roomview.trinity.duke.edu

- Duke University -

Issued by InCommon RSA Server CA 2

About this certificate

This digital certificate with serial number 8a:b6:a5:a4:ed:27:c1:79:21:5b:57:4a:e7:03:d3:fa was issued on by Internet2.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Duke University

Organization: Duke University
State / Province: North Carolina
Country: US

Internet2

Organization: Internet2
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 8a:b6:a5:a4:ed:27:c1:79:21:5b:57:4a:e7:03:d3:fa
Serial Number (int): 184381821110970993039903830679591572474
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 04:cd:1c:ba:b4:b9:f0:f6:b1:a1:c7:0e:90:4c:68:b6:19:3a:a0:08
AuthorityKeyId: ef:4c:00:92:a6:fb:76:2e:5e:95:e2:c9:5f:87:1b:19:d5:4d:e2:d9

Fingerprint (sha1): f5:6f:8c:48:e9:ab:6a:39:11:1a:2f:1e:2d:33:11:48:7b:41:30:95
Fingerprint (sha256): 01:1d:bc:84:e3:55:e4:fc:eb:d6:c0:6d:d2:81:2c:bf:0b:b1:6f:ab:00:fe:11:1a:5e:49:0d:a3:0a:00:1c:86

Issuing Certificate URL: http://crt.sectigo.com/InCommonRSAServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/InCommonRSAServerCA2.crl

Check the revocation status for certificate roomview.trinity.duke.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for roomview.trinity.duke.edu

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

roomview.trinity.duke.edu
tts-roomview.trinity.duke.edu
tts-roomview.win.duke.edu

Other certificates including the domain name duke.edu

(limited to 100 certificates)
solr.oit.duke.edu
eam-app-test-01.oit.duke.edu
statuspage.io
www1-stage.fuqua.duke.edu
stream.fuqua.duke.edu
vlp-orimrh001.dhe.duke.edu
vcm-7069.vm.duke.edu
rapid-936.vm.duke.edu
vcm-5696.vm.duke.edu
stiffrobertslab.pratt.duke.edu
inform4-edc-qc.dcri.duke.edu
vcm-6141.vm.duke.edu
fitz-cups-01.oit.duke.edu
vcm-4779.vm.duke.edu
sakai.duke.edu
trivedi.pratt.duke.edu
inform46-aq52-qc.dcri.duke.edu
statuspage.io
dws-e.oit.duke.edu
statuspage.io
web.visaservices.duke.edu
patty.dnec.duke.edu
www.dukephoto.duke.edu
alsclinic.duke.edu
cluster.technolutions.net
oriapps.duhs.duke.edu
statuspage.io
ccbb.duke.edu
dukecapitalpartners.duke.edu
cpe-bach-multi1.trinity.duke.edu
projects.law.duke.edu
connect.ssri.duke.edu
work.duke.edu
gartner.oit.duke.edu
vcm-6535.vm.duke.edu
go.fuqua.duke.edu
queerhistory.duke.edu
communications.hr.duke.edu
vcm-6503.vm.duke.edu
tts-web-01-staging-multi1.trinity.duke.edu
vcm-4198.vm.duke.edu
maestro-hsw.duhs.duke.edu
dcid.sanford.duke.edu
web.visaservices.duke.edu
recreation.duke.edu
tts-web-01-staging-multi1.trinity.duke.edu
tts-web-01-staging-multi1.trinity.duke.edu
vcm-5257.vm.duke.edu
vcm-5238.vm.duke.edu
vcm-12275.vm.duke.edu
www.fuquaworld.duke.edu
iqaapp.dhvi.duke.edu
yt-cs216.cs.duke.edu
andererseits.library.duke.edu
appledore2.notes.duke.edu
payments.tip.duke.edu
vcm-6956.vm.duke.edu
vcm-6655.vm.duke.edu
portal.duke.edu
vcm-4178.vm.duke.edu
www.highseas.env.duke.edu
bradford.lib.duke.edu
abaqus.oit.duke.edu
nunn-lab.evolutionaryanthropology.duke.edu
vcm-7023.vm.duke.edu
vcm-7214.vm.duke.edu
redy.ssri.duke.edu
globaled.duke.edu
vcm-5001.vm.duke.edu
warpwire-frontend-test.oit.duke.edu
vcm-24408.vm.duke.edu
pateklab.biology.duke.edu
cacti-test.oit.duke.edu
vcm-5694.vm.duke.edu
roomview.trinity.duke.edu
fast.dcri.duke.edu
www.gifts.duke.edu
medspace.mc.duke.edu
vcm-6817.vm.duke.edu
forms.hr.duke.edu
enquire.ads.duke.edu
vcm-4824.vm.duke.edu
vcm-4390.vm.duke.edu
conf.events.duke.edu
vcm-5513.vm.duke.edu
calendar.duke.edu
highseas.env.duke.edu
vcm-4296.vm.duke.edu
www1-prod.fuqua.duke.edu
api.oit.duke.edu
www.callrec.oit.duke.edu
igs.duke.edu
vcm-4734.vm.duke.edu
lift.duke.edu
vcm-6534.vm.duke.edu
socialequity.duke.edu
statuspage.io
news-old.sanford.duke.edu
vcm-4573.vm.duke.edu
vcm-6671.vm.duke.edu

Certificate

The complete raw certificate details for roomview.trinity.duke.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 184381821110970993039903830679591572474
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Duke University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roomview.trinity.duke.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2962896263570230755535713208702893667575189200130096483395648625984155085918488214279656844652518312433033481355642220043198017265786712926131210410843014411427220863883692038083944371500233847384394009893447484225092007028385525646352306610566093429471099761195424537028946859064424440678530931483928329233133166673476822230101003141003893382835964685382204301910026296776146236100088905506920588908181780698933434469872801745042609135602112138013334012369784044610562908757286687183747150815456896094711669842252281181580685616362274604192713611757532373633604819404099564309994447447668468949540673727498343051556123099724503961811949302050496803863653094472804017307249664576644743323284117381994596207769969651625762429436838917222914940721208851848947449787523786934538509099084764795222988550375828055978986380045373417861171479626253444194010729012667288771431936452148715219527317184837042046514209485809459802609261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ef4c0092a6fb762e5e95e2c95f871b19d54de2d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04cd1cbab4b9f0f6b1a1c70e904c68b6193aa008
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.103
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/InCommonRSAServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/InCommonRSAServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bde01abb000000403004730450220578088390a3704eb66a92bb50eaa1e84ba07be2339ac4527208d7548244f102c022100ed86d0d5574c36e58d621d2b4f331605ea6c8f55cee31d44ad16d8c539dc2bf70077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bde01ac290000040300483046022100d3af69685d0396c8e6284962397ca0561bcd6fc4ed76ddd5766f8bef120c7a0a022100dcde57feaf538f0e0d8518b32fc3d258747b8dcff30ccb18307d38ea19108100
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roomview.trinity.duke.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tts-roomview.trinity.duke.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tts-roomview.win.duke.edu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		00362c8e05e0d57ef6a3916ec30e8ee7fbf742b569972b1d1d2483c5d2e496fa642d41748957f99ed7187ccb3d41e86e743e9b29f5ddb70b4987b74688c0cfcbb21a5418a4ea0681a06d3bc055d80377e253186e3b77db6e539cadcfad94147668f0d67fc97061b49180db413b73c50d62dfadb9889d7fded4bd74da4ebbcca948755a9a93528292019beb13c687ea296b7446aaf8a858afcc3e58fb94f14c1c5d9bef990af17b1e1ff3f35d02f429c1c054b5ddf2af0b38663c44c89b427bb105f27535a0e06519e65211827aa76b558142777321ba03a49630c6912b5e10161c3244bdd58ff66beb05cf4410e9179f1dd60050afa6793f277c30c8ee6bf220757145655516e39b67ffa151fcdafceb0da2bbf54c12912d1e2a40f3213db4d770ccd180c99bb43296bbe6d3acb14631abe240497a8a091ae452b6da360fa3b2cfbd72458cc6daaa8d0664e204b090f3175d250f5bc40f02cc3ef9440b7cdfdbaa0bbb34664de3f755fc5a13fe0e290539cc64f61fceb1e5132c246025ebea1227