api.spaceslife.com

Issued by GTS CA 1D2

About this certificate

This digital certificate with serial number 66:8f:20:95:f1:b0:d0:73:0a:00:00:00:00:15:8d:d9 was issued on by Google Trust Services.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.spaceslife.com

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 66:8f:20:95:f1:b0:d0:73:0a:00:00:00:00:15:8d:d9
Serial Number (int): 136324414937735073551428966474367471065
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 70:78:13:64:36:3c:fa:ac:d0:f2:55:83:df:45:40:5c:85:1c:7c:b9
AuthorityKeyId: b1:dd:32:5d:e8:b7:37:72:d2:ce:5c:ce:26:fe:47:79:e2:01:08:e9

Fingerprint (sha1): b3:0f:61:f0:3e:c8:1d:65:01:94:ca:26:5c:e5:5a:60:64:7a:5f:c5
Fingerprint (sha256): 18:6d:53:b5:52:3a:ba:0b:a6:c5:70:b8:a2:b4:79:2c:70:75:12:39:28:64:26:be:8e:3c:8a:3f:b9:f0:0b:80

Issuing Certificate URL: http://pki.goog/gsr2/GTS1D2.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1d2
CRL Distribution Point: http://crl.pki.goog/GTS1D2.crl

Check the revocation status for certificate api.spaceslife.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.spaceslife.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.spaceslife.com

Other certificates including the domain name spaceslife.com

(limited to 100 certificates)
stage.loadsecuresystems.com
spaceslife.com
spaceslife.com
remote.kioskmodelockdown.com
www.spaceslife.com
api.spaceslife.com
www.spaceslife.com
api.spaceslife.com
education.finance
www.luisboccuti.com
dev.letusfix.ca
www.chopstickfl.com
magic.spaceslife.com
www.dirbiaberanbesayaser.com
api-dev.nava.app
tannda.kz
weaver.jool.nl
saab340.tk
spaceslife.com
magic.spaceslife.com
www.tnirps.com
spaceslife.com
www.chopstickfl.com
spaceslife.com
www.dev.bc4t.com
www.spaceslife.com
api.spaceslife.com
capital-advisory.de
www.dotuntalabi.ca
chatbot.test.stickybeak.co
ariamerican.com
cincta.nl
spaceslife.com
www.tnirps.com
spaceslife.com
uat.ichitanoneshop.com
www.spaceslife.com
apaz074.com
nomaslibro.cl
cliffhangerinteractive.com
midwaydigital.com.au
www.apicompass.com
easypub.com.br
www.spaceslife.com
dev.spaceslife.com
corsi.ibisoft.it
nappn.kognitivet.se
api.spaceslife.com
matthewwillse.com
app.maissustentavel.online
uat.ichitanoneshop.com
meaghanabra.com
apaz074.com
api.spaceslife.com
packndgo.com
spaceslife.com
login.carry.bible
api.spaceslife.com
tannda.kz
www.spaceslife.com
spaceslife.com
www.jobbi.at
console.deepq.com
jeesab.com
squidloyalty.app
notinourscene.com
spaceslife.com
www.spaceslife.com
spaceslife.com
www.exhibited.co
dayalcablenetwork.com
trial.cubicunit.com
api.spaceslife.com
hammer-carreer.slickteam.fr
nexflix.stephenlittleton.com
spaceslife.com
stats.jodacare.com
taahabinkhalid.com
enganchate.com.co
account.insuranceinbox.com
hammer-carreer.slickteam.fr
api.spaceslife.com
www.cloudpossystem.com
api.spaceslife.com
servicemarket.camaradly.com
spaceslife.com
mexe-mexe.com
writing.andybons.com
marroquinera-staging.technoapes.io
dockethq.com

Certificate

The complete raw certificate details for api.spaceslife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIQZo8glfGw0HMKAAAAABWN2TANBgkqhkiG9w0BAQsFADBC
MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZpY2VzMRMw
EQYDVQQDEwpHVFMgQ0EgMUQyMB4XDTIwMDIxNTIyMDIzNVoXDTIwMDUxNTIyMDIz
NVowHTEbMBkGA1UEAxMSYXBpLnNwYWNlc2xpZmUuY29tMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEA2MCw1jCeIqkrE72um9pdvR7tepc7K6B8E1HRfp3L
E4j3ro8Y0OjpKAEJhk8S9F8juRj5Ie+4Gh6pxy8LzoONwpSuvdwQTMI0XN7ZrR3p
WyLZpHCdZcogVQLao/tSZa9bL+PwYDss8lvmNLz7gRg3CZ1O1NBAB/5XGJG72oN5
83sx13xDuMoewuiusChQRDkF1oES+flvxYf3LpZ3LTV+pFPGeiSX0IrrDHLS4sUy
BvRt7azVUwHAGppfL3U9DCBLmh2ZhkFby2JyYSaWtO4BvC3N8QLA0TcJX3+kEE4q
Dive9Il4CEvOM2PylgL4ftk3IbH0/lA15V9vOrTAz8zrTQIDAQABo4ICWDCCAlQw
DgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFHB4E2Q2PPqs0PJVg99FQFyFHHy5MB8GA1UdIwQYMBaAFLHd
Ml3otzdy0s5czib+R3niAQjpMGQGCCsGAQUFBwEBBFgwVjAnBggrBgEFBQcwAYYb
aHR0cDovL29jc3AucGtpLmdvb2cvZ3RzMWQyMCsGCCsGAQUFBzAChh9odHRwOi8v
cGtpLmdvb2cvZ3NyMi9HVFMxRDIuY3J0MB0GA1UdEQQWMBSCEmFwaS5zcGFjZXNs
aWZlLmNvbTAhBgNVHSAEGjAYMAgGBmeBDAECATAMBgorBgEEAdZ5AgUDMC8GA1Ud
HwQoMCYwJKAioCCGHmh0dHA6Ly9jcmwucGtpLmdvb2cvR1RTMUQyLmNybDCCAQQG
CisGAQQB1nkCBAIEgfUEgfIA8AB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJ
Uy3vi5BeAAABcEsW4q0AAAQDAEcwRQIgexGmi3+ascpJw7pot+5wyBiaw4Mfi9uF
d7dQUrRZw9cCIQDMp5SzqqHLQx/VTt62+Ewh2Gg5gemHlQKVWPtRpSp3TQB2AF6n
c/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABcEsW4tIAAAQDAEcwRQIg
E7E9BwYi8avj3LEXQvBJ3oMEckuW4zjQXNFJwL6nMGoCIQDGDjhuB/Qh2uB6kVWE
i9eF8BZCnu321oAC03/3qZ2bjjANBgkqhkiG9w0BAQsFAAOCAQEAdZIrtYFOqJFm
60fKsHqvSkUY0lxzHpala1DwHnS6VTqCtpJUMKNjMvmxDvnxKaTzdu6CCz3YFg8C
hKwi4Uzwr+o4PlmKsz6IPlSMXdKfrr8MJE/RmUapzVle8pe1bHKi7J2ksbYngP45
b3DQ+d6ySL+8BulG/w8l6Rhbdat9GQ1PPZEPqX7R0GvqpyRQd/1XdJseJX0kRCvM
IdYkqNcAmK4VKDi29MnxUIbmOwRrpcoYiB3qWtZof608pvuWOZ5NpcVpsNo7dy1C
kwifmEyXpexjxmqGWpvZUlAh3CYb16e8ltWDvJwK9As3kcFqnf3G4vowrNJSfWkr
s3totoNahg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MCw1jCeIqkrE72um9pd
vR7tepc7K6B8E1HRfp3LE4j3ro8Y0OjpKAEJhk8S9F8juRj5Ie+4Gh6pxy8LzoON
wpSuvdwQTMI0XN7ZrR3pWyLZpHCdZcogVQLao/tSZa9bL+PwYDss8lvmNLz7gRg3
CZ1O1NBAB/5XGJG72oN583sx13xDuMoewuiusChQRDkF1oES+flvxYf3LpZ3LTV+
pFPGeiSX0IrrDHLS4sUyBvRt7azVUwHAGppfL3U9DCBLmh2ZhkFby2JyYSaWtO4B
vC3N8QLA0TcJX3+kEE4qDive9Il4CEvOM2PylgL4ftk3IbH0/lA15V9vOrTAz8zr
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 136324414937735073551428966474367471065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 22:02:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 22:02:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.spaceslife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27362493231926907734271890962455997851821431595343228273426671133588996298002964830956192679769292592489970847285520769839180678424520987419146947845950521642701185518523548583776983868879023197738062982567398011517903739912506085216372210724506417443962699536352818499086914171347645021934465319090449346304655618089421302117466141490972297888033429464578457361743019878632108716325944562564104493642929398411844828957495074170116403591796320657810887712182795111065623087553211228573078921567425610138267964497851526047100336639627075827934277022864091470923006429817702047758160614586970964938712297003696039717709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70781364363cfaacd0f25583df45405c851c7cb9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b1dd325de8b73772d2ce5cce26fe4779e20108e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1D2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.spaceslife.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1D2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001704b16e2ad000004030047304502207b11a68b7f9ab1ca49c3ba68b7ee70c8189ac3831f8bdb8577b75052b459c3d7022100cca794b3aaa1cb431fd54edeb6f84c21d8683981e98795029558fb51a52a774d0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001704b16e2d20000040300473045022013b13d070622f1abe3dcb11742f049de8304724b96e338d05cd149c0bea7306a022100c60e386e07f421dae07a9155848bd785f016429eedf6d68002d37ff7a99d9b8e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0075922bb5814ea89166eb47cab07aaf4a4518d25c731e96a56b50f01e74ba553a82b6925430a36332f9b10ef9f129a4f376ee820b3dd8160f0284ac22e14cf0afea383e598ab33e883e548c5dd29faebf0c244fd19946a9cd595ef297b56c72a2ec9da4b1b62780fe396f70d0f9deb248bfbc06e946ff0f25e9185b75ab7d190d4f3d910fa97ed1d06beaa7245077fd57749b1e257d24442bcc21d624a8d70098ae152838b6f4c9f15086e63b046ba5ca18881dea5ad6687fad3ca6fb96399e4da5c569b0da3b772d4293089f984c97a5ec63c66a865a9bd9525021dc261bd7a7bc96d583bc9c0af40b3791c16a9dfdc6e2fa30acd2527d692bb37b68b6835a86