*.qiigo.com

- Qiigo LLC -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 03:fa:2e:62:73:d9:55:50:09:77:72:c6:ec:16:21:7a was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Qiigo LLC

Organization: Qiigo LLC
State / Province: Georgia
Locality: Roswell
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fa:2e:62:73:d9:55:50:09:77:72:c6:ec:16:21:7a
Serial Number (int): 5286698993043664810472398322140586362
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 39:4f:ba:99:6c:58:37:18:bf:ef:c5:97:45:03:aa:78:b6:fc:04:25
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 37:70:70:9d:6b:29:4c:fb:8d:b8:8c:10:61:c1:b3:77:df:55:62:73
Fingerprint (sha256): 07:3e:a4:0e:bf:cb:74:44:f1:e8:7c:75:df:a2:d5:3a:ab:cf:06:60:f6:d8:9c:d5:2b:ed:73:a2:8b:0b:aa:ec

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate *.qiigo.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.qiigo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.qiigo.com
qiigo.com

Other certificates including the domain name qiigo.com

(limited to 100 certificates)
seo.qiigo.com
connect.innerdigital.com
5723348596162560-fe3.pantheonsite.io
social.mgi.vn
social.mgi.vn
myppcreports.com
myppcreports.com
connect.innerdigital.com
connect.calcocg.com
connect.hazeldeene.com
cloudinary2.map.fastly.net
connect.hazeldeene.com
connect.ccvgroup.vn
social.mgi.vn
myppcreports.com
connect.calcocg.com
ssl390364.cloudflaressl.com
qiigo.com
sni.cloudflaressl.com
connect.calcocg.com
cloudinary2.map.fastly.net
connect.innerdigital.com
myppcreports.com
ssl390362.cloudflaressl.com
ger-lantolan.embratel.com.br
cloudinary2.map.fastly.net
qiigo.com
connect.calcocg.com
myppcreports.com
connect.calcocg.com
*.qiigo.com
cloudinary2.map.fastly.net
qiigo.com
myppcreports.com
s4-san.cloudinary.com
ger-lantolan.embratel.com.br
connect.calcocg.com
ger-lantolan.embratel.com.br
cloudinary2.map.fastly.net
ssl390364.cloudflaressl.com
qiigo.com
ger-lantolan.embratel.com.br
5723348596162560-fe3.pantheonsite.io
social.mgi.vn
cloudinary2.map.fastly.net
ssl390364.cloudflaressl.com
support.aisvn.com
cloudinary2.map.fastly.net
cloudinary2.map.fastly.net
myppcreports.com
connect.stella-group.com
social.mgi.vn
ssl279347.cloudflaressl.com
s4-san.cloudinary.com
intranet.realmark.es
myppcreports.com
cloudinary2.map.fastly.net
seo.qiigo.com
cloudinary2.map.fastly.net
ger-lantolan.embratel.com.br
ssl279347.cloudflaressl.com
connect.calcocg.com
ssl279347.cloudflaressl.com
social.mgi.vn
myppcreports.com
connect.calcocg.com
ssl390364.cloudflaressl.com
cloudinary2.map.fastly.net
5723348596162560-fe3.pantheonsite.io
ger-lantolan.embratel.com.br
s4-san.cloudinary.com
s4-san.cloudinary.com
5723348596162560-fe3.pantheonsite.io
track.qiigo.com
cloudinary2.map.fastly.net
myppcreports.com
s4-cloudinary-pin.map.fastly.net
s4-cloudinary-pin.map.fastly.net
ssl390362.cloudflaressl.com
track.qiigo.com
5723348596162560-fe3.pantheonsite.io
ssl279347.cloudflaressl.com
ssl279347.cloudflaressl.com
social.qiigo.com
social.mgi.vn
cloudinary2.map.fastly.net
connect.calcocg.com
myppcreports.com
social.mgi.vn
ssl390364.cloudflaressl.com
myppcreports.com
connect.calcocg.com
cloudinary2.map.fastly.net
cloudinary2.map.fastly.net
s4-san.cloudinary.com
myppcreports.com
connect.innerdigital.com
cloudinary2.map.fastly.net
cloudinary2.map.fastly.net
connect.calcocg.com

Certificate

The complete raw certificate details for *.qiigo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUaYOfTRY7NJFs3b/i2D
nBFTMmoLVJNbAwvXSvCWiTdOwt8Dtj/8OLk/KW7QuCBrbOIwZtAI2LO7+/z3px4j
kqgohF924CONOMiuhBCKXTkKr0tVqERRwacLoJVSDq/PAuxrsEzoDi7pGunYlrvg
HiFTMwI1Ld2it4jpzE5e5oYy00istyBKuKqHnerL5emv7uzSLxACzPp98k9XzwBM
pja7EW70PRUyyFePiw/59S/wQFuWVTe+I4EsHWhfkJLYB/5+m5zYh5Eo1oQiaigj
NKCMo5aROa1abSwDgYCVmtndhx4oH/PshJTkC8UhBi3v0dlAZZMke6jRTwtVBt6A
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5286698993043664810472398322140586362
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Roswell'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Qiigo LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.qiigo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20359178611172907424486147581831835400329927183003760520253423672980398050732457773422275991052578201452634030639366706188542734290942931415135403352741404307380554783482936759151273532018042776411394686793561595664090895870465632306129122988867268199066612868811981031732433646376811079206562107666204645819684646570966798647756632703085999319846540904734478247687864885481245756926833966066632489480176040524883147489276564846304551602155993934107022659294607213049820877956793680655690048378169390268222165059862940673048444004587102711999146528383823412474649305023860433156133265995728099645960762156024030199997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							394fba996c583718bfefc5974503aa78b6fc0425
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qiigo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000166d506a1330000040300483046022100f7e222d633f895b466f751691ece7811bc8bcb826c9ec68e9a78adc171cd0dd2022100c0ac542efe3ee0b7ce121415fd0f22b17ddca532187eb28afc05bbbee92cb8c40074008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000166d506a1d50000040300453043021f42df3c14f1142af66bb965b96e28b421fc9b25911da9d49ddf661622162f2102202f928b1392a40418ec54ec5afd926a023b92806760a176ed9e345ca51023ac96
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00264b9bb789fbb78b85aefc0e8444ac7f9f6046189cca173ef2854083e1c0a825de43911662252d7f63577e17bec93e5636ddf95153765000de2e4653752ceea92747241545a3ad80f6629ff47da18c98a449f39869108a5856a8984035495daec489ac60be61eae2b4ab7c60649aed2c3d2b4feeec989efc48243a8f0e836314ddc0a523b3662d8557d75cd67fb245153f21e81e21b4b3da5a47b448fdacdf9de7142f1af2ceaf786ed09e2e2070c6bbb9d944c87aec2d35bcea8bb6861c2a2a1ba5f13e59c3771de4ee63e4fddb97dd16795adfd6b0be8d8be082b4a1986412f6704178d10e4e32923afe602617fabd733f50c4844a3016cca2743d080b3df3