cedtk1.3cx.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:54:11:4c:66:5a:ae:d4:95:ed:5a:4c:b4:96:58:3d:47:b0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cedtk1.3cx.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:54:11:4c:66:5a:ae:d4:95:ed:5a:4c:b4:96:58:3d:47:b0
Serial Number (int): 289943570183119584678282135606159801665456
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9a:78:4a:68:9b:ee:47:f9:64:df:34:23:1c:d8:41:ea:68:56:a7:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b0:2b:8d:52:5a:3a:9f:87:9f:ee:f7:af:46:6d:5f:25:0e:2f:66:3a
Fingerprint (sha256): 00:80:98:c0:3a:0c:5b:44:0d:98:91:07:44:b5:56:01:a9:4c:38:c7:d1:31:19:d7:26:52:d0:13:7e:bc:84:1a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate cedtk1.3cx.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cedtk1.3cx.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cedtk1.3cx.de

Other certificates including the domain name 3cx.de

(limited to 100 certificates)
krimitotal.3cx.de
kom4tel01.3cx.de
modiso.3cx.de
schreiber.3cx.de
rrtest.3cx.de
studio1.3cx.de
froetter.3cx.de
cedtk1.3cx.de
linkx.3cx.de
allsys.3cx.de
mkits.3cx.de
beronetdemo.3cx.de
jbo.3cx.de
pbx-bssde.3cx.de
chh.3cx.de
pwberatung.3cx.de
ltg.3cx.de
internisten.3cx.de
pks-demo.3cx.de
3cx-lettenreuth.3cx.de
extracomputertest.3cx.de
weri.3cx.de
swplan.3cx.de
orthopaedicum-saar.3cx.de
virtiko.3cx.de
fh-riedlingen.3cx.de
allude.3cx.de
it-3cx.3cx.de
3cxdhss.3cx.de
prointernet.3cx.de
aberotech.3cx.de
ks-auxilia.3cx.de
stuermann.3cx.de
itservicezentner.3cx.de
schmitz-soehne.3cx.de
office.hasselbit.com
datotec.3cx.de
gangolf.3cx.de
bldmpbx.3cx.de
testfirma.3cx.de
mypbxszn.3cx.de
telefonanlage1.3cx.de
maxtest.3cx.de
3cxitservicekraus2.3cx.de
hnc.3cx.de
fotoverbund.3cx.de
tk-braunschweig.3cx.de
nichelmann-gmbh.3cx.de
plentymarkets.3cx.de
hermann.3cx.de
roadshow.3cx.de
direma.3cx.de
gangolf.3cx.de
lafonline.3cx.de
raiffeisenlager.3cx.de
ageto.3cx.de
sharecommtest.3cx.de
pbxhmt.3cx.de
ecki.3cx.de
inducomroyer.3cx.de
steger-ffm.3cx.de
tkcuramed.3cx.de
itngo.3cx.de
myapp01.3cx.de
itnetzedinslaken.3cx.de
hesse.3cx.de
cymos.3cx.de
ei-tea.3cx.de
hoell.3cx.de
vkl.3cx.de
tk-anlage.3cx.de
hubersteuerkanzlei.3cx.de
kohout.3cx.de
wm-ofz.3cx.de
adn1103.3cx.de
ohletz.3cx.de
johsthode.3cx.de
voiptestserver.3cx.de
duetosave.3cx.de
braems-lohnkonfektionierung.3cx.de
btg3cx.3cx.de
telefonanlage1.3cx.de
autoringer.3cx.de
witt.3cx.de
testcertificate.3cx.de
rms.3cx.de
kolkge.3cx.de
telefonixneosys.3cx.de
testheadon1.3cx.de
drabant.3cx.de
thedeepbench.3cx.de
keb-gmbh.3cx.de
bauerhppbx.3cx.de
feuerwehrlueneburg.3cx.de
tk.3cx.de
brandt.3cx.de
mkstest.3cx.de
crpsnetzwerk.3cx.de
hoell.3cx.de
sprindtest.3cx.de

Certificate

The complete raw certificate details for cedtk1.3cx.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISA1QRTGZartSV7VpMtJZYPUewMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjExMDIxMjQ4MDBaFw0x
NzAxMzExMjQ4MDBaMBgxFjAUBgNVBAMTDWNlZHRrMS4zY3guZGUwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xOLgfL4169huOkqh8FnRuWUby4EwPIC2
0+TPc82bm21QnnEXbQTOTdwqrXhTVLiSkiyvxhppiGvnqB3qU0XNfgWSPMEUoGEB
AFSiH8bEa9dvfQU/l6MwgpjNnQ5jRTKGUoLSWB4NFmgEu3YuhcJfWpRMrf2W6xDP
zFupfIUrYEGnpoozpUjtYV61RTrEB/sLp9pnqGfw/0FuHTy6KKqsRtA4ri9+gsEU
HG4K3Sx8CedYHF+3EfXGJWAAb4o1grzNxljMiVoRn1zMhhB2mU4YGRIioMZleRVA
UdcDZQ8KzDbWHW7SINOfSJO0izRUGls0SeFzzqLf1lr2CHae3ZwhAgMBAAGjggIO
MIICCjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJp4Smib7kf5ZN80IxzYQepoVqdC
MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMHAGCCsGAQUFBwEBBGQw
YjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9y
Zy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v
cmcvMBgGA1UdEQQRMA+CDWNlZHRrMS4zY3guZGUwgf4GA1UdIASB9jCB8zAIBgZn
gQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz
LmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmlj
YXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBh
bmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGlj
eSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzAN
BgkqhkiG9w0BAQsFAAOCAQEAFf4gmCYpQxuUUMuBNlZIK/qu6aDUTswEp5Vhoke0
iShFIyRc+BTfm8GOcS2uCBrkXTKF/4IyfFXfEnux2ZjAvH7zRjdIkW8ciIImh+dH
cdzi5h9/Z8+Jum9wDAYcxTuppjdENEGR8WjgJDndQCNN+2D1xMcaC0ODP5+b+W5j
bkIH2W+D0maKseLpHD89o0BqESAzPV8RK3TB2JjIPnGzDiYqp82vYFMlVds737lr
p0wteQvPVf3GhgPBrTfP5Qu3xc41jDyq4pMjFlfD8D07E6SFD3VDRiuDc4K+LNs6
qkjmQApP6j2NvH2mOv8prJ5ePVgsW/YDbH4DcJ8qdTAPig==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucTi4Hy+NevYbjpKofBZ
0bllG8uBMDyAttPkz3PNm5ttUJ5xF20Ezk3cKq14U1S4kpIsr8YaaYhr56gd6lNF
zX4FkjzBFKBhAQBUoh/GxGvXb30FP5ejMIKYzZ0OY0UyhlKC0lgeDRZoBLt2LoXC
X1qUTK39lusQz8xbqXyFK2BBp6aKM6VI7WFetUU6xAf7C6faZ6hn8P9Bbh08uiiq
rEbQOK4vfoLBFBxuCt0sfAnnWBxftxH1xiVgAG+KNYK8zcZYzIlaEZ9czIYQdplO
GBkSIqDGZXkVQFHXA2UPCsw21h1u0iDTn0iTtIs0VBpbNEnhc86i39Za9gh2nt2c
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289943570183119584678282135606159801665456
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-02 12:48:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-31 12:48:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cedtk1.3cx.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23451174641158918324199649525979918731612013354606287634778582439871406213152505294155442988520247947121687044696632760652019964923755283138601183656358478689471777868134244995051511346231072439191055995604366346526529316149206760624668295391464286644508514334176515203054124083835329085596566932966193383121060804205743739972769886016678969065467839695743307418814450729784047236543400774007383766491478438444967007144887989213063474059766932724621007646358746238688016224156104390453809163220316184796527961866351524868327732730654473423932265514440795857954451260864279649312276739725533653668639358301422955109409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a784a689bee47f964df34231cd841ea6856a742
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cedtk1.3cx.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0015fe20982629431b9450cb813656482bfaaee9a0d44ecc04a79561a247b489284523245cf814df9bc18e712dae081ae45d3285ff82327c55df127bb1d998c0bc7ef3463748916f1c88822687e74771dce2e61f7f67cf89ba6f700c061cc53ba9a63744344191f168e02439dd40234dfb60f5c4c71a0b43833f9f9bf96e636e4207d96f83d2668ab1e2e91c3f3da3406a1120333d5f112b74c1d898c83e71b30e262aa7cdaf60532555db3bdfb96ba74c2d790bcf55fdc68603c1ad37cfe50bb7c5ce358c3caae293231657c3f03d3b13a4850f7543462b837382be2cdb3aaa48e6400a4fea3d8dbc7da63aff29ac9e5e3d582c5bf6036c7e03709f2a75300f8a