sk
idmportal.truni.sk
rdweb.truni.sk
indukcia.truni.sk
skype.truni.sk
pf.truni.sk
kybez.truni.sk
moodle.truni.sk
webmail.truni.sk

Certificate

The complete raw certificate details for webmail.truni.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx4FucBB0xrTtZe3gqyg
lDE5yINYMoRkZxT144MwDljPZjf0xJnoMnJL1Q3HvSpcFgL1bpCFdIib532fFh/a
ctpJSqihJlRH2G4JJFszalxCRw8H8Um8jqZ5b+W/a90GrWcVSxAhq6/zxuvwZlrq
3F1DvUiylCkOACbOlgCA85/yOIKOQeOeI+FyjDTtLi1saRr3sCVmvNebUCiZ+HfX
09cEa7gOWpxGOwOrAC/P7GAkz1e4FrBjDrNofUqYhrooNPw/AMx8N64Zq8yTvRWM
ve+95VhFe3L9XD90OykHZs7JStq03zThtwQPWi68iOUH7zK8z60Po2zKu5lR7VsB
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12427251030625840604597293528909708145
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trnava'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trnavská univerzita v Trnave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.truni.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25641180488354320301104476108215887671893530228998204136868319781059904422623575585432277042502545467012423013651278912455795740445276752300051055601946051408582261945854509388172281252387913668988883415321453396576802443538724745646078932444456597613208603350810835231932667420648604628380510104628274662329340574660322423789933086688153019865276549050743277711722205016266271166087157635748653033174077976999631046284758950505986555098511431756026088500188211505510487968327532565440149103818259200839029849325149742822566162959637049388608536802030198333209788503089536663369172534423325450776513808579001528811911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3641e51fec7025ecde9d01e1108e19cc8213501f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.truni.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z1-mbox1.truni.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.truni.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.truni.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp2.truni.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z1-ldap.truni.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z1-mta1.truni.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z1-mta2.truni.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z1-proxy.truni.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000251adef66298a2ded1660211f88d997d927ebda056914b651f02657864b7fb6b753126091fc250c0f94245b01b0502b78f444a98b276beb89cd3fe229540338f0f632fe9801eb6b09dc01d553d6e4cb247e625e1c72a90e0dbfadb147bc61634ab201211195d4909cf52dfba19f8a5ce59755c1879b308239c4a8010b030b1a107db4628aad912aea0fdc6815ae8f2f16c4b1ce92cc9c608546a358908c064a6c2c3534f3b511b0bbf6d2178d2dd4500c52849b68eeddbaba228c9f7fae4badd460b7aab402447223683afb98ee1edac77fd2d7bfe43312402ce870fe3b6d9f66d25565bffa9ba55155c2ea62deeb7fb8f832d32955c4aae7595888f1610868