gleexpecls.instacccloud.tatacommunications.com

- Tata Communications (UK) Ltd -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0a:d3:b7:73:44:d1:cb:e4:83:69:ef:ac:09:97:cf:c1 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tata Communications (UK) Ltd

Organization: Tata Communications (UK) Ltd
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:d3:b7:73:44:d1:cb:e4:83:69:ef:ac:09:97:cf:c1
Serial Number (int): 14391575408494773774618367661060902849
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7f:92:ff:c1:9c:6f:c4:54:4f:97:ce:a1:b9:0e:f4:ca:bc:3e:10:33
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 28:1b:22:c0:ee:71:36:1d:23:11:a3:c6:74:9f:e7:a5:e8:7a:00:a7
Fingerprint (sha256): 01:a6:bb:46:5c:00:87:0c:29:16:6c:ea:62:8a:71:33:69:7e:93:55:3d:ee:a4:50:9d:42:60:e3:3e:56:47:89

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate gleexpecls.instacccloud.tatacommunications.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gleexpecls.instacccloud.tatacommunications.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gleexpecls.instacccloud.tatacommunications.com
gle2expe2.instacccloud.tatacommunications.com
gle2expe1.instacccloud.tatacommunications.com
gle1expe2.instacccloud.tatacommunications.com
gle1expe1.instacccloud.tatacommunications.com
instacccloud.tatacommunications.com

Other certificates including the domain name tatacommunications.com

(limited to 100 certificates)
in-pun.vpn.tatacommunications.com
reports.move.tatacommunications.com
indiakyc.move.tatacommunications.com
uk.vpn.tatacommunications.com
eptw.tatacommunications.com
*.globalpartnerportal.com
mobility.tatacommunications.com
cardiolog.tatacommunications.com
test-network.iot.tatacommunications.com
gleexpecls.instacccloud.tatacommunications.com
videoconferencing.tatacommunications.com
in-pun.vpn.tatacommunications.com
xfer.tatacommunications.com
mt-edge-b.3scale.net
in-access.tatacommunications.com
mt-edge-b.3scale.net
ekyc.devkyc.move.tatacommunications.com
us-access.tatacommunications.com
support1.chit.biz
smartdevices.iot.tatacommunications.com
care.koinx.com
portal3.mss.tatacommunications.com
developer.tatacommunications.com
*.tatacommunications.com
jobs.tatacommunications.com
ekyc.prod.in.tmpkyc.move.tatacommunications.com
ekyc.devkyc.move.tatacommunications.com
extranet-vno.tatacommunications.com
demo.analytics.iot.tatacommunications.com
campaign.tatacommunications.com
test-data.iot.tatacommunications.com
extranet-vno.tatacommunications.com
portaltest.tatacommunications.com
helpcenter.keysuggest.io
test-platform.iot.tatacommunications.com
sfilex.tatacommunications.com
healthandsafety.tatacommunications.com
mt-edge-b.3scale.net
*.tatacommunications.com
portal.tatacommunications.com
idp.tatacommunications.com
helpdesk.mytravaly.com
kiacart.triblem.com
www.peakinfra.ethicshelpline.in
www.tatacommunications.com
mt-edge-b.3scale.net
support.xcellhost.cloud
enetcare.tatacommunications.com
primerep.tatacommunications.com
cti1.instaccglobal.tatacommunications.com
support.subcom.tech
in-pun.vpn.tatacommunications.com
customerzone.tatacommunications.com
actsync-na.tatacommunications.com
safety.tatacommunications.com
support.inxeption.com
filexch.tatacommunications.com
hranalytics.tatacommunications.com
smesupport.iifl.com
indiakyc.devkyc.move.tatacommunications.com
portalna.tatacommunications.com
primerep.tatacommunications.com
cardiolog.tatacommunications.com
ekyc.move.tatacommunications.com
test-data.iot.tatacommunications.com
support.agtpl.in
www.tatacare.tatacommunications.com
itassist.aggregateintelligence.com
*.mss.tatacommunications.com
in.mum.vpn.tatacommunications.com
ekyc.uatkyc.move.tatacommunications.com
oneplacebeta.tatacommunications.com
tatacommunications.com
filexch.tatacommunications.com
documentation.mrnobody.in
www.peakinfra.ethicshelpline.in
in-mum.vpn.tatacommunications.com
mobility.tatacommunications.com
us.vpn.tatacommunications.com
in-chn.vpn.tatacommunications.com
move.tatacommunications.com
lmt.tatacommunications.com
*.msft5-eu2.tatacommunications.com
workersafety.uat2.iot.tatacommunications.com
comms-apac.tatacommunications.com
*.tatacommunications.com
*.globalpartnerportal.com
ethernetportal.tatacommunications.com
agrud-support.wetranscloud.in
business-support.truecaller.com
*.msft5-us2.tatacommunications.com
netpms.tatacommunications.com
voiceservices.tatacommunications.com
uat-ekyc.move.tatacommunications.com
support.minits.in
support.freedomcard.io
tatacommunications.com
iot.tatacommunications.com
support.ignitecinc.com
*.ipstorage.tatacommunications.com

Certificate

The complete raw certificate details for gleexpecls.instacccloud.tatacommunications.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14391575408494773774618367661060902849
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tata Communications (UK) Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gleexpecls.instacccloud.tatacommunications.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 955320511188007288872442193983175069496522774626937661225479424396336879918274778619617238327507156830192400292050678449827048790070294271807955761847958428207654910545689292376987710010021556927576777411703806946170310096901842626923533910706681788928904339861739367661659396667094686468471523013773737710891814706287248274528439524259267850882961235113467962161138155237567728852663391068332904555980831882189394124595887656380358515801593638962616126078848920763591863090359784396354090721781153527932976387529842662426848783305697597720808140969676113258329538718237701753521439620336006302108546371247415826293691620639753705536905113804970820488155013975640539551642917031520327513091859819684345803089278900746630056823389753501485585058390749555077791309828532566325576377318459071058596733966123037847787471200319309094998259502677577096382579024286081111780336408439520198616537191932962250260004583578661843894701840838078475712225841695110355899694289435731812804780731701873625490323561980476845279504623400930786747745460730148413581003278365979331350043441016687291347568831435814337342931486569561702147889093670622899684919461611223495397663379281257298891386391654207069627657759487766028840270451746467732496871991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7f92ffc19c6fc4544f97cea1b90ef4cabc3e1033
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (277 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gleexpecls.instacccloud.tatacommunications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gle2expe2.instacccloud.tatacommunications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gle2expe1.instacccloud.tatacommunications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gle1expe2.instacccloud.tatacommunications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gle1expe1.instacccloud.tatacommunications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instacccloud.tatacommunications.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a7c27edda19fa3a5e349bbd7615fa3bc97e06bdfd8780a18cec07b196742d0206c28b4c5c86ee84fa0a661cca632b63b89061390cb5cee77c8f78ac56272ef3a071db2d0fe1aeeefe712a8161bdaa023e56003eee72eddc6508a44c555818dc252036e26fc11bfe13edba20fae073598500c238b5a1958815258f23490d2335c53e8c5ece95e1e2905b450bfd1920b279db1e752fdcd60dbafe367965e438be9a298070241e64c8e294be2f79a19c16a0b0cc60e099a3ca62e3a6999031eb733e05ccb2065fd0d078d1acc2b02b763cc5553a6ac042f09528c2e7bb8a2efda162f6230377fa18ec09dd2e3a9c4d0dfad9c30df14166f6d258cdcfbb3df65bccb