resources.digitalshadows.com

- Digital Shadows Ltd -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 70:80:e6:1b:2c:a6:f6:88:00:00:00:00:50:e4:b8:a4 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Digital Shadows Ltd

Organization: Digital Shadows Ltd
Locality: London
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 70:80:e6:1b:2c:a6:f6:88:00:00:00:00:50:e4:b8:a4
Serial Number (int): 149542816632991449800120108600491554980
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 7a:5f:04:a1:ca:40:0a:97:07:8c:af:15:98:d2:df:d3:77:57:c8:02
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): dc:19:af:a7:66:84:50:7b:29:dd:d8:f3:5b:dd:aa:ec:b4:5d:e8:38
Fingerprint (sha256): 10:17:7e:48:99:c1:57:29:1c:1a:54:b4:b8:df:e4:0c:7e:ed:82:3b:ca:ab:6b:47:ca:22:44:aa:4a:30:e7:f9

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate resources.digitalshadows.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for resources.digitalshadows.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

resources.digitalshadows.com
www.resources.digitalshadows.com

Other certificates including the domain name digitalshadows.com

(limited to 100 certificates)
ssl510648.cloudflaressl.com
ssl2520.cloudflare.com
status.sandsiv.com
ssl2520.cloudflare.com
blog.digitalshadows.com
mailer.digitalshadows.com
status.sandsiv.com
ssl2520.cloudflare.com
resources.digitalshadows.com
ssl2520.cloudflare.com
ssl510648.cloudflaressl.com
status.sandsiv.com
san3166.cdntwrk.com
mailer.digitalshadows.com
ssl2520.cloudflare.com
statuspage.e2open.com
ssl2520.cloudflare.com
status.sandsiv.com
partners.digitalshadows.com
ssl2520.cloudflare.com
*.integrations.digitalshadows.com
ssl2520.cloudflare.com
ssl326085.cloudflaressl.com
status.sandsiv.com
status-namer-gtassurancetool.gtil.gt.com
ssl2520.cloudflare.com
status.sandsiv.com
status.sandsiv.com
statuspage.e2open.com
ssl2520.cloudflare.com
www.digitalshadows.com
ssl279302.cloudflaressl.com
ssl279300.cloudflaressl.com
status.sandsiv.com
status-namer-gtassurancetool.gtil.gt.com
ssl279300.cloudflaressl.com
ssl2520.cloudflare.com
blog.digitalshadows.com
status-namer-gtassurancetool.gtil.gt.com
splunk.integrations.digitalshadows.com
ssl326083.cloudflaressl.com
www.digitalshadows.com
leapstatus.gtil.gt.com
san3232.cdntwrk.com
ssl510647.cloudflaressl.com
ssl510649.cloudflaressl.com
ssl2520.cloudflare.com
ssl279302.cloudflaressl.com
status.sandsiv.com
status.plataformasintese.com
san2210.cdntwrk.com
mailer.digitalshadows.com
*.analytics.digitalshadows.com
status.sandsiv.com
status.sandsiv.com
resources.digitalshadows.com
info.digitalshadows.com
resources.digitalshadows.com
status.sandsiv.com
www.digitalshadows.com
san3066.cdntwrk.com
partners.digitalshadows.com
info.digitalshadows.com
status.sandsiv.com
www.digitalshadows.com
ssl510647.cloudflaressl.com
ssl510649.cloudflaressl.com
partners.digitalshadows.com
ssl2520.cloudflare.com
status.sandsiv.com
ssl2520.cloudflare.com
info.digitalshadows.com
*.integrations.digitalshadows.com
ssl2520.cloudflare.com
status.sandsiv.com
blog.digitalshadows.com
ssl510648.cloudflaressl.com
status.plataformasintese.com
ssl279300.cloudflaressl.com
ssl279302.cloudflaressl.com
ssl2520.cloudflare.com
statuspage.e2open.com
san2784.cdntwrk.com
san2417.cdntwrk.com
dev17331wed2prod.relevantize.com
ssl279302.cloudflaressl.com
ssl279300.cloudflaressl.com
ssl2520.cloudflare.com
ssl2520.cloudflare.com
san2600.cdntwrk.com
ssl510649.cloudflaressl.com
status.sandsiv.com
ssl279302.cloudflaressl.com
leapstatus.gtil.gt.com
ssl2520.cloudflare.com
resources.digitalshadows.com
ssl279302.cloudflaressl.com
status.sandsiv.com
san1348.cdntwrk.com
*.analytics.digitalshadows.com

Certificate

The complete raw certificate details for resources.digitalshadows.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOjOl7/+HDp4j7j575sr
aEJW5iRAIgbUe8YWPnkqRlxoUCF6HDTNwitLQl4fCb0ePi997nlnx7AWAlh8O3Mf
vh0rF4bZn5kEacxrVXZuiWkcl/aRL7xQF1uvu2yAYsZoLyjtrzp6xmxEdyw0MvAp
noqnpkv8IXEes4kdsQA7DSqpD/MtccI27WQNgiMxBwSQTEGpQJwp9KCQ2IyMFE7K
BZq+UDEiWjONLQpBDNHSHubXpJoqm6XqqLAV7TjMPJc3qE8+yezyTS0q21tRR533
ff+sFCmB3PBLj902Jrys3tvK0syYBdhYPpA09H+VuRY/tY6dqZXK5y9QHaLF5VWu
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 149542816632991449800120108600491554980
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-10 13:38:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-22 14:08:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digital Shadows Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'resources.digitalshadows.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25362462405108497549211225921544055914823159722176110018079884383024009524324143677204120536584365498615616312689131628332911508676262649175250946540530277186736027112716296441506417972037419448931455787094053521354718635815895816321650180253810061360858997231332923203656095152729924261401175574724184023401903919380296697407902107093761284614744828015744565327733014743893982064234715985573191818501013563209679904698303426153930969545954464047484916339102209020781954408600430947326948752525128822735692064031764321163856755825749897410926708198341859475818734059623346246703839945924299796820946499880573428149883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.digitalshadows.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resources.digitalshadows.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a5f04a1ca400a97078caf1598d2dfd37757c802
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0050598bad403bf10076906edf34d573b0eb812ba2ab6feeef410291aec7ad25708707306ec3a896696a93040a4ae680abdafd45a9ddf3924db7f1dc6053ebfd7528c214556b1ccd21684b6ba1452e2fcb42105d2257b92fa7798cae8e6e063cf1ae827ab4a9aeb5ce603224f2e1527e22d495c67e6562d44a52882cbb19220c1fb512213e82b973e877b3c6dcbe9e46aaf817d56c988ea8f9b663241d08489ecc1602347644f5b621074ea7ed44cbd497b253147be85c3e163000065c008150492bbd90622b03f9d57909dbbe2ae3c28cd6f539500755e0eb06ac74fc6c3bb439e46995c623a45f011f4886554fb2cb006a614e101842fa04bae651abccd83800