yourdigitallife.org

Issued by R3

About this certificate

This digital certificate with serial number 03:86:ae:4e:19:7a:e5:e2:c3:f4:07:7e:3d:90:10:bc:c2:c8 was issued on by Let's Encrypt.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=yourdigitallife.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:86:ae:4e:19:7a:e5:e2:c3:f4:07:7e:3d:90:10:bc:c2:c8
Serial Number (int): 307166386149905257250283524072942732100296
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 27:73:56:e1:09:a8:0f:d4:b1:68:79:2d:64:bf:71:a1:45:3c:b0:06
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 13:05:21:8a:cb:64:cb:99:cc:e9:54:f5:5e:22:8a:32:de:ed:c6:05
Fingerprint (sha256): 00:36:c5:be:52:ce:16:2c:41:08:36:45:fd:5e:52:8f:6b:54:2f:2d:c5:be:da:ad:a7:5d:ff:ec:a8:fd:53:3c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate yourdigitallife.org

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yourdigitallife.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bahrainforvip.com
employmentaroundhere.com.8sv.com
git.maidagency.org.roa-news.net
glowniak.com
greciansoaps.com
santacruzpsychotropics.com
saskatoons.com
sgdietzmusic.com
solongfb.com.americanelectionpolls.com
texasnetworksystems.com
yourdigitallife.org

Other certificates including the domain name yourdigitallife.org

(limited to 100 certificates)
yourdigitallife.org
arr.ae
allanblock.asia
azulprofundo.yoga
sculpit.gold
limited.vc
bud.world
www.avail.world
playgolf.club
lost-allhope.org
yourdigitallife.org
grocer.cc
grocer.cc
grocer.cc
impossible.ca
playgolf.club
yourdigitallife.org
windorontario.com.canibuild.site
arr.ae
bud.world
impossible.ca
playgolf.club
impossible.ca
yourdigitallife.org
estate.limited
impossible.ca
yourdigitallife.org
bud.world
www.yourdigitallife.org
yourdigitallife.org
yourdigitallife.org
yourdigitallife.org
bud.world
impossible.ca
underwaterwelding.xyz.yourdigitallife.org
impossible.ca
yourdigitallife.org
grocer.cc

Certificate

The complete raw certificate details for yourdigitallife.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF7jCCBNagAwIBAgISA4auThl65eLD9Ad+PZAQvMLIMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMjMxMTAyNTFaFw0yNDAzMjIxMTAyNTBaMB4xHDAaBgNVBAMT
E3lvdXJkaWdpdGFsbGlmZS5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAVCbQ3GLbEE0hGmIEMQgfaF91BVMT7VOx+KcGiez6Q1l7QRA3KAHR223n
4W9/laY4z0wmxksY84PWIPJt2ZaYZACMXivE3dnkbI0fKCYvSkxFwF9TfRFHreMg
WqJyA2e1OFacxsoc0uRgNUu5pJUuwwQ4iBdq0LVF9m2XQ8q9kFV8+mnIUZG5ZxFW
HGkqBJ/3MiXSl3KmRmVUaG7JqFYd+39ClL6FOY7zUEKQy14jF4UlVkgJyIxhD28P
SG/wZsBhllzlHhs5U8/5/2lmpqvOg2JVDVHYya5w94M6iGZSrJTNpmaX1Y4sHC4g
Ts6K0NeAwdUQS2c7NFwwhEoQh67lAgMBAAGjggMQMIIDDDAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFCdzVuEJqA/UsWh5LWS/caFFPLAGMB8GA1UdIwQYMBaAFBQusxe3
WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0
cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j
ci5vcmcvMIIBFwYDVR0RBIIBDjCCAQqCEWJhaHJhaW5mb3J2aXAuY29tgiBlbXBs
b3ltZW50YXJvdW5kaGVyZS5jb20uOHN2LmNvbYIfZ2l0Lm1haWRhZ2VuY3kub3Jn
LnJvYS1uZXdzLm5ldIIMZ2xvd25pYWsuY29tghBncmVjaWFuc29hcHMuY29tghpz
YW50YWNydXpwc3ljaG90cm9waWNzLmNvbYIOc2Fza2F0b29ucy5jb22CEHNnZGll
dHptdXNpYy5jb22CJnNvbG9uZ2ZiLmNvbS5hbWVyaWNhbmVsZWN0aW9ucG9sbHMu
Y29tghd0ZXhhc25ldHdvcmtzeXN0ZW1zLmNvbYITeW91cmRpZ2l0YWxsaWZlLm9y
ZzATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3
AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjJaOguYAAAQDAEgw
RgIhAJt+0O22EkutruCoQq8lhBCNFftXxYaY4BzhK+8djelwAiEAhXcRxwnbzDFY
s/C99DRKT+1tUcISuKXeQgSYXExKitAAdQDuzdBk1dsazsVct520zROiModGfLzs
3sNRSFlGcR+1mwAAAYyWjoLoAAAEAwBGMEQCIADFcTPW2flFVO5wuou8rXMMBDbN
hQyPpX30DfN79ZQvAiAsa0SeXJNqp+6QRB8Pxgvl4oamKs5nd1/s4mLrBW4wZzAN
BgkqhkiG9w0BAQsFAAOCAQEACOYwP1u1T3kmgQ6+AWgF2mu5bkJg+MY8eSbfrzYS
B1DDRuytAQ3RttBvgAe09OxpdjxQ/umakN0t0LBi/hht2H+nkEmcjXH71CP1zBJr
TgH6/iwqvOPfkaI/NF9u8eCspjwoBNTZXjeYNiZCM5X+MhTFEdqfFFVTBF0GeI3Y
eIUpFc0jmyOdfh+S1DvMMmSmQMLMwG65hYzIDUkb+m8T5l1Jt4ryouv0UaBcrixJ
UXzAph0zY2xi5PerWG3p22HxiCYw8j7IV+1GqvtLYPSYbMtOPTZbid0NCVZ+7HGB
VDeWkbUteCrbd8o9geZ/jII0enjMlxBs47hHrwXwcaf0xA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFQm0Nxi2xBNIRpiBDEI
H2hfdQVTE+1TsfinBons+kNZe0EQNygB0dtt5+Fvf5WmOM9MJsZLGPOD1iDybdmW
mGQAjF4rxN3Z5GyNHygmL0pMRcBfU30RR63jIFqicgNntThWnMbKHNLkYDVLuaSV
LsMEOIgXatC1RfZtl0PKvZBVfPppyFGRuWcRVhxpKgSf9zIl0pdypkZlVGhuyahW
Hft/QpS+hTmO81BCkMteIxeFJVZICciMYQ9vD0hv8GbAYZZc5R4bOVPP+f9pZqar
zoNiVQ1R2MmucPeDOohmUqyUzaZml9WOLBwuIE7OitDXgMHVEEtnOzRcMIRKEIeu
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307166386149905257250283524072942732100296
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-23 11:02:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 11:02:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yourdigitallife.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24279251266110194187503519456053441521806842674069991964774474696727810636813693388417342200123276268784393953641555539833940163079578760994707596453023880237468469309669290341108219713979742419515486185529448220253685270324351471854722099577580308445070277477573082542081381016951891159506459673271948114322962762843596107732960743295902065742591949814524518246969025735248406874947645946452398632732384283153835805745529711007073990507945316481673607368441200070179897008201706222824734606196279406418742478412463413732348859428035002895662984529747321125415052813745937196553063766120909513935564316154878128271077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							277356e109a80fd4b168792d64bf71a1453cb006
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (270 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bahrainforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employmentaroundhere.com.8sv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.maidagency.org.roa-news.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glowniak.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greciansoaps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santacruzpsychotropics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saskatoons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgdietzmusic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solongfb.com.americanelectionpolls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texasnetworksystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourdigitallife.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c968e82e600000403004830460221009b7ed0edb6124badaee0a842af2584108d15fb57c58698e01ce12bef1d8de970022100857711c709dbcc3158b3f0bdf4344a4fed6d51c212b8a5de4204985c4c4a8ad0007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c968e82e80000040300463044022000c57133d6d9f94554ee70ba8bbcad730c0436cd850c8fa57df40df37bf5942f02202c6b449e5c936aa7ee90441f0fc60be5e286a62ace67775fece262eb056e3067
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0008e6303f5bb54f7926810ebe016805da6bb96e4260f8c63c7926dfaf36120750c346ecad010dd1b6d06f8007b4f4ec69763c50fee99a90dd2dd0b062fe186dd87fa790499c8d71fbd423f5cc126b4e01fafe2c2abce3df91a23f345f6ef1e0aca63c2804d4d95e37983626423395fe3214c511da9f145553045d06788dd878852915cd239b239d7e1f92d43bcc3264a640c2ccc06eb9858cc80d491bfa6f13e65d49b78af2a2ebf451a05cae2c49517cc0a61d33636c62e4f7ab586de9db61f1882630f23ec857ed46aafb4b60f4986ccb4e3d365b89dd0d09567eec718154379691b52d782adb77ca3d81e67f8c82347a78cc97106ce3b847af05f071a7f4c4