ticketmaster4.map.fastly.net

- Fastly, Inc. -

Issued by GlobalSign CloudSSL CA - SHA256 - G3

About this certificate

This digital certificate with serial number 78:eb:f0:b2:1b:4b:e3:f9:24:94:73:56 was issued on by GlobalSign nv-sa.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Fastly, Inc.

Organization: Fastly, Inc.
State / Province: California
Locality: San Francisco
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 78:eb:f0:b2:1b:4b:e3:f9:24:94:73:56
Serial Number (int): 37423435399614096259658576726
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: fc:18:3e:27:5b:d1:a1:2e:95:97:58:eb:24:46:1a:1f:f7:2a:8b:b4
AuthorityKeyId: a9:2b:87:e1:ce:24:47:3b:1b:bf:cf:85:37:02:55:9d:0d:94:58:e6

Fingerprint (sha1): 1f:91:d7:31:b6:e2:1f:9f:cf:b1:8d:78:bb:76:70:17:33:3f:57:95
Fingerprint (sha256): 04:73:63:e3:35:e1:18:f5:6c:74:21:b5:6b:60:8f:3e:4f:41:fc:03:3f:23:8a:a6:46:8a:03:d9:7f:1c:2d:2d

Issuing Certificate URL: http://secure.globalsign.com/cacert/cloudsslsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/cloudsslsha2g3

Check the revocation status for certificate ticketmaster4.map.fastly.net

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ticketmaster4.map.fastly.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ticketmaster4.map.fastly.net
*.ticketmaster.ca
*.tmol.co
buy.taylorswifttix.com
mw.ticketmaster.com
ticketmaster.ca
tmol.co
tst.ticketmaster.com

Other certificates including the domain name ticketmaster4.map.fastly.net

(limited to 100 certificates)
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net

Certificate

The complete raw certificate details for ticketmaster4.map.fastly.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtaydVdiixr3JQTi+fmT
UOZmdmNZN/FPikXazZBV6BR7zATftq2upzGgsAedoq/0kpwJLEzXk2q2wg1aV1em
GBPp0QJxShtpAMGGMH0YP9+9HXF3vYVVzjZpcLbGP1/+kguucVpXG1liIP+/J7Bp
y70b+da3xUXQtXNusbD1qjXXC01W6oonv4ZtJLBcxr0jHY+4GigjUXO9c+1bgB5x
NN04GiFdHN5J1N7AYxAyyZ3NSKdtGHPAbCtrfVXxK1uWKKE4q2q8XoUszkfJELND
vzvWEqXKSb5/sWIOKflknFRZly+Dvfazeo+af5mwZ1JKD/D+ox7T4VnAojhcSaHB
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37423435399614096259658576726
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign CloudSSL CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-23 18:45:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-11 12:37:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fastly, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ticketmaster4.map.fastly.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22071336151446487693993475265931877209561741566553531683158722954798760560548083737719737691921970712623819594976589244150906840711321634179645499939303398889334014260209005113368062544344462452444739379932878368816920332513377788413135685012411834168087593371908072167958302707403241186561724433113785039077506557106097157575822829062563641825005634458175110861172678011519934155214094393569092465585283502995751293454958640476362022804396862397622938643677383195046345864972652566623552855203267926741298110428225022925889270626554811541658805438379681989985914455199431063855105062438138379245136435331448617157011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/cloudsslsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/cloudsslsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (156 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmaster4.map.fastly.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ticketmaster.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tmol.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.taylorswifttix.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mw.ticketmaster.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticketmaster.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmol.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.ticketmaster.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc183e275bd1a12e959758eb24461a1ff72a8bb4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a92b87e1ce24473b1bbfcf853702559d0d9458e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005827492d6df8c38c4df80b9ad973e0bb8ada7bebfb32c1979883686b6cefaa2c74b0c7e4c505aa87eabf1f3117f28b75178a02c448b8be55406e579910a6c375dc88de154329cd8ce30c0dad43b2d8b9f16007bc76a58d95c59f4145310874062133e205b617f524a5cb0567a9a3f9dae0c947d01345e54ed9d797db7499fc7ebb498ba550d8cec5f0fbc74e6d8b5a1bcfca8bd80cb6f9460c7bb2fd487045a10db9bb423009feff5e74d3856a53bc083186ec101e077814c09a28a937c45741badd4aa4340ad7eaee66cefd35c8ff56cf29e3887edb68a9215463ef5d0cce92958763491146e913db15c0b133286be5332643f44bd7b5ece7204769aea81b8f