aeg-ms20-prod.trafficmanager.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f1:9b:07:95:82:ab:55:e9:a4:73:ea:2d:72:62:40:f6:76 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aeg-ms20-prod.trafficmanager.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f1:9b:07:95:82:ab:55:e9:a4:73:ea:2d:72:62:40:f6:76
Serial Number (int): 343550977941083299208310852087148737263222
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:d8:45:6a:4a:9a:3c:4d:67:d0:58:5b:dd:5d:de:76:a0:b4:ce:13
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 15:dd:f1:95:f9:93:d4:1b:14:b6:73:c7:56:2a:7c:83:56:39:71:bb
Fingerprint (sha256): 03:2c:d7:68:3b:a9:d7:bd:ce:88:e7:eb:23:66:09:a8:79:ac:23:86:ab:3f:cb:a1:ba:3e:7d:56:6c:fa:b8:61

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aeg-ms20-prod.trafficmanager.net

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aeg-ms20-prod.trafficmanager.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aeg-ms20-prod.trafficmanager.net
martinlawrence.aegpresents.com
newsletter.aegpresents.com
newsletter.goldenvoice.com
newsletter.madisonhousepresents.com
newsletter.wintercircleproductions.com
nickcannonwildnoutlive.com
optin106.aegpresents.com
vendors.stagecoachfestival.com
websterhall.preferences.aegpresents.com
www.desusandmerodonyc.com
www.nickcannonwildnoutlive.com

Other certificates including the domain name trafficmanager.net

(limited to 100 certificates)
*.prod.execution.cscp.ms
edu-datasenseeds-ppe.trafficmanager.net
emea.bvd.services.skypeforbusiness.com
testservice4-test-wp.trafficmanager.net
srbtest4.cloudapp.net
switzerlandnorth-a.ambackend.trafficmanager.net
remoterendering.pmetest.mixedreality.azure.com
netmontest.cloudapp.net
dgrepv2-frontend-ppe.trafficmanager.net
awasappe-ase.cloudapp.net
msggw.services.skypeforbusiness.com
azdevscholarshiptm.trafficmanager.net
fyffest.com
germanywestcentral-a.ambackend.trafficmanager.net
centralus-a.ambackend.trafficmanager.net
*.falconprod-sf.trafficmanager.net
vscode-update.trafficmanager.net
threatintel-stg.trafficmanager.net
ame.ks.immersivereader.api.cognitive.trafficmanager.net
southafricanorth-a.ambackend.trafficmanager.net
australiaeast-a.ambackend.trafficmanager.net
netgraph.osdinfra.net
presence.teams.microsoft.com
CBZ07PrdApp01.prod.idns.azure.net
deinsights.trafficmanager.net
epg-empower.trafficmanager.net
luis-australia-southeast-textanalytics-1.trafficmanager.net
preview.int2.microsoftatlanta-int.com
flightservice.trafficmanager.net
edu-datasenseeds-ppe-westus2-https.cloudapp.azure.com
southcentralus-a.ambackend-int.trafficmanager.net
msaaslocale.support.microsoft.com
eastasia-a.ambackend.trafficmanager.net
govtrafficprod.trafficmanager.net
03-weu.emea.prd.api.mediapaas.teams.microsoft.com
MA1PrdApp03.prod.idns.azure.net
enrollment.pi.dps.microsoft.com
aikcm-prod-dewc01.cloudapp.net
DAS-SeverSSL-201703.opinsights.azure.com
beta-rma.trafficmanager.net
oikcm-prod-eus2perf.cloudapp.net
graphstoreapi-eus.trafficmanager.net
gogomall.trafficmanager.net
dsreporting.corp.microsoft.com
SCA-SSL201712EUS.azure.com
khalid.asia.aegpresents.com
edssfdev.trafficmanager.net
os-oi-das.LAControlPlane.trafficmanager.net
*.ariaapps.dev.trafficmanager.net
prd.audience.teams.trafficmanager.net
noamdf.bvd.services.skypeforbusiness.com
prod-mwaas-services-partner-ui.trafficmanager.net
DUB07PrdApp01.prod.idns.azure.net
saspo10030serim.trafficmanager.net
an-ocp-func-imitationrequest-tm-acc.trafficmanager.net
CBN07PrdApp01.prod.idns.azure.net
www.startinglinerock.com
hotsara.trafficmanager.net
adminv2.ea.azure.com
CQ1PrdApp02.prod.idns.azure.net
eastus-a.ambackend-int.trafficmanager.net
lsascheduler-prod-noe.cloudapp.net
prd.audience.teams.trafficmanager.net
gdcomessengertest.trafficmanager.net
mbprod-media.trafficmanager.net
CyberDataPrefetcher-PRD.trafficmanager.net
001-jpwe.apac.prd.api.cos.mediapaas.infra.teams.microsoft.com
dgrepv2-frontend-ppe.trafficmanager.net
mscm.microsoft.com
02-eus.noam.ucap.ivr.mediapaas.teams.microsoft.com
2019.fireflyfestival.com
aedservice.cloudapp.net
frontend2.ma.prod.idns.azure.net
*.search.ppe.us.trafficmanager.net
eastasia-b.ambackend.trafficmanager.net
*.westus2.cloudapp.azure.com
binggallery.trafficmanager.net
dog.audience.teams.trafficmanager.net
geneva.global.dcat.trafficmanager.net
mrp-int7.trafficmanager.net
df.mupublishing.redmond.corp.microsoft.com
test.iotmodels.trafficmanager.net
opportunity-int.pi.trafficmanager.net
OMS-ServerSSL201812cq.azure.com
boweryevents.com
apac.bvd.services.skypeforbusiness.com
emailinterchange-test.trafficmanager.net
acs-norwayeast.trafficmanager.net
aeg-ss13-prod.trafficmanager.net
live.applicationinsights.azure.com
edu-bootstrap-ppe.trafficmanager.net
ti.securitycenter.windows.com
*.azurequota-prod.trafficmanager.net
e2e.bvd.services.skypeforbusiness.net
eastus2euap-a.ambackend.trafficmanager.net
jackson-tm.trafficmanager.net
frontend2.os1.prod.idns.azure.net
wing.trafficmanager.net
oikcm-perf-prod-wus299.cloudapp.net
prd.audience.teams.trafficmanager.net

Certificate

The complete raw certificate details for aeg-ms20-prod.trafficmanager.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343550977941083299208310852087148737263222
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-26 16:33:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-24 16:33:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aeg-ms20-prod.trafficmanager.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 726421106998159727779629026886452618519053127197377666453507111494878771238430157285352575846862039342081493160104724602614634154089259493794500897795971361579813527228587140592652293227361624668795850024941799672974108696821879852003922163173326928047094279131334733653522203816760881835527245866500084280039170809536234484688181857992580531401117704800684310965508673568482530528495696262055745728717526396995471976506377026200444715436648568264414175261215467686147803485018014814636553661394910678057441593037511930500840539317512041039931214965051212601763381381828714751866192918364303869436432867741143172430934980203532989563296488393192304041389451925769268785743309533029090411321633955508666968387086149634718033622572224188783010653111258316340863261486380785268848338191176356483524525729751454865019175099338668579053079831154421414241258928207696375910405818236156739804120901594369120883663246254214733474752575412682510156449029670601673570473737656570750568001542577254651720564921984885154798124096620575834446937365773682504005469565359015589652557534934423616446102435033104743148508984168561339000119198360498864022803956444020410272442838822313229444573714370393414241632194265145431597542325772344936670607041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54d8456a4a9a3c4d67d0585bdd5dde76a0b4ce13
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (389 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeg-ms20-prod.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinlawrence.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.goldenvoice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.madisonhousepresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.wintercircleproductions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nickcannonwildnoutlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optin106.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendors.stagecoachfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websterhall.preferences.aegpresents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.desusandmerodonyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickcannonwildnoutlive.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ea8c69754000004030047304502206107e65397e14d781cea4377a111733c1c640edea2ce5f36c948cf96888b9078022100d2446b340b00287969b42c8be89c2880ad66a8285d8e0fdf92cf7a04420cf81d007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ea8c697490000040300483046022100ce3d9022e3e8456c1f4a18b2a42f480af01e7e6319006172e677c3915c6432030221009d401493bed5b405a4767333296ed0c5e6feecab3c103f58b544cf7222f066e2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0021496bb5841224cde027905eb9debada6510ae8ca8c832adae74f10c3d4441cca0403b726565ad5bbf3353775ad4bd6edef3c2bd37b49f2486d5ef3d3570d3ce4b9ba1f3e2a427457622bf9bab12bbffc982046b23838bd921333faca9cd3b8786d29811bff54ab73729d582bda35b6cc46315171c1a084c92d6ec56c5d581a85ee146387be4ba1c9a11469a45c537bde049b0ff17b16efd940bd349217df117af299b7e6695f23d02ed4d8ad23a9ab35de2a341dbd7f3f8bfa716b1e00ff597b64d80cf6ad4e3823fb5ef0187c534b2720d2055d73f7e81bd06f97b58c555b6d4e8131368cf79fa566bae53ab2356d113b3d750692db97cf99dea3ea7f75801