odiodi.lt

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:84:e0:2c:10:73:dc:2d:41:44:64:c3:e4:03:33:95:39:cd was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=odiodi.lt

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:84:e0:2c:10:73:dc:2d:41:44:64:c3:e4:03:33:95:39:cd
Serial Number (int): 393664392026420394211212319375577065011661
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 62:d0:81:99:b2:7f:46:a9:ae:47:51:22:b5:38:3a:f6:fd:60:bf:ec
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 44:72:a5:35:ac:e2:5b:5f:1b:e2:54:7c:b0:dc:ee:58:1e:07:f6:21
Fingerprint (sha256): 03:fe:2b:98:1a:b0:52:b0:75:72:4a:71:ed:24:ee:27:b1:93:6f:ba:d7:a2:32:58:44:ba:91:b0:0c:72:19:df

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate odiodi.lt

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for odiodi.lt

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

odiodi.lt
www.odiodi.lt

Other certificates including the domain name odiodi.lt

(limited to 100 certificates)

Certificate

The complete raw certificate details for odiodi.lt in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgISBITgLBBz3C1BRGTD5AMzlTnNMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDQwMzI2MTdaFw0y
MDAzMDMwMzI2MTdaMBQxEjAQBgNVBAMTCW9kaW9kaS5sdDCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBANfUmCb39C5mul2CemSndzJHZwvPUMhC+1RStB2b
anGk3Xj0gJNfkuuY8x+gy5iJOCsRQvo12tfKnyc6nvzAHRIta5022SmV3fZhtpsQ
0oJd3ewUErMhkS5FO6TCukfuYcSe8ycWJtic3SzotcufYn9zKKuTcQ8kXABv2s4I
qF1COOECktqAfQWU32Df5dM8p0Aic61R5aEUWqCjWq0fiGR8OIC5tybuq2s7gBay
76SuhwPYR4xNY5QdZlbVk2NYNNn/SkdQ3uN1E3CTZBCuqP2N993P9CZe1klfnp8d
cBBxGFpM9K9Flgs0REmvq861piR7Mb35sjSkq+WNR0XKp3IPZGqxJks1A4Rp4w0t
56925Rzy60o3XBPVhQJVTBrfn0JrqXJc6Krwr5ThlNKwH8lRA0nw2CNDlpDKmWp7
cGK1hhMJmIHCIS1R6bJS5/p2/RdDmhez9RC+JGbrWRagq9RVSKMzuCHQrXlEo+Le
Nkvxn4g7AmKrYaapuE9wI05ATYBy7qTcozWRvAo72nJPxjTiwi3WZET8rzhJssBg
CLZTaqm+0PxNLl94hZ6oWw9gotBSic3bzWGWWRTm90nQBHD6zU8BKCT12+VxEKft
Zhv1o9ajxccmR71hbWnSqSTXYMmkEPVy9TvE5tNwpk0aNLBSlEcjmWE8Z/cNU9w3
WKYXAgMBAAGjggJtMIICaTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGLQgZmyf0ap
rkdRIrU4Ovb9YL/sMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIJb2Rpb2RpLmx0gg13d3cub2Rpb2Rp
Lmx0MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB
BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIE
AgSB9QSB8gDwAHYA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFu
zyilZQAABAMARzBFAiBaU53des8DDhr4zmo0iMCCqohoh9VlWihm87WFe1OJpAIh
AOL3Wkzockqf2YAFQRWyfUIGG3t8W8NUyMk1Yua8FXiBAHYAB7dcG+V9aP/xsMYd
IxXHuuZXfFeUt2ruvGE6GmnTohwAAAFuzyilmAAABAMARzBFAiAJ8WAgUDGZovGg
0GtJlCpCZ7wRv9RuZOBfXaiNpKHPUgIhAKKaisTBd9oNsZb7M18Jz+PtTflZ7AOL
AFTA8d5QRgF3MA0GCSqGSIb3DQEBCwUAA4IBAQAFTzdOaaM0YZE/XVsJuRDoZUnn
5ZpsUma3fB/hZh1N4CWc7ok0gRHOAJgR+/rhLSCx+ToclaBOYPLji6xOhIlMVQ5X
BavIedMWDRvjK18Yu96laLbD33+SMODogTatYA+efIpM+AWhZXnF78oDTR2OfVaO
Wa5E6bQ2mBNCdnCjXhD1xlM3mSgW4kYb9BI+SJQOig6x7NOqpqe8/HOuaGl0E6C6
F0nCbHnrTHLy3mZHBG21VKME93i/WAlDEt1x+ixJJKS2uWCnMMKhNs7CjURnnLTk
QZYwjfA/Fg6tyfQsgJ4L/vsy/njqRAj5DYkdcyhWTWZQ0cDTWBIiyqUFbbBv
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA19SYJvf0Lma6XYJ6ZKd3
MkdnC89QyEL7VFK0HZtqcaTdePSAk1+S65jzH6DLmIk4KxFC+jXa18qfJzqe/MAd
Ei1rnTbZKZXd9mG2mxDSgl3d7BQSsyGRLkU7pMK6R+5hxJ7zJxYm2JzdLOi1y59i
f3Moq5NxDyRcAG/azgioXUI44QKS2oB9BZTfYN/l0zynQCJzrVHloRRaoKNarR+I
ZHw4gLm3Ju6razuAFrLvpK6HA9hHjE1jlB1mVtWTY1g02f9KR1De43UTcJNkEK6o
/Y333c/0Jl7WSV+enx1wEHEYWkz0r0WWCzRESa+rzrWmJHsxvfmyNKSr5Y1HRcqn
cg9karEmSzUDhGnjDS3nr3blHPLrSjdcE9WFAlVMGt+fQmupclzoqvCvlOGU0rAf
yVEDSfDYI0OWkMqZantwYrWGEwmYgcIhLVHpslLn+nb9F0OaF7P1EL4kZutZFqCr
1FVIozO4IdCteUSj4t42S/GfiDsCYqthpqm4T3AjTkBNgHLupNyjNZG8Cjvack/G
NOLCLdZkRPyvOEmywGAItlNqqb7Q/E0uX3iFnqhbD2Ci0FKJzdvNYZZZFOb3SdAE
cPrNTwEoJPXb5XEQp+1mG/Wj1qPFxyZHvWFtadKpJNdgyaQQ9XL1O8Tm03CmTRo0
sFKURyOZYTxn9w1T3DdYphcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 393664392026420394211212319375577065011661
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 03:26:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 03:26:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'odiodi.lt'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 880511401409076538183342299292511825137040961435100349936398846927554680571781807997738859891113133437252975423212946217180330205699789490126568027703488116904320231211366614925440347720465405013841671351885698093786512597805799377060859675227232282852318831671816904244657383887621481718483945459626537012873954715281269303848504536666474514712243477998889484595774985820326416663628179981846889393950083062476543844721557290069212196731513899102537797949717240246828138214984550509592622806702219776728320399116666823105110145287087718396200746449095479808024590212365720952241794792302580199355959006858081820293270584677882063433688411433839073042111574359128146177925318180375123897164860294018198480258663111593150286296801701915883198460520443167035104504179745687202704099015822963824645546487547548892367003748276569888570719346056523789499323565031635977022661840926187370281487825711538899686359975492710396760103258537218650872358603954379617717437566489751912322481275258766740490409563439812505278113064229836692839556516464668027973595033569699078703287130667008289271003618874828986924133643568307365800915390940076644352215870990646864464107747190937187220963880495768803356491209361119850801830637313463068896306711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62d08199b27f46a9ae475122b5383af6fd60bfec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odiodi.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odiodi.lt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ecf28a565000004030047304502205a539ddd7acf030e1af8ce6a3488c082aa886887d5655a2866f3b5857b5389a4022100e2f75a4ce8724a9fd980054115b27d42061b7b7c5bc354c8c93562e6bc15788100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ecf28a5980000040300473045022009f16020503199a2f1a0d06b49942a4267bc11bfd46e64e05f5da88da4a1cf52022100a29a8ac4c177da0db196fb335f09cfe3ed4df959ec038b0054c0f1de50460177
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00054f374e69a33461913f5d5b09b910e86549e7e59a6c5266b77c1fe1661d4de0259cee89348111ce009811fbfae12d20b1f93a1c95a04e60f2e38bac4e84894c550e5705abc879d3160d1be32b5f18bbdea568b6c3df7f9230e0e88136ad600f9e7c8a4cf805a16579c5efca034d1d8e7d568e59ae44e9b4369813427670a35e10f5c65337992816e2461bf4123e48940e8a0eb1ecd3aaa6a7bcfc73ae68697413a0ba1749c26c79eb4c72f2de6647046db554a304f778bf58094312dd71fa2c4924a4b6b960a730c2a136cec28d44679cb4e44196308df03f160eadc9f42c809e0bfefb32fe78ea4408f90d891d7328564d6650d1c0d3581222caa5056db06f