www.sannicolalastrada.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:9a:a9:84:5a:11:3a:bb:7f:17:3b:78:c4:53:40:c0:83:16 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.sannicolalastrada.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:9a:a9:84:5a:11:3a:bb:7f:17:3b:78:c4:53:40:c0:83:16Serial Number (int): 313965669042360160584258939143825249043222
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 47:7d:30:10:57:f4:dc:ff:b0:e8:17:ad:c7:b6:68:4c:04:12:d4:64
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ab:85:29:17:32:64:7f:19:13:36:ba:24:23:88:7b:0b:c7:c6:19:ef
Fingerprint (sha256): 0d:d3:76:e4:9d:ff:85:e1:4c:85:f5:41:64:6c:18:6b:9a:29:1b:9a:e2:6f:72:ce:2f:b0:84:c9:c2:63:a0:55
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.sannicolalastrada.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.sannicolalastrada.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.sannicolalastrada.org
Other certificates including the domain name sannicolalastrada.org
(limited to 100 certificates)
punu.bible
www.sannicolalastrada.org
sannicolalastrada.org
sannicolalastrada.org
www.sannicolalastrada.org
www.sannicolalastrada.org
sannicolalastrada.org
www.wheelock.boston
sannicolalastrada.org
sannicolalastrada.org
www.sannicolalastrada.org
sannicolalastrada.org
mosquitorepellant.organic
sannicolalastrada.org
insectrepellant.organic
www.sannicolalastrada.org
www.sannicolalastrada.org
sannicolalastrada.org
sannicolalastrada.org
www.sannicolalastrada.org
www.sannicolalastrada.org
sannicolalastrada.org
www.wheelock.boston
sannicolalastrada.org
sannicolalastrada.org
www.sannicolalastrada.org
sannicolalastrada.org
mosquitorepellant.organic
sannicolalastrada.org
insectrepellant.organic
www.sannicolalastrada.org
Certificate
The complete raw certificate details for www.sannicolalastrada.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgISA5qphFoROrt/Fzt4xFNAwIMWMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDMxNzUyNDRaFw0y MDA1MDMxNzUyNDRaMCQxIjAgBgNVBAMTGXd3dy5zYW5uaWNvbGFsYXN0cmFkYS5v cmcwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDPxe9/hNzDHZ+RSN8l BSn0b5zPrLKoOzQ3rfMS1L+PZh1m8E0nUVoIDVTvS/VXFsyNBVtMEGmae9tgI+4N IrujT+3elwd1CCtoaGmx1H1vmD6eAGcoTywiTvK7d1HSH1ubey3s/UIswALfEvDT lB/LpoIGha2492uvK0i0VZNWyD/G7M1BS5B9x3ZYZOxoGPPj+V/YQVLr0WXrcmid UDqs2WWds5NHQdd7uuMmWInOViX/QhiELDzt6REC6EzlrRu9ycBXgHO+yW85jAaJ plgtvybL9Bj5f5k3P/fcmj2ImtUJkHxl/l1rT9DbOWFXp39A6sTyvk/815XJOQMG FRJLimE9c8igN3rNcsOHOGbaBY1pWnZBNRlS3I+sEEcjeVmYVRGb7gBS1N1GMwCP P2HqgNXaHTFK2Vu2v0J9vbEgz1/qwDE20sXsbwhRs6A909DoAGbOY4bqT31w7Gkq GZ1/hnA871AZi3Gdv0A3owJ0TAw9ouqQfapxOBpYWpB/sjKNq8KkOVLzxji20BjA ejzaqzZVkmRUu4P6NANWaMcmDLltfo/XY8wVF5A9eyeFQWl1eD8txGiXwPIFEPz1 SnZz3HOEI7LBiCcSj3lD+PNJ5ASRQhWYX/wOAPi3LRUUOc5Ba0r9arlGVEHhPEhy L1/28HUgGFzMMKOW3I4Qfc9nawIDAQABo4ICbzCCAmswDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBRHfTAQV/Tc/7DoF63HtmhMBBLUZDAfBgNVHSMEGDAWgBSoSmpjBH3d uubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6 Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6 Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCQGA1UdEQQdMBuCGXd3dy5z YW5uaWNvbGFsYXN0cmFkYS5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v cmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwAHt1wb5X1o//Gwxh0jFce65ld8 V5S3au68YToaadOiHAAAAXAMZdHzAAAEAwBIMEYCIQDbQo5Bk89qUNPfMNrhWRmg XzB9uGTRB8LnbhKxadntdgIhANE4vzOHTbLapfaDZbEubQktLhdMrWuR9xCZS4bg XY42AHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFwDGXSSwAA BAMARzBFAiEAy8aXVj799FkrxlrF5bsN7X63I4dSJLIr3u1FKZN3HyICIG5V0AgI IuMlNJ/HwrSoz6Ek19/ViITMvLGcaBLTyCBhMA0GCSqGSIb3DQEBCwUAA4IBAQBx hvJJKN2LotVqAWqFnnzaKqG0DtI81i0dyrvnPm44CtlKFfE9O4viMyynIDid1akt bAyMA6Yp8kgZt9V67FNUtDJvBVGLU1oIKKlvPAaPmRfmPiK2/CI1qijQDcG4CvyS ia4GyvSCiOItAAca7kg1bEBcIl3riwNGr/NcAI3jfY7gQMLRkW8qYt8hgmN5Nv/H HIn2M8x9MTqRhdCk/EL4z+j+GzxliPAOoeYKSe7hKoVNs/P8RTEbPjulr0bJMwwv ok7wHFIV9Eun6AT0vNHBCsAQvPQBVRBor7upgp4VH+MUTCdD7uUCXRzBcYvKDKVz +sGmfHjp/uzXOLoYrU/5 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAz8Xvf4Tcwx2fkUjfJQUp 9G+cz6yyqDs0N63zEtS/j2YdZvBNJ1FaCA1U70v1VxbMjQVbTBBpmnvbYCPuDSK7 o0/t3pcHdQgraGhpsdR9b5g+ngBnKE8sIk7yu3dR0h9bm3st7P1CLMAC3xLw05Qf y6aCBoWtuPdrrytItFWTVsg/xuzNQUuQfcd2WGTsaBjz4/lf2EFS69Fl63JonVA6 rNllnbOTR0HXe7rjJliJzlYl/0IYhCw87ekRAuhM5a0bvcnAV4BzvslvOYwGiaZY Lb8my/QY+X+ZNz/33Jo9iJrVCZB8Zf5da0/Q2zlhV6d/QOrE8r5P/NeVyTkDBhUS S4phPXPIoDd6zXLDhzhm2gWNaVp2QTUZUtyPrBBHI3lZmFURm+4AUtTdRjMAjz9h 6oDV2h0xStlbtr9Cfb2xIM9f6sAxNtLF7G8IUbOgPdPQ6ABmzmOG6k99cOxpKhmd f4ZwPO9QGYtxnb9AN6MCdEwMPaLqkH2qcTgaWFqQf7IyjavCpDlS88Y4ttAYwHo8 2qs2VZJkVLuD+jQDVmjHJgy5bX6P12PMFReQPXsnhUFpdXg/LcRol8DyBRD89Up2 c9xzhCOywYgnEo95Q/jzSeQEkUIVmF/8DgD4ty0VFDnOQWtK/Wq5RlRB4TxIci9f 9vB1IBhczDCjltyOEH3PZ2sCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 313965669042360160584258939143825249043222 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 17:52:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 17:52:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sannicolalastrada.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 847640644539994631763378230930416911248122986723644724155469965401318173454444628896357460753032988825063214119976095193573656306951934380668797207971640708491636120233790507523087658535172969921541780299961296086130351661888555762140849273172844635718743339996409017965852767931208820556423970071146489320089899579272602409205100113718607864724948150912269064093519351637297075308921910493352977901281338667487777735343995822963903441526956211067655844833370954846875008123160309916069028205006157435426599221938849105830306436615798214094294729147170095950001109365476798848245891796345178595465146994306311781354126101984500937654597397729914619187400142113442452999889880662979718071202552981265740436028011415694628258521518851702128702655848215661256530569863744382688552156039622526206789377745502942660517065963429881848147472857396694522164470890394001427923379161951204621791047758847001698594474040284011713280814560868990160049042478594058628302472254788135296404742023816329651167333311898887314722028946542958842785053587334250157365924683322679397484311866955753173334165594170200846489793190802871667810782444056719259697836149893720796758376581947084061661580122672761003377687080626559317706769302267815229389760363 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 477d301057f4dcffb0e817adc7b6684c0412d464 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sannicolalastrada.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001700c65d1f30000040300483046022100db428e4193cf6a50d3df30dae15919a05f307db864d107c2e76e12b169d9ed76022100d138bf33874db2daa5f68365b12e6d092d2e174cad6b91f710994b86e05d8e360076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001700c65d24b0000040300473045022100cbc697563efdf4592bc65ac5e5bb0ded7eb723875224b22bdeed452993771f2202206e55d0080822e325349fc7c2b4a8cfa124d7dfd58884ccbcb19c6812d3c82061 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007186f24928dd8ba2d56a016a859e7cda2aa1b40ed23cd62d1dcabbe73e6e380ad94a15f13d3b8be2332ca720389dd5a92d6c0c8c03a629f24819b7d57aec5354b4326f05518b535a0828a96f3c068f9917e63e22b6fc2235aa28d00dc1b80afc9289ae06caf48288e22d00071aee48356c405c225deb8b0346aff35c008de37d8ee040c2d1916f2a62df2182637936ffc71c89f633cc7d313a9185d0a4fc42f8cfe8fe1b3c6588f00ea1e60a49eee12a854db3f3fc45311b3e3ba5af46c9330c2fa24ef01c5215f44ba7e804f4bcd1c10ac010bcf401551068afbba9829e151fe3144c2743eee5025d1cc1718bca0ca573fac1a67c78e9feecd738ba18ad4ff9