gourmesso.fr
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f1:a8:14:e1:73:aa:58:f9:4c:70:39:3f:3e:6e:cc:e3:24 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gourmesso.fr
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f1:a8:14:e1:73:aa:58:f9:4c:70:39:3f:3e:6e:cc:e3:24Serial Number (int): 343568326945162065722932681403434372227876
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 66:14:d0:73:61:5a:0d:d5:04:4f:25:5a:da:32:ce:9a:86:6c:43:46
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 83:ad:ba:a3:40:29:29:ff:d8:23:4a:e1:a6:da:ae:a5:5e:89:5b:7a
Fingerprint (sha256): 02:ce:5a:b8:1f:e4:8c:61:ed:97:2f:5c:c3:d5:c4:cc:1d:78:27:02:ba:d8:ef:08:c3:d5:03:8a:50:05:a1:ce
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate gourmesso.fr
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gourmesso.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gourmesso.fr
www.gourmesso.fr
www.gourmesso.fr
Other certificates including the domain name gourmesso.fr
(limited to 100 certificates)
gourmesso.fr
gourmesso.fr
gourmesso.fr
www.gourmesso.fr
gourmesso.fr
gourmesso.fr
www.gourmesso.fr
gourmesso.fr
gourmesso.fr
www.gourmesso.fr
www.gourmesso.fr
gourmesso.fr
gourmesso.fr
www.gourmesso.fr
www.gourmesso.fr
gourmesso.fr
gourmesso.fr
gourmesso.fr
gourmesso.fr
gourmesso.fr
gourmesso.fr
www.gourmesso.fr
gourmesso.fr
www.gourmesso.fr
www.gourmesso.fr
www.gourmesso.fr
www.gourmesso.fr
gourmesso.fr
gourmesso.fr
www.gourmesso.fr
gourmesso.fr
gourmesso.fr
www.gourmesso.fr
gourmesso.fr
gourmesso.fr
www.gourmesso.fr
www.gourmesso.fr
gourmesso.fr
gourmesso.fr
www.gourmesso.fr
www.gourmesso.fr
gourmesso.fr
gourmesso.fr
gourmesso.fr
gourmesso.fr
gourmesso.fr
gourmesso.fr
www.gourmesso.fr
gourmesso.fr
www.gourmesso.fr
www.gourmesso.fr
www.gourmesso.fr
www.gourmesso.fr
Certificate
The complete raw certificate details for gourmesso.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFTCCBP2gAwIBAgISA/GoFOFzqlj5THA5Pz5uzOMkMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA0MDMwODEyMzFaFw0x ODA3MDIwODEyMzFaMBcxFTATBgNVBAMTDGdvdXJtZXNzby5mcjCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAK48HgBx+XiHUW9uRneqdKV2Hi3gnFoItHE1 +L6lYLojsU31nh5m8Xvw+PyDsHohuRAmK/HpvgCeSHMXjhKEpr+lScj1dNI7g4hw A1g9aH0h8RGMOFTFTpPvBv3s+MgyD7iU+sheJiigPMNonvFHDEOHOan7tMHMdRdC AkVwPyqz0umjbI+W9IdGsDNrzxe1GHF9N4qmGtNOij5ZyBL9RUNRLvc5lWETpL/q WI7ujrdK5gS8LKXixWZ/9txuNg+iTq5Pu4n0lSr/qWWqi1AZFqBDGBFjIf0I40fE 5TuQRx+5SwaD2u6FTFX4EgJwSk/tR1jo0a+ZwsxXCRnSePJxBxsCAwEAAaOCAyYw ggMiMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUZhTQc2FaDdUETyVa2jLOmoZsQ0Yw HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn LzApBgNVHREEIjAgggxnb3VybWVzc28uZnKCEHd3dy5nb3VybWVzc28uZnIwgf4G A1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUF BwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4M gZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJl bHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENl cnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9y Zy9yZXBvc2l0b3J5LzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2ANt0r+7LKeyx /so+cW0s5bmquzb3hHGDx12dTze2H79kAAABYorHepIAAAQDAEcwRQIhAPrGFSuq EaBWK/HBhUNFYhOYJI6LINYz0CFRcWx23NJeAiBMRqt+hG5y6QLrFXvD2PZLadEW 9GBNRnkkuc+Z40DYbwB2ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVFR/R4 AAABYorHetQAAAQDAEcwRQIgEVAwft1mR3so0NSsaccsnHXsDGSo44HG116SSmt8 2aQCIQD8D+3Z0sL4YHbUk7UzUNcFDs6TVNmrs2zhSC0K6Cvj9TANBgkqhkiG9w0B AQsFAAOCAQEAd4fksGzhzvw0TghTEmV8sb/x90HpNjcyHUbn00qS+PVArFZeRWAk m8Vyfqx+9tNHe/ntepDvGyeOOKXlZEjYH/X5CQJ94JR7mHDIalKQ3wjgD29dB0cT 69pOEiFMrcFS6y1myLx8cRcsRwNQLlSfEQShLIhUlez5TCWrJSZo1aLAeGEeAr09 /CUsKcxc2h9Mb4AnkItZSKiLvq+BpnO4UUukLgJxUCVYQKUoB431LuEgX3YWMtlG sx0/FL48sZilwz6vyx4O3GgJKwhGXg5/nRk/RRQbWq4eXwB7d9kvsUA2a/pmjY3y Mwd8gIb9OFrbtVLNuueoQupAiR+oGWVAPw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjweAHH5eIdRb25Gd6p0 pXYeLeCcWgi0cTX4vqVguiOxTfWeHmbxe/D4/IOweiG5ECYr8em+AJ5IcxeOEoSm v6VJyPV00juDiHADWD1ofSHxEYw4VMVOk+8G/ez4yDIPuJT6yF4mKKA8w2ie8UcM Q4c5qfu0wcx1F0ICRXA/KrPS6aNsj5b0h0awM2vPF7UYcX03iqYa006KPlnIEv1F Q1Eu9zmVYROkv+pYju6Ot0rmBLwspeLFZn/23G42D6JOrk+7ifSVKv+pZaqLUBkW oEMYEWMh/QjjR8TlO5BHH7lLBoPa7oVMVfgSAnBKT+1HWOjRr5nCzFcJGdJ48nEH GwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 343568326945162065722932681403434372227876 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-03 08:12:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-02 08:12:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gourmesso.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21995109957480587788633941423292402030758282612937582638661426140527798265136688305772709043495285190556268250390478058276964864202715469043113061313089860288983713129088834139539753323403483306559363177198576124112132239809487542919270481784476311339936711173622584145556200025540333969543071946260580370737957353503438950756846481454397266653034675489515440316633897364322194766145928450757222845999778936067098196052549347132769095403979831659034287363623814119967936431905372805695556758212583430673031571462798020549512656975129115034547576600270417774151516692094740487964681750617462584745982253367120534505243 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6614d073615a0dd5044f255ada32ce9a866c4346 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gourmesso.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gourmesso.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001628ac77a920000040300473045022100fac6152baa11a0562bf1c1854345621398248e8b20d633d02151716c76dcd25e02204c46ab7e846e72e902eb157bc3d8f64b69d116f4604d467924b9cf99e340d86f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001628ac77ad4000004030047304502201150307edd66477b28d0d4ac69c72c9c75ec0c64a8e381c6d75e924a6b7cd9a4022100fc0fedd9d2c2f86076d493b53350d7050ece9354d9abb36ce1482d0ae82be3f5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007787e4b06ce1cefc344e085312657cb1bff1f741e93637321d46e7d34a92f8f540ac565e4560249bc5727eac7ef6d3477bf9ed7a90ef1b278e38a5e56448d81ff5f909027de0947b9870c86a5290df08e00f6f5d074713ebda4e12214cadc152eb2d66c8bc7c71172c4703502e549f1104a12c885495ecf94c25ab252668d5a2c078611e02bd3dfc252c29cc5cda1f4c6f8027908b5948a88bbeaf81a673b8514ba42e027150255840a528078df52ee1205f761632d946b31d3f14be3cb198a5c33eafcb1e0edc68092b08465e0e7f9d193f45141b5aae1e5f007b77d92fb140366bfa668d8df233077c8086fd385adbb552cdbae7a842ea40891fa81965403f