lajollainvestments.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:db:b0:4c:98:4d:f1:f1:1e:80:57:ce:b7:e6:7f:b4:38:29 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=lajollainvestments.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:db:b0:4c:98:4d:f1:f1:1e:80:57:ce:b7:e6:7f:b4:38:29Serial Number (int): 336093037981887362930061810541615736174633
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: fa:6c:f9:73:28:05:0d:fe:aa:de:5f:be:3b:cd:22:38:a9:e5:02:5d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e3:be:d6:dc:ec:f2:42:10:3d:ec:0a:72:28:a1:55:f9:e6:89:3a:a5
Fingerprint (sha256): 15:0b:4a:01:8d:7d:93:5f:21:75:8b:d3:23:df:ab:67:65:99:ba:6c:ac:58:1a:b6:40:76:22:46:24:3f:0d:85
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate lajollainvestments.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lajollainvestments.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lajollainvestments.com
Other certificates including the domain name lajollainvestments.com
(limited to 100 certificates)
lajollainvestments.com
lajollainvestments.com
www.composite-rack.com
jeremyle.com
thesitedrs.com
69430.com
www.organicxanax.com
www.lajollainvestments.com
www.lajollainvestments.com
sp416.com
lajollainvestments.com
codependencytreatmentcenters.com
www.lajollainvestments.com
lajollainvestments.com
lajollainvestments.com
lajollainvestments.com
strascinato.com
lajollainvestments.com
www.composite-rack.com
jeremyle.com
thesitedrs.com
69430.com
www.organicxanax.com
www.lajollainvestments.com
www.lajollainvestments.com
sp416.com
lajollainvestments.com
codependencytreatmentcenters.com
www.lajollainvestments.com
lajollainvestments.com
lajollainvestments.com
lajollainvestments.com
strascinato.com
Certificate
The complete raw certificate details for lajollainvestments.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgISA9uwTJhN8fEegFfOt+Z/tDgpMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIwMTU2NTZaFw0y MDAxMTAwMTU2NTZaMCExHzAdBgNVBAMTFmxham9sbGFpbnZlc3RtZW50cy5jb20w ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDofcQSFQeNX54LJ1Kx6hB6 OtuYIpFAbxBLsazec3qiyaqULqFQp1ZpFHB9HTF1S26kxSNWNjfwbrVGAt6NS+cb McSD12YnSH5BHvD0YVESOPFvAtxYV2CKOBgtdau1nRNXrj+9wJtF0YPmHJF38Tmk y9d7KucxTnbA6O2krkneSo6W313p4br/QQsVJ9BZ6mrGXfPaeNRfHTLtarwofeJO HlAW9ET3pHgP6m4QiX+UeHapwW1knClX22hSt+oMv1zIXBLCMQ1sj2WCRMUNhbYJ k1XLUNVIkvSZPwrkfnrTfnYMhuJ14imvyZ31bqi1dQKgMNFieucI7ZEmEcretyKo hwKITN7Sl3vkXxqd7InOfkmjv0Lcm2ZlzB2c3kSBrYT0V+eyXMymJ7/2gnwmSMXs MmDL6+B2Sq/dLVG3WJgFrtiwEd6TO/UUsXpMkQcNeauzebZtlfm6h45K6LA84f3s 5ZE/CH72pSOmJMRipI9UyG6Cyr9koyQXW1XJdQyzdjOKCbudZLIL9u4k8ls0m0kZ s+xRp6ja2+ZuGsoCbzHiSRGMwMNYHsTXoz+jsGJx++PY26Ns1xKl2/Atvwak5E3s uYw+0tZrZzUdxmE93shjY8IOsERos4APbLcE4L45aAnmh5Qtc5clLsWaus1NCl/J m0uNP8SqcwaMq0E0HAx5qQIDAQABo4ICaTCCAmUwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBT6bPlzKAUN/qreX747zSI4qeUCXTAfBgNVHSMEGDAWgBSoSmpjBH3duubR ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEGA1UdEQQaMBiCFmxham9sbGFp bnZlc3RtZW50cy5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEC BgorBgEEAdZ5AgQCBIHzBIHwAO4AdQCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOey SVMt74uQXgAAAW295csCAAAEAwBGMEQCIA5v7f3nhwvomQNcRtf2TVtQA7e4dAyb fy3SOLTPn/DpAiAUUDFUnb9tqSboFHnnJ0HwkwsySwNaKZ83adv5psyIjQB1AF6n c/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbb3lzQwAAAQDAEYwRAIg WKGxQI1Zy59Gz1+bxaOcTnk4+wi3959u5suhnqOY6f8CICCcMlITd3ZkARcYwYcV 4DgxTMiw+uAGkbAiAeNrdEDOMA0GCSqGSIb3DQEBCwUAA4IBAQA/baaGOwmL4JdU JosAC4eEQlfrAgRaxO0c+91XuNB5Zm+PR3d+Kt8ltawuu4pyo+aSxv9FxOU6bg6C +CIsgi8Tu8AuxqBwcnQ+Il6JL/6asKaEy7l22ghFN2vrjxzulB4d9ZlpLNhNeJq5 slxJdTs+sxWSZnfmuAvJxSgr6wnIKVXbAJXYXXysc86sE9NBa2/YQlLtdhLBxuXw KVAJnoR9qzrQfMqT3sOU4AtSJ7LncGpFocG9NbMS7Fk500hGduT6lR4aD/Wo/pps G5kPWN33ytDKVHTsTtvB/4oQD/h2x8xXq3S+ulELevEgL5BYz0RyV7V9RQTNzmd5 xxtlpqMG -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6H3EEhUHjV+eCydSseoQ ejrbmCKRQG8QS7Gs3nN6osmqlC6hUKdWaRRwfR0xdUtupMUjVjY38G61RgLejUvn GzHEg9dmJ0h+QR7w9GFREjjxbwLcWFdgijgYLXWrtZ0TV64/vcCbRdGD5hyRd/E5 pMvXeyrnMU52wOjtpK5J3kqOlt9d6eG6/0ELFSfQWepqxl3z2njUXx0y7Wq8KH3i Th5QFvRE96R4D+puEIl/lHh2qcFtZJwpV9toUrfqDL9cyFwSwjENbI9lgkTFDYW2 CZNVy1DVSJL0mT8K5H560352DIbideIpr8md9W6otXUCoDDRYnrnCO2RJhHK3rci qIcCiEze0pd75F8aneyJzn5Jo79C3JtmZcwdnN5Ega2E9FfnslzMpie/9oJ8JkjF 7DJgy+vgdkqv3S1Rt1iYBa7YsBHekzv1FLF6TJEHDXmrs3m2bZX5uoeOSuiwPOH9 7OWRPwh+9qUjpiTEYqSPVMhugsq/ZKMkF1tVyXUMs3Yzigm7nWSyC/buJPJbNJtJ GbPsUaeo2tvmbhrKAm8x4kkRjMDDWB7E16M/o7Bicfvj2NujbNcSpdvwLb8GpORN 7LmMPtLWa2c1HcZhPd7IY2PCDrBEaLOAD2y3BOC+OWgJ5oeULXOXJS7FmrrNTQpf yZtLjT/EqnMGjKtBNBwMeakCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 336093037981887362930061810541615736174633 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 01:56:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 01:56:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lajollainvestments.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 948481642966659525426426897190338828056895058720604368399358472469424845797303683865317444576377961512305469865686287635569768802398546253190051412943930328362995791483799755394278519408375634908532034729006513218689508512921771471705285164981592125034487715456783781251525403338668992076591485286564496523616886846439740363537940723778452679975454771015277636844458347973539647675023740258989262060298630745954299583620273443825286273621316941149018929381170577271244208170742126292096337059186911479047918378739734166074370570007089945030398437893083563924850034343179375714614152754727821601875641202307523908470321434879603087193910645391995391374591489384309679461196750777513364123358596372901057205459033392126069271925998433214333553590767503745291587177249463635916538567764100241409215762110178871455054736087531908999288360782996725171850348288296146369511314975982668290030862791009006764298510951499789561491592580488411787031428938518840916837552302843694941847442451486387664873165902679111680112304412144754986158336320550720180725920904789563220690584204773706360852817156320096539981617461250617124457011219045075059824125371692389499921711563164961104164184516553801960532325653734368418302661968189206695070431657 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fa6cf97328050dfeaade5fbe3bcd2238a9e5025d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lajollainvestments.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbde5cb02000004030046304402200e6fedfde7870be899035c46d7f64d5b5003b7b8740c9b7f2dd238b4cf9ff0e90220145031549dbf6da926e81479e72741f0930b324b035a299f3769dbf9a6cc888d0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbde5cd0c0000040300463044022058a1b1408d59cb9f46cf5f9bc5a39c4e7938fb08b7f79f6ee6cba19ea398e9ff0220209c325213777664011718c18715e038314cc8b0fae00691b02201e36b7440ce . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003f6da6863b098be09754268b000b87844257eb02045ac4ed1cfbdd57b8d079666f8f47777e2adf25b5ac2ebb8a72a3e692c6ff45c4e53a6e0e82f8222c822f13bbc02ec6a07072743e225e892ffe9ab0a684cbb976da0845376beb8f1cee941e1df599692cd84d789ab9b25c49753b3eb315926677e6b80bc9c5282beb09c82955db0095d85d7cac73ceac13d3416b6fd84252ed7612c1c6e5f02950099e847dab3ad07cca93dec394e00b5227b2e7706a45a1c1bd35b312ec5939d3484676e4fa951e1a0ff5a8fe9a6c1b990f58ddf7cad0ca5474ec4edbc1ff8a100ff876c7cc57ab74beba510b7af1202f9058cf447257b57d4504cdce6779c71b65a6a306