lolaaupaysdesmerveilles.ch
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:56:36:a2:44:9e:0d:71:c8:af:73:61:b9:98:5f:c3:d1:5a was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=lolaaupaysdesmerveilles.ch
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:56:36:a2:44:9e:0d:71:c8:af:73:61:b9:98:5f:c3:d1:5aSerial Number (int): 290673762206070979483956981292853130154330
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: af:c4:32:59:8b:51:03:ef:98:9e:fe:c2:d0:a5:9c:ad:e7:d7:df:5a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 51:c4:c5:7e:61:67:8f:7f:a6:98:d6:07:50:7a:cf:a2:b1:6f:c1:8b
Fingerprint (sha256): 09:7e:bd:c2:3b:cb:43:16:d1:20:42:3b:01:43:ab:67:45:1a:1e:6f:1b:69:03:75:19:34:86:45:a6:fc:66:e2
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate lolaaupaysdesmerveilles.ch
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lolaaupaysdesmerveilles.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.com
www.lolaaupaysdesmerveilles.ch
www.lolaaupaysdesmerveilles.com
lolaaupaysdesmerveilles.com
www.lolaaupaysdesmerveilles.ch
www.lolaaupaysdesmerveilles.com
Other certificates including the domain name lolaaupaysdesmerveilles.ch
(limited to 100 certificates)
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
lolaaupaysdesmerveilles.ch
Certificate
The complete raw certificate details for lolaaupaysdesmerveilles.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISA1Y2okSeDXHIr3NhuZhfw9FaMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA1MjQwMTMxMDBaFw0x NzA4MjIwMTMxMDBaMCUxIzAhBgNVBAMTGmxvbGFhdXBheXNkZXNtZXJ2ZWlsbGVz LmNoMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBzim+VaDR4mB1xZ GR4XT2zy31j4wPI5rkuniGbctkdJZRjJraqF9gEqw2dMM728fDNgp7RZ5NgtCxRQ qLFrc3cnpBlLTAu58K5MfTGPyI2Nsd44D1+ZlcM1sew4aZIqX1wX3NtxJCb5JEAy CefatGwZ/tMdej+JaFYUtgw+GzDhbmMZ0Viw7cDQKNwzUANuzwtFbQ2NeY7gDm1g rU3bgSAvg5cLAMIIGA8ljycE+VDjunszlPCEvhXeia8j8mjln+jUP2vRriTaIjPw 1g6+AJP9Ww1AcLEV2Jod3dMk3tScB7FT9Z5hNTVxPf9VVStNbnrEGUDzeDxcHti9 ifa4PwIDAQABo4ICejCCAnYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSvxDJZi1ED 75ie/sLQpZyt59ffWjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBw BggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3NwLmludC14My5s ZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzCBgwYDVR0RBHwweoIabG9sYWF1cGF5c2Rlc21lcnZl aWxsZXMuY2iCG2xvbGFhdXBheXNkZXNtZXJ2ZWlsbGVzLmNvbYIed3d3LmxvbGFh dXBheXNkZXNtZXJ2ZWlsbGVzLmNogh93d3cubG9sYWF1cGF5c2Rlc21lcnZlaWxs ZXMuY29tMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB 1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsG AQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQg dXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3 aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRz ZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAHogbujX qGpN7b2J3uVvwvgRxEzkWVWW4N34xxdHFkLb3wpYQQeEXXV/qKpbWDuLKUumgOge 2fqloTzjcLCxM/j6dtg+0rO0VdxFfEtZ90gVM7q0RXY8GexygVsYAX+a1KwmeOEC Vm6cpsLav108Y4bg4ZMHKxfx6VBkSHim5JM0xgmRmA4dnfZO1Bc+jweLKlxoRNFp k7q1Hl5u//k/YBsDsVrTX301Yc+RbJrVB1XxvnlxqiC8pvIdBc6twSjmwn/itKFu OCqxW6VVlOUavaE6tUEgawtEK9ck9BW0CstJIFQV2NLVG8hbBDoX7YFNu46fAt2d dG7i79BhQ/Ty/XU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBzim+VaDR4mB1xZGR4X T2zy31j4wPI5rkuniGbctkdJZRjJraqF9gEqw2dMM728fDNgp7RZ5NgtCxRQqLFr c3cnpBlLTAu58K5MfTGPyI2Nsd44D1+ZlcM1sew4aZIqX1wX3NtxJCb5JEAyCefa tGwZ/tMdej+JaFYUtgw+GzDhbmMZ0Viw7cDQKNwzUANuzwtFbQ2NeY7gDm1grU3b gSAvg5cLAMIIGA8ljycE+VDjunszlPCEvhXeia8j8mjln+jUP2vRriTaIjPw1g6+ AJP9Ww1AcLEV2Jod3dMk3tScB7FT9Z5hNTVxPf9VVStNbnrEGUDzeDxcHti9ifa4 PwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 290673762206070979483956981292853130154330 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-24 01:31:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-22 01:31:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lolaaupaysdesmerveilles.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19707419393401054615686678719060878987703365652228026063718464260527302087368735604672763643452276886529904844069925136008427569831643242775764492461069724472682679523158484166463072830209201116246312420883040729112927145863810155071884846164228316444770548541507724779573614835429334345014992627990507227735492966653370195351502093942520800419097306878454963691967115796340144885092589927966632386277858874662263125307768866147833624022648424285740188896117913144570438317544432523635984999536607655995353126826288056888810092641028980851210171831820841900764750826839445411477679235747189408897689573624632241993791 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) afc432598b5103ef989efec2d0a59cade7d7df5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lolaaupaysdesmerveilles.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lolaaupaysdesmerveilles.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lolaaupaysdesmerveilles.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lolaaupaysdesmerveilles.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007a206ee8d7a86a4dedbd89dee56fc2f811c44ce4595596e0ddf8c717471642dbdf0a584107845d757fa8aa5b583b8b294ba680e81ed9faa5a13ce370b0b133f8fa76d83ed2b3b455dc457c4b59f7481533bab445763c19ec72815b18017f9ad4ac2678e102566e9ca6c2dabf5d3c6386e0e193072b17f1e950644878a6e49334c60991980e1d9df64ed4173e8f078b2a5c6844d16993bab51e5e6efff93f601b03b15ad35f7d3561cf916c9ad50755f1be7971aa20bca6f21d05ceadc128e6c27fe2b4a16e382ab15ba55594e51abda13ab541206b0b442bd724f415b40acb49205415d8d2d51bc85b043a17ed814dbb8e9f02dd9d746ee2efd06143f4f2fd75