www.onlineshop.keri-gewuerze.de

Issued by R3

About this certificate

This digital certificate with serial number 03:7b:03:2e:15:c6:64:8b:02:5c:26:01:24:26:6d:78:6d:b8 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.onlineshop.keri-gewuerze.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7b:03:2e:15:c6:64:8b:02:5c:26:01:24:26:6d:78:6d:b8
Serial Number (int): 303195815897847912702881449662775654116792
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:90:d0:ae:fd:d7:d2:21:84:ec:cc:d8:93:13:cd:78:03:55:b3:9d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 11:e8:be:9b:ff:cc:8c:37:9c:7f:8b:95:e6:1c:35:83:52:65:73:5d
Fingerprint (sha256): 15:57:c6:f2:c8:c1:b2:04:0d:eb:21:13:da:98:7c:3e:e6:7e:3f:d9:ff:ad:5f:5f:0b:74:59:6f:94:67:74:d7

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.onlineshop.keri-gewuerze.de

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.onlineshop.keri-gewuerze.de

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.annakow.de
*.fundus-varel.de
*.ka-deutsch.de
*.kirmestrailer.de
*.lueweb.de
*.matthiaslangstein.de
*.mediaphono.de
*.morningstar-online.de
*.mpilou.com
*.mr-bautec.de
*.noon-official.com
*.paganor.com
*.petraloescher-hair.at
*.power-connection.de
*.tezla.ch
*.w-architektur.de
*.zahnaerzte-delmenhorst-rezaie.de
*.zahnaerzte-rezaie.de
annakow.de
events.visagistylist.ch
fundus-varel.de
ka-deutsch.de
kirmestrailer.de
lueweb.de
m.tjark.pro
mailhost.woeschka.com
matthiaslangstein.de
mediaphono.de
morningstar-online.de
mote.eishorn.de
mpilou.com
mr-bautec.de
noon-official.com
office.enjoi-sailing.com
paganor.com
petraloescher-hair.at
pop3.bigpicture.at
power-connection.de
static.icekey.de
test.ff-wm.de
tezla.ch
w-architektur.de
www.mail.drk-nordkirchen.de
www.onlineshop.keri-gewuerze.de
www.server.drk-nordkirchen.de
www.staging.dreiekk.de
www.stammbaum.luetke-wissing.eu
www.swc.syd-clan.de
www.vorschau.oberlausitztrail.de
zahnaerzte-delmenhorst-rezaie.de
zahnaerzte-rezaie.de

Other certificates including the domain name keri-gewuerze.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.onlineshop.keri-gewuerze.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE3zzMSnCjEpstUtqlJQ3ZGgBTniih
AYnYtZgPmi/b2gX8sKAZXW4AxCxs6bVpiQxO1JiX64YQ1G+GPvFFtREbPg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303195815897847912702881449662775654116792
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-10 13:39:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 13:39:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.onlineshop.keri-gewuerze.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004df3ccc4a70a3129b2d52daa5250dd91a00539e28a10189d8b5980f9a2fdbda05fcb0a0195d6e00c42c6ce9b569890c4ed49897eb8610d46f863ef145b5111b3e
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa90d0aefdd7d22184ecccd89313cd780355b39d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1040 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.annakow.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fundus-varel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ka-deutsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kirmestrailer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lueweb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.matthiaslangstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediaphono.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morningstar-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mpilou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mr-bautec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.noon-official.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paganor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.petraloescher-hair.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.power-connection.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tezla.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.w-architektur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zahnaerzte-delmenhorst-rezaie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zahnaerzte-rezaie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'annakow.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.visagistylist.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundus-varel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ka-deutsch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirmestrailer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lueweb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tjark.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailhost.woeschka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matthiaslangstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaphono.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningstar-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mote.eishorn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpilou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mr-bautec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noon-official.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'office.enjoi-sailing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paganor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petraloescher-hair.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop3.bigpicture.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'power-connection.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.icekey.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.ff-wm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tezla.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-architektur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mail.drk-nordkirchen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlineshop.keri-gewuerze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.server.drk-nordkirchen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.dreiekk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stammbaum.luetke-wissing.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swc.syd-clan.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vorschau.oberlausitztrail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zahnaerzte-delmenhorst-rezaie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zahnaerzte-rezaie.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bb9ac48bb00000403004830460221009eec0c8a1ac8d2972f1ecd00bf4a567b18674618ee3d4dfc4d5af2f9c9ff678b022100ff0758071839600f52ee68ba6a27792612f4d14375bb3bed21d10f234e07c37c00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bb9ac490a0000040300473045022068c343217d57cb63ce3b7d86d9d8afed3d40121c736d1beca884460f14762b8a022100cd023a66c1859c0153bd354857221dd2deedd77ac35f02e193ca70796db24d50
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00aa0159630020c94f0a0968569a3e39102c1e10bf414eff2776e7c2d2033ebb44fe77eb7ec19b8f196bc5fb26e1909a6e8ab3142f764d85ac808962de725680b8a010abaffa185a09669b7e6a04f938ff34b6a7c5ee1ae5902fd608e07d007daddfbc913041a0d7d221a3327265af6c44e5719959b2f5f77090fcc020337a2cf34286128371f51cdd6c52c7f73f95d03a8340e651e4fbf52a3008151369ae2655cb4fce59ad10ee70b337d8ad291f11da8712d56c103c1a08e07caed52cbd3606043e96b6ef679fc9192b13b195f8f0edda3613eae7bf9ade8da9770a848060d531b25b941a65cc5d45bbda1efd5a37dc2a1fc5a4c57d578e63ce08c1c1ea25f2