sip.rica.com.mx
- Embotelladora Las Margaritas S.A. de C.V. -
Issued by GeoTrust SSL CA
About this certificate
This digital certificate with serial number 01:7a:a5 was issued on by GeoTrust, Inc..
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
Embotelladora Las Margaritas S.A. de C.V.
Company registration number:
1ctF8dq3Ipy-v2SqoCIYmtlY3JsDeoAa
Organization: Embotelladora Las Margaritas S.A. de C.V.
Organization unit: Sistemas
Organization: Embotelladora Las Margaritas S.A. de C.V.
Organization unit: Sistemas
State / Province:
Hidalgo
Locality: Mineral de la Reforma
Country: MX
Locality: Mineral de la Reforma
Country: MX
GeoTrust, Inc.
Organization:
GeoTrust, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:7a:a5Serial Number (int): 96933
Serial Number lenght: 17 bits, 3 octets
SubjectKeyId: e4:9a:9c:31:23:30:12:46:bf:4a:45:57:e0:e8:c8:c4:fb:e1:bb:43
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a
Fingerprint (sha1): 21:56:40:79:8d:3c:54:b3:71:45:c8:23:57:09:4d:be:27:0c:81:63
Fingerprint (sha256): 08:68:c9:b7:02:62:18:c9:7b:a8:29:fe:7b:1b:a5:9a:c9:28:1f:1a:07:b4:c7:8f:ec:78:cc:f5:30:ef:a3:81
Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt
Revocation information
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crlCheck the revocation status for certificate sip.rica.com.mx
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sip.rica.com.mx
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
webconf.rica.com.mx
lyncweb.rica.com.mx
meet.rica.com.mx
dialin.rica.com.mx
av.rica.com.mx
lyncdiscover.rica.com.mx
sip.rica.com.mx
lyncweb.rica.com.mx
meet.rica.com.mx
dialin.rica.com.mx
av.rica.com.mx
lyncdiscover.rica.com.mx
sip.rica.com.mx
Other certificates including the domain name rica.com.mx
(limited to 100 certificates)
sip.rica.com.mx
gestiontalento.rica.com.mx
gestiontalento.rica.com.mx
*.rica.com.mx
mail.rica.com.mx
mail.rica.com.mx
*.rica.com.mx
www.facturas.rica.com.mx
mail.rica.com.mx
gestiontalento.rica.com.mx
www.facturas.rica.com.mx
*.rica.com.mx
rica.com.mx
*.rica.com.mx
gestiontalento.rica.com.mx
www.facturas.rica.com.mx
*.rica.com.mx
*.rica.com.mx
gestiontalento.rica.com.mx
gestiontalento.rica.com.mx
*.rica.com.mx
mail.rica.com.mx
mail.rica.com.mx
*.rica.com.mx
www.facturas.rica.com.mx
mail.rica.com.mx
gestiontalento.rica.com.mx
www.facturas.rica.com.mx
*.rica.com.mx
rica.com.mx
*.rica.com.mx
gestiontalento.rica.com.mx
www.facturas.rica.com.mx
*.rica.com.mx
*.rica.com.mx
Certificate
The complete raw certificate details for sip.rica.com.mx in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIDAXqlMA0GCSqGSIb3DQEBBQUAMEAxCzAJBgNVBAYTAlVT MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEYMBYGA1UEAxMPR2VvVHJ1c3QgU1NM IENBMB4XDTEyMDYxMjAxMTM1MVoXDTE0MDUyNzAyMDkyNlowgcsxKTAnBgNVBAUT IDFjdEY4ZHEzSXB5LXYyU3FvQ0lZbXRsWTNKc0Rlb0FhMQswCQYDVQQGEwJNWDEQ MA4GA1UECBMHSGlkYWxnbzEeMBwGA1UEBxMVTWluZXJhbCBkZSBsYSBSZWZvcm1h MTIwMAYDVQQKEylFbWJvdGVsbGFkb3JhIExhcyBNYXJnYXJpdGFzIFMuQS4gZGUg Qy5WLjERMA8GA1UECxMIU2lzdGVtYXMxGDAWBgNVBAMTD3NpcC5yaWNhLmNvbS5t eDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK91nvZbYNlEVY2oGMte Rwwzm1qL0OMRnCm5Y5djsiJZQS78de3vQ/LDMEQkC1KK1Dov2WIFFq+RoYDwIuhC iRsLBTBmfX5rullD+p7bGMsF32h9g6TOetACUvDamK4Lq9+fj2KKe+XQwBp0NS3T B3jcj0iOlbF55x86hXEh0tYTYN4Ao6HI2R9SrRv++d5Nkb14DDUyYKpguuyTOgwG C4zJeDUR6s9SuZIcvmoBBB72X6/4ynloY8DBwI+wen43OH6QQjwv/5DTdCPyEkX1 dUCDg9M0//2vUf/NA0LhB6jPdrfUhc/tsdDanFrvfZ9VTD+GzMKb7mu2w08X33Rh WYsCAwEAAaOCAZ4wggGaMB8GA1UdIwQYMBaAFEJ5VBthzVUrPmPVPEhX9Z/7Rc5K MA4GA1UdDwEB/wQEAwIEsDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw gZYGA1UdEQSBjjCBi4ITd2ViY29uZi5yaWNhLmNvbS5teIITbHluY3dlYi5yaWNh LmNvbS5teIIQbWVldC5yaWNhLmNvbS5teIISZGlhbGluLnJpY2EuY29tLm14gg5h di5yaWNhLmNvbS5teIIYbHluY2Rpc2NvdmVyLnJpY2EuY29tLm14gg9zaXAucmlj YS5jb20ubXgwPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDovL2d0c3NsLWNybC5nZW90 cnVzdC5jb20vY3Jscy9ndHNzbC5jcmwwHQYDVR0OBBYEFOSanDEjMBJGv0pFV+Do yMT74btDMAwGA1UdEwEB/wQCMAAwQwYIKwYBBQUHAQEENzA1MDMGCCsGAQUFBzAC hidodHRwOi8vZ3Rzc2wtYWlhLmdlb3RydXN0LmNvbS9ndHNzbC5jcnQwDQYJKoZI hvcNAQEFBQADggEBAASXzH7J7G7LjU1zYCI3eNEpAzltxYtl2qEWupJp2FcfK78L MnuUaUVhVcLpn5JRg4deA6Qlt1JQlvsf9D7xj7Ok3fwEd6tB74I1KCpSTWfE4zcC 8YlmDkxw9PjOppAOviYMVDe9fUvrob8R4FofEF26pc37NIhzH3m+ox+T5grsgrcu KLUXYAA8+gTUYAO7BdM6pQuxgQDQ4TfRiYBjJOLPiOWDckuK9n07cvHjf6sTVbgE HlUpiD96kuC3/61k+DuyqyCKHglwxS2cmVMq72arBjGCz162ODw568szXgtv+6rz 3VZATCpBrGtKO8p0zjck+VkHNa2E06Wz9rm68yc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3We9ltg2URVjagYy15H DDObWovQ4xGcKbljl2OyIllBLvx17e9D8sMwRCQLUorUOi/ZYgUWr5GhgPAi6EKJ GwsFMGZ9fmu6WUP6ntsYywXfaH2DpM560AJS8NqYrgur35+PYop75dDAGnQ1LdMH eNyPSI6VsXnnHzqFcSHS1hNg3gCjocjZH1KtG/753k2RvXgMNTJgqmC67JM6DAYL jMl4NRHqz1K5khy+agEEHvZfr/jKeWhjwMHAj7B6fjc4fpBCPC//kNN0I/ISRfV1 QIOD0zT//a9R/80DQuEHqM92t9SFz+2x0NqcWu99n1VMP4bMwpvua7bDTxffdGFZ iwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 96933 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-06-12 01:13:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-27 02:09:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1ctF8dq3Ipy-v2SqoCIYmtlY3JsDeoAa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MX' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hidalgo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mineral de la Reforma' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Embotelladora Las Margaritas S.A. de C.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sistemas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sip.rica.com.mx' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22149704419561755852228411458949211046431525539337871044512810258360529369927160437698188017407111682783305922882117050569655335089679891982289394844437107019308606047282158412356754696970548874946386588732010433981130048393228731162463564271562839558229952741587279796428224015645287379243232650209361776921748140467155005359766040819478532212714274832947432648465722813192781216702866496457872957198002984006843566476306462546726958485906492267242466086920431357352586112150333859186824554707054726542950680422684777267953988711850944425451569492352089843399997469207851500951490492524578814685877423098712553511307 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (142 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.rica.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncweb.rica.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.rica.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.rica.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'av.rica.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.rica.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.rica.com.mx' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e49a9c3123301246bf4a4557e0e8c8c4fbe1bb43 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 000497cc7ec9ec6ecb8d4d7360223778d12903396dc58b65daa116ba9269d8571f2bbf0b327b9469456155c2e99f925183875e03a425b7525096fb1ff43ef18fb3a4ddfc0477ab41ef8235282a524d67c4e33702f189660e4c70f4f8cea6900ebe260c5437bd7d4beba1bf11e05a1f105dbaa5cdfb3488731f79bea31f93e60aec82b72e28b51760003cfa04d46003bb05d33aa50bb18100d0e137d189806324e2cf88e583724b8af67d3b72f1e37fab1355b8041e5529883f7a92e0b7ffad64f83bb2ab208a1e0970c52d9c99532aef66ab063182cf5eb6383c39ebcb335e0b6ffbaaf3dd56404c2a41ac6b4a3bca74ce3724f9590735ad84d3a5b3f6b9baf327