activ8.activpayroll.com

- activpayroll Ltd. -

Issued by GlobalSign Extended Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 41:b9:4c:4c:24:54:9a:e8:21:c3:ed:e0 was issued on by GlobalSign nv-sa.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

activpayroll Ltd.

Company registration number: SC194537
Organization: activpayroll Ltd.
Organization unit: IT
Address: 5 CULTS BUSINESS PARK
State / Province: Aberdeen
Locality: Aberdeen
Country: GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 41:b9:4c:4c:24:54:9a:e8:21:c3:ed:e0
Serial Number (int): 20340537219439271164592254432
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 5a:f1:ff:bb:1b:2b:9a:0c:d4:43:6e:db:3a:8a:3d:1e:14:05:53:9e
AuthorityKeyId: da:40:77:43:65:1c:f8:fe:a7:e3:f4:64:82:3e:4d:43:13:22:31:02

Fingerprint (sha1): 38:65:3a:5b:91:99:39:2f:a0:cf:39:83:2d:0d:37:60:24:63:77:0d
Fingerprint (sha256): 11:a9:9a:c4:3c:2d:02:46:92:04:bd:d0:83:be:31:7e:4d:3f:17:b0:e0:cf:c3:53:d4:ea:38:02:f4:96:fc:7f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g2.crl

Check the revocation status for certificate activ8.activpayroll.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for activ8.activpayroll.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

activ8.activpayroll.com
master.activpayroll.com
demo.activpayroll.com
eservices.activpayroll.com

Other certificates including the domain name activpayroll.com

(limited to 100 certificates)
activ8.activpayroll.com
activ8.activpayroll.com
activ8.activpayroll.com
www.activpayroll.com
activpayroll.com
www.activpayroll.com
ereporting.activpayroll.com
www.activpayroll.com
activ8.activpayroll.com
*.activpayroll.com
mailgate.activpayroll.com
activpayroll.com
mailgate.activpayroll.com
activpayroll.com
www.activpayroll.com
apa-dc-fmc.activpayroll.com
apa-dc-fmc.activpayroll.com
www.activpayroll.com
activ8.activpayroll.com
mailgate.activpayroll.com
activ8.activpayroll.com
www.activpayroll.com
*.activpayroll.com
activpayroll.com
activ8.activpayroll.com
apa-dc-fmc.activpayroll.com
activ8.activpayroll.com
activpayroll.com
activ8.activpayroll.com
www.activpayroll.com
mailaus.activpayroll.com
www.activpayroll.com
www.activpayroll.com
www.activpayroll.com
activ8.activpayroll.com
*.activpayroll.com
*.activpayroll.com
mailgate.activpayroll.com
mailgate.activpayroll.com
activpayroll.com
activ8.activpayroll.com
activ8.activpayroll.com
activpayroll.com
*.activpayroll.com
mailgate.activpayroll.com
mailgate.activpayroll.com
www.activpayroll.com
mailgate.activpayroll.com
www.activpayroll.com
www.activpayroll.com
mailgate.activpayroll.com
activ8.activpayroll.com

Certificate

The complete raw certificate details for activ8.activpayroll.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IwZ60IVyl4LxFPolCs+
eGdYys/ENHL58DlENTKKw6woWkY3afkNS2VQkYMxq9mfsLrQXClUCZY/hDZTvp4T
nxan2bVIdu/th6Xvd1flaCfcBTUECvro5zcJIlpJvtdmIToTO8L1FEfxxd3OChLS
UM2T6Lg/ag+Vv5pkin2qtR1RSDCp+4QSkgeh8XLRlLjT211Oo7NtO4atAX8Si2w6
D4/eyU5meR8C2VJ2fm/YhuX2FZca2kAIEdb0cxrTXq5agSmoUbR5p9XF7oGCfU8d
V4H0GaFYCX53DpTSlv0Xg3WkjNO3/w6QMsbVXRgrQlgVyL8/pYegSEEhNOihs2Ht
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20340537219439271164592254432
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-06 12:37:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-05 10:26:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SC194537'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aberdeen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aberdeen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5 CULTS BUSINESS PARK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'activpayroll Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'activ8.activpayroll.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28851420031555231027862050103476963479605640885722756282602875869371286122634174578378244572537937111090375067026217376433393391520253097277325227426813456162628089990052854952149224594664405040939810696557613246818550478441310712393462127097380683134976402155502865517834767252940812167812466688289634477404564751429471021994978973976160276638824422666909018759115964551582988289428039607730729067079969501927081914910217162297428888271653898350292560891095990366446248758001811688457892930120345111352108992769942523712837324410029920742211061528862268740169527991518195537088602325893773722687754540113038485351907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activ8.activpayroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master.activpayroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.activpayroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices.activpayroll.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5af1ffbb1b2b9a0cd4436edb3a8a3d1e1405539e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da407743651cf8fea7e3f464823e4d4313223102
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004c627fd134a301559108b12dc6459224fe9944c4c6521fe6836d7007bc0a5caa3a400e650f36d94b932f6b64c8c4387baa5e228270955ad3dcbbc6f03e04660c00ce72045fca92eab709a7c9569fa6f279352114ec4063d9795af571af81070c51ce6cb7d925efa4829bf556e3c49a879afdd0f1c5cfb6edcdd5014c9fb6ae4742088691ec847be92d2f603169167cf347848b6be821157618aa60d81ce161e2853250b8f837652e1b60e5ec8e483b67c749499dc9ac8d038839cea03cd930f7711f5a52f1081814f3cbeda21b8ba10ac12b0a23bb49f9457f46d38fe90016f96948121bd407a6429956e7470f54d58d346711f22e8120d04f3c9035a1a7421f