sandbox-ak150.rc.hms.harvard.edu

Issued by R3

About this certificate

This digital certificate with serial number 04:d6:89:c7:70:9a:1f:19:e0:fe:86:d5:b6:71:e0:f5:86:32 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sandbox-ak150.rc.hms.harvard.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d6:89:c7:70:9a:1f:19:e0:fe:86:d5:b6:71:e0:f5:86:32
Serial Number (int): 421452710034459837630082691700808813479474
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 24:dd:1a:23:99:1a:33:fe:61:34:d1:fb:ba:8c:54:cd:c8:e6:2e:8b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 52:ea:1a:6d:bc:d1:eb:d0:d6:e5:e7:f6:b0:6b:67:f7:6e:49:32:9e
Fingerprint (sha256): 00:7b:85:61:c4:ac:b3:af:af:da:f2:08:b3:5f:ad:2f:45:a3:da:32:1f:d5:a0:bd:6d:4e:27:68:9f:04:b8:d5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sandbox-ak150.rc.hms.harvard.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sandbox-ak150.rc.hms.harvard.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sandbox-ak150.rc.hms.harvard.edu

Other certificates including the domain name harvard.edu

(limited to 100 certificates)
*.meei.harvard.edu
www.nieman.harvard.edu
cds4.cvent.com
lee.hms.harvard.edu
cvvr.hms.harvard.edu
imperva.com
iqss-sid-env-uat.herokuapp.com
takesian.hms.harvard.edu
dssg.fas.harvard.edu
scorsese.wjh.harvard.edu
geodata-proxy.lib.harvard.edu
5769623379116032-fe2.pantheonsite.io
incapsula.com
zhanglab.tch.harvard.edu
tech.seas.harvard.edu
5762637883244544-fe3.pantheonsite.io
incapsula.com
getonline.harvard.edu
archives.harvard.edu
acquia-sites.com
hub.test.lxp.huit.harvard.edu
filetransfer.harvard.edu
www.datascience.harvard.edu
nlbsp.med.harvard.edu
alumni.dce-test.upstatement.dev
neprc-vpn.hms.harvard.edu
*.hmc.harvard.edu
docker.rc.fas.harvard.edu
webmail.hsl.harvard.edu
www.hup.harvard.edu
statuspage.io
it.uahs.arizona.edu
healthinnovationnetwork.harvard.edu
sfsportal.harvard.edu
termbill.harvard.edu
admissions.emeritus.org
ordlvapexd01.med.harvard.edu
incapsula.com
cluster3.technolutions.net
hhi.harvard.edu
rmfs-blog.rmf.harvard.edu
cluster.technolutions.net
sandbox-ak150.rc.hms.harvard.edu
jdcmoveit1.joslin.harvard.edu
giftshop.metalab.harvard.edu
forerun-beta.bidmc.harvard.edu
coreapitest.tch.harvard.edu
incapsula.com
cluster3.technolutions.net
cvvr.hms.harvard.edu
jenkins.tlt.harvard.edu
worldmap.harvard.edu
omero-dev.hms.harvard.edu
www.production.sid.hmdc.harvard.edu
email.med.harvard.edu
ccib.mgh.harvard.edu
5709068098338816-fe3.pantheonsite.io
sites.sph.harvard.edu
incapsula.com
db1.mgh.harvard.edu
peerprereview.iq.harvard.edu
incapsula.com
bonescan.bidmc.harvard.edu
*.wcfia.harvard.edu
teachingpost.hbsp.harvard.edu
canvas.hms.harvard.edu
5762637883244544-fe3.pantheonsite.io
p0-univad-dc6.university.harvard.edu
coptic.share.library.harvard.edu
gc.seas.harvard.edu
fugue.arp.harvard.edu
incapsula.com
incapsula.com
edportal.harvard.edu
p2m2a.dbmi.hms.harvard.edu
pilac.law.harvard.edu
5753952654065664-fe1.pantheonsite.io
bootcamp.extension.harvard.edu
vpn.harvard.edu
prostatus.whitepages.com
sni.cloudflaressl.com
iiif.lib.harvard.edu
hds.harvard.edu
rmfvpn.rmf.harvard.edu
incapsula.com
axistv.fas.harvard.edu
vector.meei.harvard.edu
mywellnetmobiletest.tch.harvard.edu
nautilus.gse.harvard.edu
countway.harvard.edu
eve.law.harvard.edu
dlabss.harvard.edu
mail.jbcc.harvard.edu
200.hls.harvard.edu
chsi.harvard.edu
hgc.harvard.edu
vpn.dce.harvard.edu
oi.mgh.harvard.edu
wagnerlab.tch.harvard.edu
bioinformatics.sph.harvard.edu

Certificate

The complete raw certificate details for sandbox-ak150.rc.hms.harvard.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISBNaJx3CaHxng/obVtnHg9YYyMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMTkxNTE2MDhaFw0yNDAzMTgxNTE2MDdaMCsxKTAnBgNVBAMT
IHNhbmRib3gtYWsxNTAucmMuaG1zLmhhcnZhcmQuZWR1MIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAvZ+pXBzxgRGfc5PEvwVVXg3gcHgFBFUF0qiDgUav
uBwNbI0oaio6Ls6V+wGL62vfgvSAIvQjUIeWYxOwq6ehHFMhhTvnr/krleK87Yoa
cR0Bxu+cBxKzs5oQOpCsK981M6lpRqHdCvUoOZ31EY9x4GUUA+AWLOdUD+/pw0nY
7VeOlfAlGLKzM6nS32UT3EChYtqFDnZrW65ukYN3cdZkWIonkz1EJBt9ucP53LTQ
Zd674DzAAHmAvkB0lHKBdR9B7Tj+LUyBTR6K/70b8KgIMOUB19UqlfHC3O49u9Rb
XTepKX4erXaD1BDOynbYj89qEsT8/sbCpi50Y4MmwTRYwwIDAQABo4ICITCCAh0w
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQk3RojmRoz/mE00fu6jFTNyOYuizAfBgNV
HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI
KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0
cDovL3IzLmkubGVuY3Iub3JnLzArBgNVHREEJDAigiBzYW5kYm94LWFrMTUwLnJj
Lmhtcy5oYXJ2YXJkLmVkdTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB
1nkCBAIEgfQEgfEA7wB1ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQX
AAABjILc+CsAAAQDAEYwRAIgZ0lhTKtaSq4/w3mGuqE+0Bgs7DpFsznzY1mcNY/Z
6mACIAUsRNK3DYlOuR3tAZ5okDACOkVVaOaq6YTYzxFm2LmiAHYAKdA6G7Z0qnEc
0wNbZVfBT4qni0/oOJRJ7KRT+US9JGgAAAGMgtz68gAABAMARzBFAiEAzva+qTjq
CKOVwFEbqSjs+aV6GAd+kjYJrFtiHAuqFSACIFisngz+yFXLt2ccGzpRylQ8Myp9
E6DarJMRvlOgq64ZMA0GCSqGSIb3DQEBCwUAA4IBAQBewZoU2D0FSs0jjNuIp1jc
RNZhSxGFNIJeCkF2L9UHGOZx0AO2SfdCfxi2PQaKx9gKpuasyCBtUUFzaeIigI0g
Wuct3pqlK3TMPc6GGrok01t966P9I4s0Lsz/RdipdXBeu0leFJnK3t3DT5LYkYZp
DdiUrrcRFDNiDS9X2p9cPoLhYry+oPToHwuYLIB6AcGoktDiMeuZMVB8gr1NAsN6
YwkRksrK/k7LxcM2VwS1SeKe4HAvJrzmv5Cb10ddh0WN2bvwGvQKUVljNCF49lqe
Axk4c5yiH7nIaM8Kvl/pUXNG1r7jP7Uw3nrr2kIWhK0c9dOh97VTr0l75/e6QlcR
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ+pXBzxgRGfc5PEvwVV
Xg3gcHgFBFUF0qiDgUavuBwNbI0oaio6Ls6V+wGL62vfgvSAIvQjUIeWYxOwq6eh
HFMhhTvnr/krleK87YoacR0Bxu+cBxKzs5oQOpCsK981M6lpRqHdCvUoOZ31EY9x
4GUUA+AWLOdUD+/pw0nY7VeOlfAlGLKzM6nS32UT3EChYtqFDnZrW65ukYN3cdZk
WIonkz1EJBt9ucP53LTQZd674DzAAHmAvkB0lHKBdR9B7Tj+LUyBTR6K/70b8KgI
MOUB19UqlfHC3O49u9RbXTepKX4erXaD1BDOynbYj89qEsT8/sbCpi50Y4MmwTRY
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421452710034459837630082691700808813479474
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 15:16:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 15:16:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sandbox-ak150.rc.hms.harvard.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23937771689084355660992608379477548989917718556541824195919726402668132062764332160394613102722865840717258346702201413932583473844728128103739704343692635900874545641225842580747864310320711662332260542570701977413986043816307279223875985661581251552813558939123080914086203583671024895094426489828172815585929958423450197786426903335728372347414509827235889982591793142513558097785950852725099477102914715362010021120966081437686787434716489977634439826026599956958581317554400026168762223955487615730974851421019541632883645411411626775516207637369078984546198024472215000452369375513857516082802456167538572417219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							24dd1a23991a33fe6134d1fbba8c54cdc8e62e8b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-ak150.rc.hms.harvard.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c82dcf82b000004030046304402206749614cab5a4aae3fc37986baa13ed0182cec3a45b339f363599c358fd9ea600220052c44d2b70d894eb91ded019e689030023a455568e6aae984d8cf1166d8b9a200760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c82dcfaf20000040300473045022100cef6bea938ea08a395c0511ba928ecf9a57a18077e923609ac5b621c0baa1520022058ac9e0cfec855cbb7671c1b3a51ca543c332a7d13a0daac9311be53a0abae19
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005ec19a14d83d054acd238cdb88a758dc44d6614b118534825e0a41762fd50718e671d003b649f7427f18b63d068ac7d80aa6e6acc8206d51417369e222808d205ae72dde9aa52b74cc3dce861aba24d35b7deba3fd238b342eccff45d8a975705ebb495e1499cadeddc34f92d89186690dd894aeb7111433620d2f57da9f5c3e82e162bcbea0f4e81f0b982c807a01c1a892d0e231eb9931507c82bd4d02c37a63091192cacafe4ecbc5c3365704b549e29ee0702f26bce6bf909bd7475d87458dd9bbf01af40a515963342178f65a9e031938739ca21fb9c868cf0abe5fe9517346d6bee33fb530de7aebda421684ad1cf5d3a1f7b553af497be7f7ba425711