paws.jlrext.com

- Jaguar Land Rover Limited -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:93:24:de:47:e7:ba:62:5a:69:35:e7:07:1c:1c:65:91 was issued on by GlobalSign nv-sa.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Jaguar Land Rover Limited

Organization: Jaguar Land Rover Limited
State / Province: West Midlands
Locality: Coventry
Country: GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:93:24:de:47:e7:ba:62:5a:69:35:e7:07:1c:1c:65:91
Serial Number (int): 1492333766894774300085123624948790556648849
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: ec:64:2c:8f:b9:f4:27:8a:91:cf:02:54:c1:e7:29:79:3e:51:c6:af
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 02:7b:8b:e4:47:54:0a:94:bc:1d:f2:da:0b:16:e1:20:f3:11:2e:34
Fingerprint (sha256): 14:38:84:81:f6:81:63:02:61:21:34:39:df:25:95:1a:83:ca:f1:bc:f3:41:0c:82:7f:24:06:c6:4b:5f:9f:76

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate paws.jlrext.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for paws.jlrext.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

paws.jlrext.com
iqm.jlrext.com
web.paws.jlrext.com
iqm.jlrint.com
paws.jlrint.com
prs72422.portsmouth.jlrint.com
prs72423.portsmouth.jlrint.com
prs72424.portsmouth.jlrint.com
prs72425.portsmouth.jlrint.com
www.paws.jlrint.com

Other certificates including the domain name jlrext.com

(limited to 100 certificates)
jlrvision.jlrext.com
stage-customerservice.jlrext.com
*.jlrext.com
web.qprqa.jlrext.com
retailer-assessment.jlrext.com
salesforcevsa.jlrext.com
topix.features.jlrext.com
www.aspenrms.com
srpss.jlrext.com
access.jlrext.com
mftl-qa.jlrext.com
web.epay.jlrext.com
bbsssm.jlrext.com
special-tools-qa.jlrext.com
*.jlrext.com
mftl.jlrext.com
*.jlrext.com
connect-cn.jlrext.com
www.webquote.jlrext.com
www.dcsext.jlrext.com
www.dcsext.jlrext.com
www.portal.jlrext.com
monroney.jlrext.com
jlrsp.jlrext.com
www.madcap.jlrext.com
web.cmmseddl-pr.jlrext.com
premierdocstest.jlrext.com
peg.bbss.jlrext.com
premierdocstest.jlrext.com
*.jlrext.com
www.lradvertising.jlrext.com
www.efdvs.jlrext.com
gcmservices.jlrext.com
jlrportalqajpc.jlrext.com
jaguarvehicles.jlrext.com
bbssqajpc.jlrext.com
aftermarket-ewm.jlrext.com
www.wslx.jlrext.com
retailer-database.jlrext.com
retailer-database.jlrext.com
www.webquote.jlrext.com
topix.jlrext.com
jaguarlandroverhub.jlrext.com
www.aspenrms.com
topixqa2.landrover.jlrext.com
pridepinnacle.jlrext.com
www.secureauthx.jlrext.com
www.nguams.jlrext.com
www.aspenrms.com
pridepinnacle.jlrext.com
www.aspenrms.com
web.qpr.jlrext.com
sps.jlrext.com
topixqa2.jlrext.com
retailer-database.jlrext.com
sps.jlrext.com
www.jaguarcreativepartners.jlrext.com
paws.jlrext.com
*.jlrext.com
jlrassuranttest.jlrext.com
webconnect.jlrext.com
jlrdocusedit.jlrext.com
www.gpirs-ddl.jlrext.com
dealerleads.jlrext.com
*.jlrext.com
jlrassurant.jlrext.com
paws.jlrint.com
topixqa2.jlrext.com
web.c3p.jlrext.com
journey.jlrext.com
mft.jlrext.com
sta-grms.jlrext.com
www.jlrvista.jlrext.com
myvpn.jlrext.com
premierdocs.jlrext.com
connect-cn.jlrext.com
www.dcsext.jlrext.com
sef.jlrext.com
jaguarlandroverhub.jlrext.com
jaguarlandroverbrand.jlrext.com
web.cmmseddl-pr.jlrext.com
dealerportalpp-cn.jlrext.com
special-tools-qa.jlrext.com
web.aim.jlrint.com
www.jlrvista.jlrext.com
ecar.jlrext.com
www.d42.jlrext.com
webconnect.jlrext.com
www.pd-rm.jlrext.com
www.secureauthx.jlrext.com
qa-wslx.jlrext.com
rmdv.jlrext.com
stage-esi.jlrext.com
wwwqa.jagcoopgrms.jlrext.com
iplm-training.jlrext.com
www.wslx.jlrext.com
www.gpirs-ddl.jlrext.com
svcrm.jlrext.com
www.efdvs.jlrext.com
web.sfq.jlrext.com

Certificate

The complete raw certificate details for paws.jlrext.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3gJkZB5lwHIXz4UbfzQ
TP5qc8X4OJ27anXuxcYiGdzq8Gs521U9Xr6VrLbdaH7oomcO6dXYmO2UPE3+t765
Fh+DrGzWW0pp0Ebo4p+/PHbv81tF1GK9WxHCA9XPTSqrT+kRe/tWuvyUL8kFOrFl
ilMXN3dsA3jYgV2BIn8Ib8GhRmPqFUsdPttAlrWdXk8O7UnqAAks+IgBWrkhyd0d
8FUmrB8hwURkJpionOApSMrQFSDbDm2Ubrln1gHEjAWsRZSuJ7lfQF/u6WOZPTwE
ZRMEIfMTncCEHDDF7SxjQaFGx5wHz1UH2eyZ+qvIW8HzIRdG7QKB03DlMQZifILr
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492333766894774300085123624948790556648849
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-27 10:42:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-10 10:01:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Midlands'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coventry'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jaguar Land Rover Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'paws.jlrext.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25180615325174390733338891005425073234864124623542714717010654896434586048487263968408358960398129388713045010795806460988719551962119626761391709360181534292420516569171367730008475969272343956338747228883977151684912021057529851389316913297343529719326487495515003987461412227888107623964134179619170100580102892686312910879739341370476557713008922447046771610261418450606009309045260060437075805615852773655446976433453220129649735479578817042829674801217422751060969328103016508113711851955451343973117629600300349973050926109813281737439341491780332889162924514333081025166743573421929377365569370241779231812561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (239 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paws.jlrext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqm.jlrext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.paws.jlrext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqm.jlrint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paws.jlrint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prs72422.portsmouth.jlrint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prs72423.portsmouth.jlrint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prs72424.portsmouth.jlrint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prs72425.portsmouth.jlrint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paws.jlrint.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec642c8fb9f4278a91cf0254c1e729793e51c6af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0017898bafc2f4f6b968fd9ea371628ac5d9b513864417dc68d6ac6b897a621ef87c663a639d983161332b560064e82188a3c34d82bb0f0fedc1c4594f5d8a6d6ab0ad8bbeb4b6a1dae49496fa7ffc4e1be70a633ea865616a21c347a6f90a3807fd5b550838122e78a14767e8fabfa36b8e50210f4157535a401de34dc77e45361634e3aacfe8118598fa114814802f1a10f12947fc828d700066b0f6f83406ed2b014941b5b281297b3883c8ae2e4bc3baa57c0225089ae1c37ce3ff425ee1b6d0492af285efedf1a5aaee1cd3f157fe86cae711f9fd4aadaff18fd3e8286cdc5f6903018e055895150753d5b711312cd957b9441858ed0eca7b23e38935c3f2