how7.org
Issued by R3
About this certificate
This digital certificate with serial number 03:6b:12:e6:12:33:74:79:09:f6:cd:5f:81:ab:fc:e2:80:19 was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=how7.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:6b:12:e6:12:33:74:79:09:f6:cd:5f:81:ab:fc:e2:80:19Serial Number (int): 297772191757182802768694606367897031966745
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 4e:d2:35:ce:95:37:6e:86:87:53:4f:c7:14:45:62:fc:da:29:ea:36
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): fe:d7:3a:26:88:8d:ad:d8:c0:7e:75:e5:a6:55:5c:55:d1:14:a8:e5
Fingerprint (sha256): 00:69:84:bd:5b:ef:e1:b3:69:2b:b4:a8:5d:6e:c9:95:b1:17:6e:2d:71:e4:4a:84:76:0a:4c:9a:15:1d:01:f2
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate how7.org
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for how7.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.how7.org
how7.org
mail.pkn.uyo.temporary.site
pkn.uyo.temporary.site
www.pkn.uyo.temporary.site
www.zachswoodworks.com
www.zachswoodworks.how7.org
zachswoodworks.com
how7.org
mail.pkn.uyo.temporary.site
pkn.uyo.temporary.site
www.pkn.uyo.temporary.site
www.zachswoodworks.com
www.zachswoodworks.how7.org
zachswoodworks.com
Other certificates including the domain name how7.org
(limited to 100 certificates)
how7.org
show-me-how.org
prospectbiblechapel.com
show-me-how.org
rockvillemonument.com
www.prospectbiblechapel.how7.org
onlyjesussavesu.com
livethebible.info
livethebible.info
*.how7.org
showmehownow.org
prospectbiblechapel.com
housechurch.info
housechurch.info
prospectbiblechapel.com
showmehownow.org
*.how7.org
prospectbiblechapel.com
livethebible.info
rockvillemonument.com
onlyjesussavesu.com
show-me-how.org
www.zachswoodworks.com
how7.org
educate7.com
show-me-how.org
*.how7.org
show-me-how.org
housechurch.info
how7.org
zachswoodworks.com
housechurch.info
livethebible.info
livethebible.info
zachswoodworks.com
show-me-how.org
livethebible.info
onlyjesussavesu.com
educate7.com
onlyjesussavesu.com
prospectbiblechapel.com
educate7.com
educate7.com
livethebible.info
educate7.com
prospectbiblechapel.com
rockvillemonument.com
how7.org
housechurch.info
educate7.com
rockvillemonument.com
housechurch.info
livethebible.info
showmehownow.org
how7.org
rockvillemonument.com
show-me-how.org
prospectbiblechapel.com
show-me-how.org
rockvillemonument.com
www.prospectbiblechapel.how7.org
onlyjesussavesu.com
livethebible.info
livethebible.info
*.how7.org
showmehownow.org
prospectbiblechapel.com
housechurch.info
housechurch.info
prospectbiblechapel.com
showmehownow.org
*.how7.org
prospectbiblechapel.com
livethebible.info
rockvillemonument.com
onlyjesussavesu.com
show-me-how.org
www.zachswoodworks.com
how7.org
educate7.com
show-me-how.org
*.how7.org
show-me-how.org
housechurch.info
how7.org
zachswoodworks.com
housechurch.info
livethebible.info
livethebible.info
zachswoodworks.com
show-me-how.org
livethebible.info
onlyjesussavesu.com
educate7.com
onlyjesussavesu.com
prospectbiblechapel.com
educate7.com
educate7.com
livethebible.info
educate7.com
prospectbiblechapel.com
rockvillemonument.com
how7.org
housechurch.info
educate7.com
rockvillemonument.com
housechurch.info
livethebible.info
showmehownow.org
how7.org
rockvillemonument.com
Certificate
The complete raw certificate details for how7.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISA2sS5hIzdHkJ9s1fgav84oAZMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMDIxOTEzNThaFw0yNDA1MDIxOTEzNTdaMBMxETAPBgNVBAMT CGhvdzcub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwNHwVzJ OkSqM/l8GQt0vKamKiGyKXrH/eGC/9YZbY3vBMuVd21Q5RXk9rUp4wb3+LrZgJBD A7Bn8otD1L/OiejoCMXDqi+Cdv2ss5VMTUyK74zCXD/CSYYwAEmDeuscMOQkBIjQ HFq7m7NPN1+M3F7fhBD1TvDBH8alt+Tr55+UXisFWmZfGXIOW3PMAKC0cTKVqXMY Ae+NtNPfrujkxlDLQqvxYSbskAG4gvUUf9rI4TbJVuD0FOjALw/zsS5tMN3XWz5e iKh6jb1M/Fk9Y6hz0Z1526h1xNASkepgS2HIWp39kRTYGmzicdGM48cXtAppF7+N hD7AXi/E4C7liQIDAQABo4ICszCCAq8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRO 0jXOlTduhodTT8cURWL82inqNjAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+d ixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxl bmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCBuwYD VR0RBIGzMIGwggoqLmhvdzcub3Jngghob3c3Lm9yZ4IbbWFpbC5wa24udXlvLnRl bXBvcmFyeS5zaXRlghZwa24udXlvLnRlbXBvcmFyeS5zaXRlghp3d3cucGtuLnV5 by50ZW1wb3Jhcnkuc2l0ZYIWd3d3LnphY2hzd29vZHdvcmtzLmNvbYIbd3d3Lnph Y2hzd29vZHdvcmtzLmhvdzcub3JnghJ6YWNoc3dvb2R3b3Jrcy5jb20wEwYDVR0g BAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdwA7U3d1Pi25 gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAY1rdOCPAAAEAwBIMEYCIQCw4PRo pPtbQCK9rWf0fGumrNwFJri8zIRtLLMIqSJY3AIhAPJohNNZmPKD8aRLnoKAojQc QKHDXsS+zkZKIH2594mEAHUAouK/1h7eLy8HoNZObTen3GVDsMa1LqLat4r4mm31 F9gAAAGNa3TglQAABAMARjBEAiA8r3bc0PykH96Iu5q4zk3l++EtgrHLvZupzvNa jFtYzgIgD2Y0PteMXzvD/arDLRB/PFyOMnGtF5y81OkUbMChyzAwDQYJKoZIhvcN AQELBQADggEBAD7I75Ie0pJdJPy7vp0CGoMomgcn78CfOKXhL2l8fSG3OLpAHOJo usjt8E1gZcpqbZDBa6senGSeMTCkz2kAxGS7BtJ1rNRZJ4t5VN2EYHrOXbWIvTCa mFgqTXF8q+MZ4GyzDpgiVuborPfiBY70kvHwbYNOMzElj1+OrFDJ+183biqUBflS ecTVUyMjoXN3vLwc2jnTJDDuz5JGQYxFArzhkhYxfELGKd7XtL7QnJfPwOCzu194 f4cYX+OkDpx+BDgUECvF+85UeD9bp4+g2fyXVFZ2QtwXoyOR8LpTPIh7Xao9X0Fb HbTzSAbSr85fgwMzyre293K8xoSqy7RUNKM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwNHwVzJOkSqM/l8GQt0 vKamKiGyKXrH/eGC/9YZbY3vBMuVd21Q5RXk9rUp4wb3+LrZgJBDA7Bn8otD1L/O iejoCMXDqi+Cdv2ss5VMTUyK74zCXD/CSYYwAEmDeuscMOQkBIjQHFq7m7NPN1+M 3F7fhBD1TvDBH8alt+Tr55+UXisFWmZfGXIOW3PMAKC0cTKVqXMYAe+NtNPfrujk xlDLQqvxYSbskAG4gvUUf9rI4TbJVuD0FOjALw/zsS5tMN3XWz5eiKh6jb1M/Fk9 Y6hz0Z1526h1xNASkepgS2HIWp39kRTYGmzicdGM48cXtAppF7+NhD7AXi/E4C7l iQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 297772191757182802768694606367897031966745 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 19:13:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 19:13:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'how7.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21083414502702794538512860122344460792618732307931273781458619719124444277269847511019810963630750704456673160874476682474587979501097423654069080308222106301414072580243273761400385887421107208176748372001334248980685986421626157180463724254707441932478981310251263087147460683229297928688350972971469658584295741179961620475820937582040986769844731651506941139571113742387783295394049403505896117704191320737780435193715988345839466744064153481698038008888909755335686973915315570645725431051767720476525026934643735162652874488668435888361592987239969252819660161524053903578028240906700736079536800179134615446921 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4ed235ce95376e8687534fc7144562fcda29ea36 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (179 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.how7.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'how7.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pkn.uyo.temporary.site' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkn.uyo.temporary.site' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pkn.uyo.temporary.site' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zachswoodworks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zachswoodworks.how7.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zachswoodworks.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d6b74e08f0000040300483046022100b0e0f468a4fb5b4022bdad67f47c6ba6acdc0526b8bccc846d2cb308a92258dc022100f26884d35998f283f1a44b9e8280a2341c40a1c35ec4bece464a207db9f78984007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d6b74e095000004030046304402203caf76dcd0fca41fde88bb9ab8ce4de5fbe12d82b1cbbd9ba9cef35a8c5b58ce02200f66343ed78c5f3bc3fdaac32d107f3c5c8e3271ad179cbcd4e9146cc0a1cb30 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003ec8ef921ed2925d24fcbbbe9d021a83289a0727efc09f38a5e12f697c7d21b738ba401ce268bac8edf04d6065ca6a6d90c16bab1e9c649e3130a4cf6900c464bb06d275acd459278b7954dd84607ace5db588bd309a98582a4d717cabe319e06cb30e982256e6e8acf7e2058ef492f1f06d834e3331258f5f8eac50c9fb5f376e2a9405f95279c4d5532323a17377bcbc1cda39d32430eecf9246418c4502bce19216317c42c629ded7b4bed09c97cfc0e0b3bb5f787f87185fe3a40e9c7e043814102bc5fbce54783f5ba78fa0d9fc9754567642dc17a32391f0ba533c887b5daa3d5f415b1db4f34806d2afce5f830333cab7b6f772bcc684aacbb45434a3