ctjssl.com

- Cybertrust Japan Co.,Ltd. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0c:c2:9d:9a:2b:92:ab:78:dd:49:4d:fd:74:dc:68:d4 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cybertrust Japan Co.,Ltd.

Organization: Cybertrust Japan Co.,Ltd.
State / Province: Tokyo
Locality: Minato-ku
Country: JP

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:c2:9d:9a:2b:92:ab:78:dd:49:4d:fd:74:dc:68:d4
Serial Number (int): 16961238092904715889949945211268131028
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b9:30:ce:f6:46:3d:79:a9:d7:0a:bc:83:8c:fe:f3:fe:0a:b8:2d:45
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 3a:fb:47:50:b8:dc:cc:06:3a:81:99:ac:4e:a1:d3:31:ca:93:ff:65
Fingerprint (sha256): 17:ea:e0:65:17:ab:08:80:d4:4f:26:3a:fb:6e:5d:af:ae:c4:d3:71:17:23:cc:4a:ca:c8:da:3b:c0:a4:23:1f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate ctjssl.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ctjssl.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ctjssl.com

Other certificates including the domain name ctjssl.com

(limited to 100 certificates)
test1129.ctjssl.com
SCT02-SSG3-S-A2-B1-C1.ctjssl.com
www.ctjssl.com
cttest2.ctjssl.com
SCT02-SSG3-F-A2-B0-C1.ctjssl.com
mdcn.evecc.ctjssl.com
syschk.ctjssl.com
syschk.ctjssl.com
cybertrust-global-root-expired.chain-demos.ctjssl.com
cybertrust-global-root-expired.chain-demos.ctjssl.com
SCT02-EVG2-F-A2-B0-C0.ctjssl.com
www.ctjssl.com
syschk.ctjssl.com
tls12apc.ctjssl.com
mdcn.evecc.ctjssl.com
mdcn.evrsa.ctjssl.com
idv.test.ctjssl.com
www.ctjssl.com
1yov.ctjssl.com
ctjssl.com
ctjssl.com
syschk.ctjssl.com
new-evcag2.ctjssl.com
*.ctjssl.jp
www.ctjssl.com
SCT01-EVG2-F-A1.ctjssl.com
shoov1y.ctjssl.com
ctjssl.com
1y.ctjssl.com
test2.ctjssl.com
letest.ctjssl.com
new-evcag2.ctjssl.com
test1129.ctjssl.com
27ct3.ctjssl.com
ctjssl.com
14ct2.ctjssl.com
evsha1xct.ctjssl.com
clubss.chk.ctjssl.com
ssevg3.ctjssl.com
ctjssl.com
ssev1s.ctjssl.com
ssovg4cross.ctjssl.com
ssov6m.ctjssl.com
syschk.ctjssl.com
cybertrust-global-root-revoked.chain-demos.ctjssl.com
img03.ctjssl.com
sxgev.ctjssl.com
1yev.ctjssl.com
SCT01-EVG2-F-A2-B1-C0.ctjssl.com
sealtest4.ctjssl.com
ssovg4cross.ctjssl.com
ssevg3cross.ctjssl.com
ssov1y.ctjssl.com
sealtestmain.ctjssl.com
ctjssl.com
ctjssl.com
ctjssl.com
syschk.ctjssl.com
imgdc.ctjssl.com
incapsula.com
syschk.ctjssl.com
ctjdcov.ctjssl.com
img03.ctjssl.com
test1129.ctjssl.com
ovtest01.ctjssl.com
img01.ctjssl.com
*.20170802.ctjssl.com
evsha2xct.ctjssl.com
cloud.ctjssl.com
ctjssl.com
mdcn.evecc6.ctjssl.com
*.ctjssl.com
oldee-evcag2.ctjssl.com
img08.ctjssl.com
cttest2.ctjssl.com
test1129.ctjssl.com
new-evcag2.ctjssl.com
img.ctjssl.com
img06.ctjssl.com
evsha2xxct.ctjssl.com
ssov1s.ctjssl.com
hoov1y.ctjssl.jp
letest.ctjssl.com
img08.ctjssl.com
ssevg3-revoked.ctjssl.com
evchk1.ctjssl.com
ctjssl.com
shoov1y.ctjssl.com
sbov1y.ctjssl.info
cttest1.ctjssl.com
test1129.ctjssl.com
test1129.ctjssl.com
tls12ngx.ctjssl.com
shoov1y.ctjssl.com
ssovg4-misschain.ctjssl.com
*.ctjssl.com
idvckev.ctjssl.com
evsha2gbcns.ctjssl.com
ctjssl.com
new-evcag2.ctjssl.com

Certificate

The complete raw certificate details for ctjssl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshp+gtS1Jgc6vmP3g56M
5kzqLIq6ltbPwPUOj0q2u5gfk1zCjhqDyzPt6+aURbg3fBcNPAHYfjlFC0NPw+cm
dncgZ3TgRZZHcbjHEy3K/4gFa8ZXfO4kmQSJD3IznIYfC453iJSyVReGyaFfiDWG
IuDY6j5NMSlhhVPA+WLYNtIkR31CXDPgNBa/a4nCAljh75Uzr3uve4CQnEY2+vfQ
kf8tVBGGxzg7HBRtY1k/LKXraf/2ceXjgVfhHKXud43Vs3X1D4wLtOzoMPiAjiSa
npBrEo25rfLOGmSUtf88q5346BzdFv5Nx0g4dLSELZboSVhP/QhIzIuO0znbxE+u
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16961238092904715889949945211268131028
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minato-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust Japan Co.,Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ctjssl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22483483052931148078202938219537960988839522201645062098739059684076461854655293139997268971551584343303017017661040746304131936631653134307159012424052346439548450320067427675280693211858929049380064989680733386377076629695393380113128587474726195166087742904197551171517473291282284430373998776795633226668722326068620201641408964994265915684530065345825422521665346019906377346587105156603388690690721680324402551826754490466260257422788412287998372781990988287742983017389251360125367336321062162994355965768674369333573957190592062542968457589050677038039290861543712714592701327712376656919333655214782438944417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b930cef6463d79a9d70abc838cfef3fe0ab82d45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctjssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ac7d2079310434c9e8c4d53421b0830653c481452edb4d169aba59c6ab323b88d93fb7ec533ae23763b4f7b90e2124bcbcf813fb75f23616887489ee2bdea15cc6e72c35d5e3c846343394651d4ad77ec622e879265b121ad495afbea9fc1c331b9197998164f1d4e7111dd72b1edce1ceba0852b578dc3320440d4083c7a4f2d61c9f0f0ce2e1ebd9dd20b8ba3b93b13b10c419e48d6b17635dee1928d7e650f0c2421d069b4644f13187270dd3d954984377eacb22e4dc8b96f13747852d6d8c15dbd6b29eacb3c1a769d523ec74acef42ff933edfa96d242dbac1e42a818a77956cd6116fc5f451e820390ccd561991af15aac89ce3b9eb3e7ec44df0f7a2