ci-aps1.mumbai.delivery.aimatch.net

Issued by Amazon

About this certificate

This digital certificate with serial number 03:8f:bc:b7:b9:87:d6:df:a4:f9:a0:95:3e:14:8a:b2 was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ci-aps1.mumbai.delivery.aimatch.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8f:bc:b7:b9:87:d6:df:a4:f9:a0:95:3e:14:8a:b2
Serial Number (int): 4734010087303401108540548305953000114
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 5f:a8:57:9d:69:bf:2b:7f:d1:cb:7e:53:c3:f1:c1:41:98:30:67:ec
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 90:48:18:73:e1:f7:84:1f:36:c7:76:b8:18:1f:fe:a7:e7:51:9c:26
Fingerprint (sha256): 17:a5:7c:fe:25:b7:11:2f:13:80:81:c5:59:54:15:0e:bc:df:64:64:f6:f3:99:de:28:de:eb:8b:7d:05:f9:43

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate ci-aps1.mumbai.delivery.aimatch.net

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ci-aps1.mumbai.delivery.aimatch.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ci-aps1.mumbai.delivery.aimatch.net
delivery360.homecredit.vn
delivery-ci360.gaintv.fixer.com.tr
delivery-ci360.uatweb.sbigeneral.in
delivery-ci360.gain.tv
delivery360.homecredit.co.in
delivery-ci360.sbigeneral.in

Other certificates including the domain name aimatch.net

(limited to 100 certificates)
*.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.sydney.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-demo.oregon.delivery.aimatch.net
tier1-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-euw1.ireland.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
*.aimatch.com
itv-tier1.ireland.delivery.aimatch.net
*.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.oregon-tier3.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
combinedloadtst.oregon.delivery.dev.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
itv-tier1.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tweety.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-tier2.oregon.delivery.aimatch.net
canary.oregon-tier3.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
*.dev.aimatch.com
ci-usw2.oregon.delivery.aimatch.net
tier2-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
*.aimatch.com
ci-aps1.mumbai.delivery.aimatch.net
ci-aps1.mumbai.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-apne1.tokyo.delivery.aimatch.net
ci-usw2.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
tier1-usw2.oregon.delivery.aimatch.net
tier1-apse2.sydney.delivery.aimatch.net
tier4-usw2.oregon.delivery.dev.aimatch.net
canary.oregon.delivery.aimatch.net
canary.oregon.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
canary.oregon.delivery.aimatch.net

Certificate

The complete raw certificate details for ci-aps1.mumbai.delivery.aimatch.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4SxnEM0Zua/GybcWIvh
SkrS+WF95H+UJuwX97X6y/B02ZsRok4Mw6jOEkG6ourfUl0ddZF3+RGmsRym3E6B
tV24Btjubtg7XOaUc3JToAo2S7/YruKVnK2C+ITlPNXr887Ciz8TaTm1SWEh+dZv
mgHimZsivesXbgAvpEz6mh/AA2SAfpFcsYy1zz7dSts9pAyURCJjoCtnrVDhlv6W
pyLNNp23GdVGEUVtev6N66JhU7GCVnlNBBoyB4F7ctQryYdqYfMyeAJD8cFRyC2C
NSWgQQKOpKmAqQjwcSAAFMnCQCrYv/bj2Iy+iyZApV80ptULxYTDDZMrPV9Bd9Rf
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4734010087303401108540548305953000114
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ci-aps1.mumbai.delivery.aimatch.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22662090335831716171430981357954228045562603273636332950094186057273377996858006490510481690872220857831060754072811275557718139736713665996642313979447755938865563575414322495476931889994729983173812751097180904079025359957887987823834244259701017739084956413659347919245792613827624169710635877974043941906272768984637860348663033191643499422477751723732011830140891239399226519630163662782784440175365142921155398299276283812285536419625316479082141443362374998296371896052921621250746013675924170884439901658066934019603700957132308063437517629265051814417816533303022645398503179026859821586573262928998248505137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5fa8579d69bf2b7fd1cb7e53c3f1c141983067ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (224 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-aps1.mumbai.delivery.aimatch.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery360.homecredit.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.gaintv.fixer.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.uatweb.sbigeneral.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.gain.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery360.homecredit.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-ci360.sbigeneral.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0036821e4f8c6801e1a3cd58384872ea467269eed4150687208a177c19eac61600b1c4c541b697df29bf0eca38a257ab5fea10545a197a74c3acf52f7fd5b9fda9b609677075c1f75b0690750994f130dbe5e7501aeccc7a766080fab01ca15f973687d5268243c03ce3746122c5faa8a82e521bcec8e97e0c93255bf229f1a2ab6ec5b5b0457df7a8292a30c8180e2f8f56c7c916a3c6bf3181a2b294bfd92e34ab39da3b6b278e8fddd496c9092674515ab5cb2dcdb501cf3de15f38733d291615d0fbb69ad85262edcf18124a36b786960e78c5bd88474d4ff42faed09b7abf1f0f9a527fdad4d6cf6d9ea6393ce8c044ce4458afd986f1d845055f1315444c