www2.refinish.basf.us

- BASF Business Services GmbH -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 62:ba:44:a9:e5:8e:85:38:cd:a0:3d:a9 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BASF Business Services GmbH

Organization: BASF Business Services GmbH
Organization unit: IT Security
State / Province: RLP
Locality: Ludwigshafen
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 62:ba:44:a9:e5:8e:85:38:cd:a0:3d:a9
Serial Number (int): 30554715419902026314705550761
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: b8:87:63:3a:99:61:10:2b:8e:8c:5f:8e:00:58:a5:75:03:6d:4e:0b
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 64:22:75:00:d1:72:28:d0:8b:bf:5d:0a:ee:76:85:04:33:66:9f:97
Fingerprint (sha256): 0f:79:05:b8:7d:fc:5a:7a:ad:00:03:bc:85:b8:95:39:ea:84:e1:7e:d0:d3:fe:50:09:71:09:3a:fd:3e:70:03

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate www2.refinish.basf.us

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www2.refinish.basf.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www2.refinish.basf.us
www.www2.refinish.basf.us

Other certificates including the domain name basf.us

(limited to 100 certificates)
www.bodyshopmall.com
estore.refinish.basf.us
mcyclo.com
mcyclo.com
www.omacor.org
readz.com
jobpostings.basf.us
voffice-na.basf.com
www.engenia-herbicide.basf.us
mcyclo.com
master-builders-solutions.basf.pl
jobpostings.basf.us
readz.com
refinish-elearning.basf.us
construction-chemicals-documents.basf.us
crm.agro.basf.us
www.hydrosulphite.com
veterans-jobs.basf.us
teraxxa-wins.com
webmail.basf.us
construction-chemicals-documents.basf.us
readz.com
master-builders-solutions.basf.pl
readz.com
experience-stage.basf.com
dispersions-resins-distributors.basf.us
acronaloptive.com
invigorresults.ca
www2.refinish.basf.us
www.ornamentals.basf.com
agcelence.lv
veterans-jobs.basf.us
experience.basf.com
neopor.basf.us
www.hydrosulphite.com
headline-advantage-terms.basf.us
refinish-elearning.basf.us
betterturf-stage.basf.us
*.basf.us
readz.com
experience-stage.basf.com
experience-stage02.basf.com
jobpostings.basf.us
agcelence.lv
construction-chemicals-documents.basf.us
master-builders-solutions.basf.pl
construction-chemicals-documents.basf.us
readz.com
africa.master-builders-solutions.basf.com
mcyclo.com
mcyclo.com
master-builders-solutions.basf.pl
www.bodyshopmall.com
readz.com
readz.com
readz.com
construction-chemicals-documents.basf.us
carecreations.basf.us
africa.master-builders-solutions.basf.com
www.hydrosulphite.com
readz.com
readz.com
carecreations.basf.us
certainweedcontrol.com
www.basf-wohnen-und-bauen.com
jobpostings.basf.us
b2last.basf.com
betterturf.basf.us
readz.com
readz.com
wireandcable.basf.com
experience.basf.com
readz.com
www.growsmartcanola.com
veterans-jobs.basf.us
readz.com
certainweedcontrol.com
crm-int.agro.basf.us
readz.com
if.basf.us
betterturf.basf.us
dispersions-resins-distributors.basf.us
readz.com
voffice-na.basf.com
crm-int.agro.basf.us
www.basf.us
refinish.basf.us
agcelence.lv
www.lupraphen.com
teraxxa-wins.com
readz.com
*.basf.us
veterans-jobs.basf.us
readz.com
readz.com
www.omacor.org
whatwedo.basf.us
mcyclo.com
www.ornamentals.basf.com
master-builders-solutions.basf.pl

Certificate

The complete raw certificate details for www2.refinish.basf.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTN5lEj3iUTC1VNdfu6M
p+W+Syf/47ayBdcs49LBIt6D/bk2iCsMtywWNYo7UQNT40mnwyQVfBYzaC1Rwkcz
FWatwuddlph7vGcSnpZKoeY2k6pGtSPhIUMInmN8hyYjur50vvmqzYatLFeQtBIf
8Ub0pgTThuIuUKNVarQnfyGLsNKGqjqvM9Xa3oH62TDDy9r4N8CER4TDk46AMjUX
LaNKHCo7czFnSO7+nM3RUXay1XHrccmyO6i1A4HvieFpwfx5NTpRYJcmnpz4lWeh
GQzFfvtEoZcR7LyapOQWjDbJ6wku66G5OnKxJxTk9rNWkOMxRxGkBs99p2b6cYNK
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30554715419902026314705550761
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-30 13:15:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-17 11:00:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF Business Services GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www2.refinish.basf.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23884422867140528763091455407807468311849348238809887741866263384052963014462278534528861315790033348458268243312434640043305725150218649422265850633097656932778320504807916676313450660145423776471635154036238649788886759127545469447903937086163618032395812347923901352305729436426013624976138708442358693549833058684498825301106538545181636357740071915694458081177607980315997758441708096271505354674475216737617563401779887569015431331811348575249295647138671703617207911421844846139535198457709231695843258331342687500228340053994920508822362353618704598823060790815076979013245175038782999435323148221097311423177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.refinish.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.www2.refinish.basf.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b887633a9961102b8e8c5f8e0058a575036d4e0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016a6e6333f90000040300473045022100b6d26411b4d4c0160c1691f6e03a8425e9ed44a08e569f17998f85a81c5112fe02201dc08f610bc8165a5f59efbdef99cb93f46d7ca992a7987cd601ce3c853fdbda0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016a6e6334340000040300483046022100e5be7d7aaa660057af38b861b2d2134b4273ff9e4cc047a630e75b45a2d3b07602210096036932678ab6d068c06a2f264cbaa4511408c3734a8c832d8a9fbbe94d3279
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000dcb08833551af7db6bb0dffba9d6ec984de0edaa4a972fd76f3e54d36ae4030a91712481e2a9851203619355a42cc6ef93ecbacd86a4926656bb941a0e68857c6ccff0632a19568ceaeaa72f5d5a4eff935c8bbb369a5e6830f1176d7cef8eb4f54e8f088ed6502392f059d4ac31a17b9a08f1cd82a026c852f9b6a4961042cffbf21b09adccc3dca89f773f02e2bf2d2e7722dae39e0398bae86e8dae0868e462d789a882a6cd65ede7fdb7ce9c122592cc883f6d020f5ff7319f7fe690be7c1973ea8aae8ff6ff7b526bf9e97c7fe59f6dac15c4b9368a079fae0f9178900bfacdbb0f041af70482898672a1b5155f695743cb455adc6c1f586665ee31561