rmc-itv1.centurylink.com

- CenturyLink -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 5a:20:b4:28:03:bb:b0:af:de:70:3e:ee:89:65:51:02 was issued on by VeriSign, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

CenturyLink

Organization: CenturyLink
Organization unit: IT Operations
State / Province: Louisiana
Locality: Monroe
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:20:b4:28:03:bb:b0:af:de:70:3e:ee:89:65:51:02
Serial Number (int): 119800327124126059455146974641368944898
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): 4c:c0:da:75:43:9a:28:5b:37:ed:29:b7:eb:e3:92:41:a0:46:d0:66
Fingerprint (sha256): 00:c9:ba:9d:5e:47:4a:8f:b7:25:fc:95:aa:cd:e5:d5:f2:d4:55:bd:de:09:35:e1:62:d2:b3:db:fe:27:c2:1a

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate rmc-itv1.centurylink.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rmc-itv1.centurylink.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rmc-itv1.centurylink.com
rmc-e2e.centurylink.com

Other certificates including the domain name centurylink.com

(limited to 100 certificates)
ctlchangead.centurylink.com
ctlchangead.centurylink.com
*.cloud.centurylink.com
rvmweb.centurylink.com
ipsops-test1.centurylink.com
www.centurylink.com
lab.iaf.centurylink.com
mcoe.centurylink.com
www.centurylink.com
businessvoip.centurylink.com
qxgisp-itv1-basicauth.centurylink.com
gadHCDHHS.ccc.centurylink.com
rmc-itv1.centurylink.com
vbs.level3.com
tcat-test1.centurylink.com
alumni.centurylink.com
pypi.mss.centurylink.com
promotions.centurylink.com
webops.centurylink.com
ctlmft1.centurylink.com
salesforceWFtest.centurylink.com
ixg-notices-test.centurylink.com
mrit.centurylink.com
cole.centurylink.com
ucexe1dmz.centurylink.com
iot7-test1.centurylink.com
ctg-itv1.centurylink.com
communicator6.centurylink.com
nagios.mss.centurylink.com
clustere-p2.alpha.expressway.hcs.centurylink.com
sipp-odc.centurylink.com
pilot.mss.centurylink.com
imaxml-notices-test.centurylink.com
LIVE.AF.CENTURYLINK.COM
cora.centurylink.com
smetrics.centurylink.com
hcde-ppo-itv1.centurylink.com
sapmobile-test1.centurylink.com
kai04.centurylink.com
gadSCOUPD.ccc.centurylink.com
splunk-test-ext.centurylink.com
sv.citedisplay.com
akamaisecure2.qualtrics.com
ebcontent.centurylink.com
sngaccesspool1.centurylink.com
news.centurylink.com
ctg-itv1.centurylink.com
gadCHUBB1.ccc.centurylink.com
ctlchangead.centurylink.com
qxgbc3-dmz.centurylink.com
dn1mtbaccess.centurylink.com
wfm.govccc.centurylink.com
controlnetworx.centurylink.com
ue1psbc02.govccc.centurylink.com
bgksbc.centurylink.com
ERM.Centurylink.com
clustere-p2.mhp.expressway.hcs.centurylink.com
ctlverify-test.centurylink.com
LIVE.IAF.CENTURYLINK.COM
LIVE.AF.CENTURYLINK.COM
de.controlcenter.centurylink.com
www.cert2.centurylink.com
tcat7-test1.centurylink.com
secure4s.scene7.com
qhome-test1.centurylink.com
psba.centurylink.com
gadSOFSUN.ccc.centurylink.com
ecd.lumen.com
bidmaster.centurylink.com
dn1mtbaccess.centurylink.com
tcat-preprod.centurylink.com
cag-ddc.ctlaccess.centurylink.com
eam.centurylink.com
wfmILSLLC.ccc.centurylink.com
promotions.centurylink.com
sipp-odc.centurylink.com
gadIOWAHT.ccc.centurylink.com
sipp-ddc.centurylink.com
jaadu-itv1.centurylink.com
get.centurylink.com
careeropportunities.centurylink.com
controlfederal-itv1.centurylink.com
ocsrp2.centurylink.com
ebus-test.centurylink.com
logs.mss.centurylink.com
ddcaccesspool.centurylink.com
ready.centurylink.com
vdi.centurylink.com
qgsisupplierportal.centurylink.com
selfservice.centurylink.com
controlcenter-e2e.centurylink.com
voiceconfig.centurylink.com
kai01.centurylink.com
hcmadminapi.govccc.centurylink.com
cid-adn.ccc.centurylink.com
qxgbc3-itv1-dmz.centurylink.com
sip.ctltest.centurylink.com
sapmobile-test1.centurylink.com
partnerlinkemea.centurylink.com
w3lweb-itv1-dmz.centurylink.com

Certificate

The complete raw certificate details for rmc-itv1.centurylink.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlVHfckfofGx+hTcNM9Y
lyUywBL6OpamtHtWAtuThNNuO1es2m0QDxvdUgmegvj5gf91P75B14Tq3Ckg6N22
jVcXCyt6NZ048LaZ3zQp1Qu5UaoHi/qNeKJ0+mFHM2DHQDosVMQX6YSBO51tQzdg
xseKDpn/tDr7WBFTkWo87RqRUbuYRAA8HViarXcOBosFyKD0PCzLk0Su3rh/EKEg
vZWY9ExDQHmKOWgxpfIIm/Ma+zmPeZL1Zn5CQU9nTeFRaIdhBOg6x0lDCt7ufYKo
XfxtmXHcsdtSHwdP2g6ikQkEQ8zXmjhYjKgNgyVVcnREijnmojJIKjs1ThsBw6FY
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 119800327124126059455146974641368944898
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-07-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-07-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Louisiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Monroe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'CenturyLink'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'rmc-itv1.centurylink.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24027330715507381601503626763187336833454889396740767102444994711400758065406837903043104935576684228187321803212027680968961815200472487143379555547983252962772220892054873436871249940674180630013969091033449114284035864164696248552748236700983812919753949371618220933251615048915892162684522437680411793038303999902887024486806535768881657019890539411931823232662460571228173599967679810717525013497684555883921605470239741510818732262600403909550555228257329604137247553680311020120618301475911605193210528962736767453408115621356588161115907880407203242434656899718017894839457142579215891062073968863507936008357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmc-itv1.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmc-e2e.centurylink.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00adbddaf3c20b719549ed684961baf484e3ac5bd2a4c5959634b7946ee9d8b3c8fbc9969563acbce17d3af6b20908ac8623cd011d43305d57339404dae98e8f8642ccf615fe20f9b2066e87c5dd48881f1cdd5fbbcf74ded97741da2276907ad2acf5a17bb32465fb0dc3f91f8ccdea93e27e1d291b2b3602bbe4df731955451e145b9d8c14b0dffbd7b696f64dafeece9730d0b66c75914db4b800e2bedb531f22cc92ea285722a620fdbe595a72e597dd26c71d890edc738c87667f47d02f9ebab565c62217e5f9dee018cfef3108d5e125fa2f8ed4d29d2235b483f1f7cdaa59170c0e26349902472094faed4457725b7e55e35b6c49146919e0660500fdc7