asa.mx.indorama.net

- INDORAMA VENTURES POLYMERS MEXICO S DE RL DE CV -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 01:0b:22:f6:a9:be:a4:4c:00:53:ae:85:3b:65:53:0f was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

INDORAMA VENTURES POLYMERS MEXICO S DE RL DE CV

Organization: INDORAMA VENTURES POLYMERS MEXICO S DE RL DE CV
State / Province: Querétaro
Locality: Santiago de Querétaro
Country: MX

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:0b:22:f6:a9:be:a4:4c:00:53:ae:85:3b:65:53:0f
Serial Number (int): 1387052405816740078252495429997777679
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 3a:25:6a:a4:14:c3:9d:cc:f1:d9:1b:35:fd:90:49:d6:be:05:18:66
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 6b:39:1a:7a:8c:d8:83:75:53:c5:c2:bf:22:8f:23:fd:fb:7d:fd:54
Fingerprint (sha256): 08:47:91:b6:e5:25:ca:4b:42:94:f0:02:33:ef:0e:ea:88:d9:15:7e:ca:26:f8:ba:dd:1e:5e:0d:c9:76:2f:1a

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate asa.mx.indorama.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for asa.mx.indorama.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

asa.mx.indorama.net
www.asa.mx.indorama.net

Other certificates including the domain name indorama.net

(limited to 100 certificates)
support.infinityfincorp.com
SIP.IVXP.Indorama.Net
support.infinityfincorp.com
asa.mx.indorama.net
webapp.pl.indorama.net
IVXP.Indorama.Net
hr.itsm-presales.in
mis.id.indorama.net
IVXP.Indorama.Net
*.nl.indorama.net
webmail.indorama.info
webapp.pl.indorama.net
vpn.nl.indorama.net
ASA.mx.indorama.net
mis.id.indorama.net
icm.tvsscs.com
webapp.pl.indorama.net
mail.ca.indorama.net
enterprise.duggads.co.in
*.indorama.net
enterprise.duggads.co.in
*.nl.indorama.net
mail.pl.indorama.net
leadership.elearning.indorama.net
servicedesk.maveric-systems.com
crmdmshelpdesk.royalenfield.com
*.nl.indorama.net
mis.id.indorama.net
support.infinityfincorp.com
hrsupport.ziomart.great-site.net
support.infinityfincorp.com
itdesk.rchilli.com
servicedesk.maveric-systems.com
tsportal.br.indorama.net
hr.itsm-presales.in
mis.id.indorama.net
ropfiletransfer.nl.indorama.net
hr.itsm-presales.in
webapp.pl.indorama.net
enterprise.duggads.co.in
*.indorama.net
DECPRDIS17.IVXP.Indorama.Net
it-help.mountmerugroup.com
servicedesk.maveric-systems.com
support.infinityfincorp.com
incapsula.com
gbshelpdesk.indorama.net
ASA.mx.indorama.net
webapp.pl.indorama.net
webapp.pl.indorama.net
hrsupport.ziomart.great-site.net
crmdmshelpdesk.royalenfield.com
itdesk.rchilli.com
SIP.IVXP.Indorama.Net
support.sequentialtech.com
itdesk.rchilli.com
ca.indorama.net
mail.ca.indorama.net
support.infinityfincorp.com
servicedesk.maveric-systems.com
IVXP.Indorama.Net
SIP.IVXP.Indorama.Net
ASA.mx.indorama.net
mail1.id.indorama.net
gbshelpdesk.indorama.net
support.infinityfincorp.com
mail.ca.indorama.net
crmdmshelpdesk.royalenfield.com
incapsula.com
support.infinityfincorp.com
support.infinityfincorp.com
IVXP.Indorama.Net
hrsupport.ziomart.great-site.net
crmdmshelpdesk.royalenfield.com
itdesk.rchilli.com
qcreply.indorama.net
ASA.mx.indorama.net
gbshelpdesk.indorama.net
incapsula.com
SIP.IVXP.Indorama.Net
supportcenter.mcarbon.com
mail.pl.indorama.net
gbshelpdesk.indorama.net
mail1.id.indorama.net
SIP.IVXP.Indorama.Net
mis.id.indorama.net
mail.ca.indorama.net
hr.itsm-presales.in
webapp.pl.indorama.net
support.infinityfincorp.com
*.nl.indorama.net
SIP.IVXP.Indorama.Net
IVXP.Indorama.Net
hrsupport.ziomart.great-site.net
mail.ca.indorama.net
mis.id.indorama.net

Certificate

The complete raw certificate details for asa.mx.indorama.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUUQHwo5MNP1GgwT9wH4
Iz4/BR5bQkOUOuqGHUOVT3MZVmmk6FvdzRkaS/syEowO2S0XCcF+P3rI8baAPAjB
wVjKeWURWPSoFxYvZMvWmlBbIR3LwoQ2gqxOMmHlAv1eHHr1YMg4JrI24/XR6Gu1
U/GxFINyX/6LXB9OTkkbt2P8ZH1s6X15QiurVkICIshvGNktrZHODhDgmWOgLG6k
HZEQbYUMMtdZeMi9khoz9HW5CGJ2NkPIHU8NE78M9yPFC8T96vDX2MIFaWCisiSJ
PzvRpLYie7+lOSYLgc6gfZt1THd5DXsuA6B0JoZf7FsQypQ8xYz8a9BFlZnGzz6A
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1387052405816740078252495429997777679
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MX'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Querétaro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Santiago de Querétaro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'INDORAMA VENTURES POLYMERS MEXICO S DE RL DE CV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'asa.mx.indorama.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21368329760854520268315465517452159687100747761132688867841668173419014256081672056442501705282708294471323682283350775146845322569691077442947752340765633082333933766638699357087879001102863590217034202118622652593278993130533295120676198371182527094787406324473931056303745804683132034355113035197007355354876981531755297579322232876802203706223222034467987169858538197341949112421399710601770009259662454110891458656464223213716330542030851471486763211894307611145092933758640609943476596418737497206556778286060097325031737730458838677393417265219694248828055319974370090416277974005477375421618849080448049381509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a256aa414c39dccf1d91b35fd9049d6be051866
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asa.mx.indorama.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asa.mx.indorama.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004b0a53148f327bc3747976dafa637780c9d71121711bb6c360391180577d0fd74ea034e26bc6ceaf525444506b6da5e337dd6b25f37007675b2f00d497f278479f45baa734b8b44dc4ae86d0437804490b8ea3f6fb71c1efd45b80178d857405d9ad200d393b853d50236c41c1b6b51cb28e72c290f21650e1284fa71606dc9ac8f4f0a2aa3eb053fa9a73bfcfc7bb6b36d04e5bf007b38479209def4d9b829a1b3647de8d078c8de4e483f5e7b0ce279aba41d67dbe7ec8a8225043c5f0359af59a16a5667a24ed3a19994d1d1bb1742634f1d732695e1f1e6cfcc98c807d50ea3d154c943480698f3b96ff4ec2755948e5ea75cbce47f738431b9857ba09c5