temps-activites.inrae.fr

- INRAE -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 28:8a:2a:c6:66:4c:2f:4b:40:b2:59:d0:62:e7:a1:73 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

INRAE

Organization: INRAE
State / Province: Paris
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 28:8a:2a:c6:66:4c:2f:4b:40:b2:59:d0:62:e7:a1:73
Serial Number (int): 53886524377913545026846436755478389107
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: e6:00:3d:fc:8a:33:b8:49:80:53:89:f5:32:ca:d3:1f:e0:ee:2f:e6
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): c0:fe:34:65:7f:4c:a2:cf:da:ae:cf:8c:43:d2:27:7d:c3:39:f7:aa
Fingerprint (sha256): 06:1f:2b:1b:86:38:0d:4d:b7:79:e6:41:4b:91:c8:11:ab:5b:2c:9e:5e:e4:56:35:c1:4d:fc:0f:9f:4c:25:a9

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate temps-activites.inrae.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for temps-activites.inrae.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

temps-activites.inrae.fr
temps-activites.inra.fr

Other certificates including the domain name inrae.fr

(limited to 100 certificates)
org.hub.inrae.fr
colloque.inra.fr
*.montpellier.inra.fr
plateforme-alimentation.sae2.inra.fr
lix1.toulouse.inra.fr
vocabulaires.test.irstea.fr
vmi-dev.97.jouy.inra.fr
entretiens-evaluations-pre.inra.fr
ddi.dsi.inra.fr
gmd.irstea.fr
*.opens3r-tls-pprod.stockage.inrae.fr
great.colmar.inrae.fr
gestion.rpcas.inra.fr
xtms.micalis.inrae.fr
vmi-prod-312.dctlse.inra.fr
trs-gateway01.tours.inra.fr
energie-step-diagnostic.irstea.fr
bureau-distant.inra.fr
cas.inra.fr
w3.paca.inra.fr
ldap-preproduction-ndeite.inrae.fr
vm-metexplore-dev.toulouse.inra.fr
gitlab.irstea.fr
accesdistant.irstea.fr
vmi-dev-88.jouy.inra.fr
colloque.inra.fr
*.montpellier.inrae.fr
portail-invite.inra.fr
agirh.test.irstea.fr
sgadmin-elise.irstea.fr
restitutions-preproduction.intranet.inra.fr
team.forgemia.inra.fr
www.persyst.inra.fr
idp.test.irstea.fr
partage-fichiers.inra.fr
*.irstea.fr
pmad-preproduction.inra.fr
irsteadoc.dev.irstea.fr
temps-activites.inrae.fr
atcha.toulouse.inra.fr
*.umrh.clermont.inrae.fr
temps-activites.inra.fr
supervision.dcidf.inra.fr
evaluation-avis-cd-preproduction.intranet.inra.fr
*.s3-idf.stockage.inra.fr
phenoscope.versailles.inra.fr
org.hub.inrae.fr
heart.irstea.fr
*.montpellier.inra.fr
pshsrv6.paca.inrae.fr
node-test.dctlse.rpcas.inra.fr
uefp.pierroton.inra.fr
gedeop.cati.inrae.fr
logs.cirrus.cloud.inrae.fr
agirh.irstea.fr
*.bordeaux.inra.fr
enquetes-preproduction.intranet.inra.fr
piwik.irstea.fr
portail-eduspot.inra.fr
ldap.irstea.fr
ng6.toulouse.inra.fr
radius.dcidf.inra.fr
sturwild.irstea.fr
url.inrae.fr
agirh.dev.irstea.fr
css-evaluation-preproduction.intranet.inra.fr
acces-rds.inra.fr
lix1.toulouse.inra.fr
analyses.migale.inra.fr
data-preproduction-v3.inra.fr
acces.intranet.inra.fr
gmao.intranet.inra.fr
biofora-nas.orleans.inra.fr
consultation-structures-integration.jouy.inra.fr
nextcloud-pprod.stockage.inra.fr
orediapfc.inra.fr
resa.irstea.fr
wiki.irstea.fr
sygade.inrae.fr
*.sk8.inrae.fr
*.s3-tls.stockage.inra.fr
agirh.irstea.fr
*.hub.inrae.fr
plastic-apps.transform.inrae.fr
vm-chemflow.toulouse.inra.fr
bdoh.irstea.fr
partage-fichiers-preproduction.extranet.inra.fr
deas.irstea.fr
*.rosetta.irstea.fr
text-mining.inra.fr
aff.roazhon.inra.fr
xylofront.pierroton.inra.fr
regulweb-preproduction.intranet.inra.fr
*.sgbd.inra.fr
supervision.clermont.inra.fr
dcim.dcidf.inra.fr
mediatheque.inrae.fr
colloque-mdv-preproduction.inra.fr
wiki.dijon.inra.fr
base-des-conventions.irstea.fr

Certificate

The complete raw certificate details for temps-activites.inrae.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 53886524377913545026846436755478389107
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'INRAE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'temps-activites.inrae.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744477178064433253704565245849056880442912038558344495494864288730996030022081898090317412581394790787757277421061441459646969399587678141926258272895060251034651779619280388111884844393392760244808958805789165490562761875159893146156234504185475900160349689019276471330027318099140194660796847897936396832542282589653480244225096535818528226324166425149088778558511218881673487489950220795748996131642659244955108496190666006680209975361132722876777928613520178596752961751433965395746623434400813578267243935432817127170999197514543820181258442935968134090387917012801087821829272008339743787109630127492187179200279675258457788145125765113621436067851073244150540672679815735571627454137319026126258184528989175201816230543333061991002530811835604671057609775180114532761158112605842091775149136538915006066904233810113388223656202214583337414402571560366987335486261019882415804318225095531815946314901750340903483570399169177548960394214672401094566395832968630452738781876752578815830488328952885235646814587857569637295524844450348766178798956689395278785917642587183428517716797775792911136934941101234365337835670671954139100088991189269956182411078423094316751331272626224001640446682259527698168375034222069119703809865031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6003dfc8a33b849805389f532cad31fe0ee2fe6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temps-activites.inrae.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temps-activites.inra.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0077be7e73204620b50c0a3eb41843d96f35febfd1f1e1caedfc44014690ace3fcefcc521e9c87f084204a0ee4fd0b39350216fb7941a708f7803e938261ee98d89cd45117d9becdb15f3c3d07fb999881e8a811011b8d6fffe42b1aa694e75983b9bdcfe1f71d1a46d68a11bbf883a2b69f2e3b5ef06b77c2452e5fd1d5bec95bd0477fa7703014eb95a40a3f5727fdfa596f1497b6dd6d26553825468ee42bab204ae0dcd032a17e773ad561fd618b6760ab6db048668e558fb52a60cc54bd7250e248f010faf5f87da27fd4edae886adf37c6d84a94442e5e6897f7cb7d64ab17a02cd378086ad6cf0a2feae7af7312e29afaae1adf0dd0c826ceff0543497c4c72f0fa584630c2ad05bb8765fc5f9014bb78ffa9ca8ee662131676a0e6d8428f7f12f1f56b6f08256c23c3fcd59572a48006cf57aad3dd4a7c03bbe465d2d2e7f835797e7b754cc8c592655104608d4a4ab54111ec47373f1df4d95b01f9646d099bf706f2bb539d7f25284555b093619b92f3811a6727c06c2bd2eeb9e56c1756a89615382a38874a40e15260c6fb8ef8c917b93583e9f2175a012a278ba2f4db456a818480ebafe7e677342186790b13db9a128b8634b3d21a2a1034deeb4b75525fe78164db522e609007e8e6a2d6e1975fd34b746ba984b7a0a1dc42a0c27a2dced2310cbdcdd19187a59a110f6d9d862aa8bd4b09eb66811803bea374