engo.isp-vhost04.domservice.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a8:f1:b5:51:cd:35:ce:ed:43:63:17:a3:71:1c:23:af:c6 was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=engo.isp-vhost04.domservice.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a8:f1:b5:51:cd:35:ce:ed:43:63:17:a3:71:1c:23:af:c6
Serial Number (int): 318825580849847565406782008174639338205126
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 27:f2:f7:fe:5e:c8:1b:45:dd:6a:65:ca:95:99:65:8a:e3:e5:52:77
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 16:2e:dd:75:fc:22:0a:38:1a:aa:37:da:9d:25:06:7b:66:fa:1a:c5
Fingerprint (sha256): 0b:7d:68:ce:70:eb:6a:55:b1:86:87:7d:72:be:86:54:62:90:9a:ba:07:4f:07:b5:e3:8f:19:a7:eb:ff:f4:f7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate engo.isp-vhost04.domservice.de

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for engo.isp-vhost04.domservice.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

energiegenossenschaft-ostthueringen.de
energiegenossenschaftostthueringen.de
eng-o.de
engo.isp-vhost04.domservice.de
www.energiegenossenschaft-ostthueringen.de
www.energiegenossenschaftostthueringen.de
www.eng-o.de
www.engo.isp-vhost04.domservice.de
www.xn--energiegenossenschaft-ostthringen-iqd.de
www.xn--energiegenossenschaftostthringen-xmd.de
xn--energiegenossenschaft-ostthringen-iqd.de
xn--energiegenossenschaftostthringen-xmd.de

Other certificates including the domain name domservice.de

(limited to 100 certificates)
reichelttv.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
handballpost.de
hypos-eastgermany.isp-vhost04.domservice.de
cd-lab.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de
itns.de
aka-verlag-neu.isp-vhost04.domservice.de
bleilaus-verlag.de
job199.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
uap.isp-vhost04.domservice.de
gfn.isp-vhost04.domservice.de
hypos-piwik.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
wendt.isp-vhost04.domservice.de
tzoleipzig.de
samija.isp-vhost04.domservice.de
schwihag.isp-vhost04.domservice.de
hvs-handball.de
uap.isp-vhost04.domservice.de
laendernotar.isp-vhost04.domservice.de
hommage-leipzig.de
nobitz.isp-vhost04.domservice.de
peterbruns.de
toro-pflegegruppe.isp-vhost04.domservice.de
itns.de
hypos-eastgermany.isp-vhost04.domservice.de
concerto-magazin.de
vs-mtl.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
radierung.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
job199.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
vs-aph-grimma.isp-vhost04.domservice.de
blumenhaus-brehmer.de
gerling.isp-vhost04.domservice.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
itns.de
gym-borsdorf.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
peterbruns.de
kanzlei-kratz.isp-vhost04.domservice.de
vs-aph-schkeuditz.isp-vhost04.domservice.de
steinstrasse.isp-vhost04.domservice.de
toro-pflegegruppe.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
piwik-mittelde.isp-vhost04.domservice.de
limes.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
zappendorfer.isp-vhost04.domservice.de
tzoleipzig.de
gfn.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
mitteldeutschland.isp-vhost04.domservice.de
lehmann.isp-vhost04.domservice.de
handballpost.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
tzoleipzig.de
revierpionier.de
ytong-massivhaus.de
innovationsregion-mitteldeutschland.isp-vhost04.domservice.de
reichelttv.isp-vhost04.domservice.de
kunstglaserei.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
aka-verlag-neu.isp-vhost04.domservice.de
boehme.isp-vhost04.domservice.de
isp-vhost04.domservice.de
handballpost.de
nato-leipzig.isp-vhost04.domservice.de
blumenhaus-brehmer.de
itns.de
steinstrasse.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
tzoleipzig.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
iq-mitteldeutschland3.isp-vhost04.domservice.de
ecb.isp-vhost04.domservice.de
hvs-handball.de
engo.isp-vhost04.domservice.de
hypos-eastgermany.isp-vhost04.domservice.de
esgero.ch
hessler.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
blumenhaus-brehmer.de
cd-lab.isp-vhost04.domservice.de
cut-as.isp-vhost04.domservice.de
engo.isp-vhost04.domservice.de
lbw.isp-vhost04.domservice.de
hms-schubert.isp-vhost04.domservice.de
kamprad.isp-vhost04.domservice.de
hommage-leipzig.de
engo.isp-vhost04.domservice.de
kuecheaktiv.isp-vhost04.domservice.de
gerling.isp-vhost04.domservice.de

Certificate

The complete raw certificate details for engo.isp-vhost04.domservice.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318825580849847565406782008174639338205126
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 01:07:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-06 01:07:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'engo.isp-vhost04.domservice.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 829012961659876342359002233691547088801619878793810505817042311373457700101700527458324831469965487355200659762509249813903516720934354893189481507049878538250426287804246481520789055701746535586136191915448391446907268795586528828017202174206788554406888245031050537358464886259536500124108079342742919811726269761268477248827509417483515505662459658631709811576109208691193062869684657936715820834843300935567069949547675967095994959242922502603755910278261710680079623503851172047688611434938919089854301942917822500397181276754059222661270805407397942746447376328184633934446170610084188183324555176676846689339501307105134527221180214773216807619446174363768369994807371741954452065357732951760259338430886168904089602839611538891309342471104293126360945660812171796663235197584609220321958460373985592467883932236779867485766408606437551732006600867163461817385394453733545329200263055606080894649626771146155592207504521759695671736779298499027352365488683685458555416177686968240679980014343734573203773683335919200903251143177115206488647303647212983157380373381150315448085338628974240524506005314951824621417171745017056650840851588840317790588090946907635802090180109586719206395815534433899630895687796203327541118802799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27f2f7fe5ec81b45dd6a65ca9599658ae3e55277
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (452 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energiegenossenschaft-ostthueringen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energiegenossenschaftostthueringen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eng-o.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engo.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energiegenossenschaft-ostthueringen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energiegenossenschaftostthueringen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eng-o.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.engo.isp-vhost04.domservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--energiegenossenschaft-ostthringen-iqd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--energiegenossenschaftostthringen-xmd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--energiegenossenschaft-ostthringen-iqd.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--energiegenossenschaftostthringen-xmd.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170b7e57ca500000403004730450220652630ee84805e6037e1a48f28ab179d0fc3488cbe02272820aa4f9a3ff14de2022100db9a5e5361d49d37de8bd0b6b7432c2979519d7c78a0143af22be66b269ffb5a007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170b7e57c940000040300483046022100ab9b9aeaad93a62595f341744cd1539f4a513cef22ed4494efe9a3a4cbf8571f022100f63df83cd37d44e394a70a2ce44cc67b0d52c5ef34005ef571894aa3a2fccd06
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001749fb82ff3473653cd06abb9b75c5d200b3710393bb3df568cfa6408abda5433ca0ddc1f1063e3cb4d2a34fb8c2cc9a15d3b7cf09a21c74ec36bf731910777fd56af82cf4d235bd70fee690bffa18430a1a86d1af64a85db3b9777f71faaf35a9a7c0a2dc84abb5ac3a9cb13f326658ca362a4805abea026ae9bb5951e9bfc9c640439c2851e2e49e6a5759fd853a8363f72c70cf0074cc2708ccabbfe9cfcd77564716d2f2119cd84b69e90540fb8d53afd3efc1d701a6d993c63e4d0b807b9da4ddf3ac5036d71927c18cf4ec2226b2956e90334ae5c5879ce88d65833a58cad846b55f8e8b53791295894a57546920f387cf2abf425401a97dd8904c0567