ms-invoice.billing.tecalis.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number d7:25:7c:10:c0:f9:46:69:10:1a:87:07:0e:30:71:b6 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ms-invoice.billing.tecalis.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d7:25:7c:10:c0:f9:46:69:10:1a:87:07:0e:30:71:b6
Serial Number (int): 285978650423686631250440730073019478454
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a4:ea:46:01:d9:c6:b6:b0:a3:2c:2a:93:e4:23:73:90:ed:a1:c9:ab
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 94:90:55:fd:92:17:62:77:52:43:13:86:57:39:04:67:8e:97:e3:12
Fingerprint (sha256): 1a:c8:57:ee:2d:c2:62:bd:85:e2:76:fe:ad:f9:52:64:09:8a:98:04:1d:1e:df:c3:6b:fc:72:26:a0:8d:3e:ad

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/ge4helFmjsk
CRL Distribution Point: http://crls.pki.goog/gts1d4/14ud8AuodEY.crl

Check the revocation status for certificate ms-invoice.billing.tecalis.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ms-invoice.billing.tecalis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ms-invoice.billing.tecalis.com

Other certificates including the domain name tecalis.com

(limited to 100 certificates)
*.dev.tecalis.com
admin.fanimals.co.nz
www.moonlocker.org
notes.andymatuschak.org
livestreamja.com
floresdelalma.net
wactrivia.sqwadhq.com
bubblewoods.games235.com
fleetingpixels.com
emvento.com
infinite-ux.tecalis.com
ms-invoice.billing.tecalis.com
nordahl.vetspire.com
jamesstuddart.co.uk
ask.jefry.ro
app.bkbn.com
account.tecalis.com
plumasense.com
bethanywhitfield.com
panel.localrocket.me
portal.camresp.com
info.kokoperi.cc
atlantikwall.orpheo.cloud
beta.b2b4-check.com
azure-lcw.tecalis.com
*.dev.tecalis.com
tnlvsnltd.danno.nz
agenciadesegurosprogreso.com
alencar.site
sksis.ca
stageverslag.florisschippers.nl
Tecalis Software S.L.
lcw-a.l.tecalis.com
links.giraffemoney.app
review.test.orangeroofs.co.uk
link.hkilter.com
pshop.hcmpost.vn
bo.kypsafe.com
www.sorrisihair.co.za
bubblewoods.games235.com
Tecalis Software S.L.
link.hkilter.com
*.dev.tecalis.com
app.yuyusystem.com
www.iceberg-technology.com
nordahl.vetspire.com
meetings-staging.work.life
front.c2c.tecalis.com
company.dbr.mn
admin.run.phuket.run
cubsstatues.com
studio-dev-eu.captego.com
www.chusenya.com
m.tecalis.com
*.tecalis.com
app.keneyafura.ml
jamesstuddart.co.uk
kokoroba-zyusetsu.com
app.overhq.com
playlistpunch.gungo.dev
carnival.mediabrands.com.au
azure-lcw.tecalis.com
arsinha.com
ecomdyno.com
istp.anjaconline.org
m.tecalis.com
www.teahouseai.com
gitlab.tecalis.com
inanity.io
asmr.bid
ismailhsici.com
azureadministratorexamprep.com
www.kovanlabs.com
m.tecalis.com
plumasense.com
pod.getraddle.com
docs.globalconsent.com
staging.activerecall.com
fizykaolimpijska.pl
sheets.songtreasures.app
mappings.rinkt.com
m.tecalis.com
www.ptruong.com
*.srv.tecalis.com
*.dev.tecalis.com
admin.fanimals.co.nz
istp.anjaconline.org
admin.billing.tecalis.com
www.brianalterescu.com
carnival.mediabrands.com.au
arsat.lambdagis.net
staging.pickle.bet
ms-esign.bridge.api.tecalis.com
app.crazymaster.space
doc.signature.tecalis.com
www.studiofoxxx.com
www.physicalexam.online
admin.o2sales.tecalis.com
site.tecmash.com.br
*.dev.tecalis.com

Certificate

The complete raw certificate details for ms-invoice.billing.tecalis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEjjCCA3agAwIBAgIRANclfBDA+UZpEBqHBw4wcbYwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjMxMjA0MTYzNjA2WhcNMjQwMzAz
MTcyMjU2WjApMScwJQYDVQQDEx5tcy1pbnZvaWNlLmJpbGxpbmcudGVjYWxpcy5j
b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCchRfn66pIvwVC1Eyt
ro5E6jKbXsvLH2ZHYlEWOMeWXaFMYKTxd74izYyv8wwcsB9s6pquF3QbCWgKAGZv
EhKyAsYaVudP4XaK6RuxU0ir2TSAfhwtVke0euFwUUUZ2NArkoc+o43zRIDxXnN5
nUbvFNzUenGYKW8LIivYYcfgRKhHeafUDOchy2J0eLap9ds/4Qj/S9DX189BO7+2
3a1mlP6IXMv34O9srbK/tM9Q1VaElFagPnS2HV3pNVazEqL5gqM80GfaD+QABWf9
rzQLvuQ1tzz2oEsRqJJa9zM6nMyQBPQB8TEtcrmWlBnxhPTswXvNSDbo5v0cwBfx
pV7VAgMBAAGjggGSMIIBjjAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYB
BQUHAwEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUpOpGAdnGtrCjLCqT5CNzkO2h
yaswHwYDVR0jBBgwFoAUJeIYDrJXkZQq5dRdhpCD3lOzuJIweAYIKwYBBQUHAQEE
bDBqMDUGCCsGAQUFBzABhilodHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFkNC9n
ZTRoZWxGbWpzazAxBggrBgEFBQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2Vy
dHMvZ3RzMWQ0LmRlcjApBgNVHREEIjAggh5tcy1pbnZvaWNlLmJpbGxpbmcudGVj
YWxpcy5jb20wIQYDVR0gBBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNV
HR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxZDQvMTR1ZDhB
dW9kRVkuY3JsMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBjIha24JvTMvrKDkxulRhETH4LSV5+HS5Bo9Z5w1Xkerbui6PL1ybVtgtgLQWY
iXmNAy7S1GViISs/kZO/L0r7Gfo15OHmjZM+73lBrEXF8ukPMrex7mEg3TNIjqLf
ocbqCrmbZ2wwjYr8PWaklMcScSwo0J33V5xoPHTWvJY30lUOV6GtxcXUBpqkjPBN
QTMV45SGByUPiFJC+z1f3QNYJyfhxQpuNQYyrKbP/H05+c4irKqU8QJ7AUvw8zrp
109BfCrb0wXeOzffEhFplTuFs2sKMjngCcGGz3T++YVjQxE1vJyaYrnbgFnFrrLU
UKi3ntqVJtwr4ugk04Ag1efu
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIUX5+uqSL8FQtRMra6O
ROoym17Lyx9mR2JRFjjHll2hTGCk8Xe+Is2Mr/MMHLAfbOqarhd0GwloCgBmbxIS
sgLGGlbnT+F2iukbsVNIq9k0gH4cLVZHtHrhcFFFGdjQK5KHPqON80SA8V5zeZ1G
7xTc1HpxmClvCyIr2GHH4ESoR3mn1AznIctidHi2qfXbP+EI/0vQ19fPQTu/tt2t
ZpT+iFzL9+DvbK2yv7TPUNVWhJRWoD50th1d6TVWsxKi+YKjPNBn2g/kAAVn/a80
C77kNbc89qBLEaiSWvczOpzMkAT0AfExLXK5lpQZ8YT07MF7zUg26Ob9HMAX8aVe
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285978650423686631250440730073019478454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 16:36:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 17:22:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ms-invoice.billing.tecalis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19758806367747024745389288176566464275004383136032171992409636564354030460472299828930010804463331022178270149190204298454985159031791120393902696312399296461346383540723284695449663701526892985787352722421222834122048211143709439295176267582543505534830929185938951592332769978783318240119458604516296158008625840225261944627781118646392850583035851115082842419583458119013756704189684685337609797187727978678736556299913000053240025848067694279314238308496438151690805151732995407271741810782447389765886662926346313739891105341414562516624716454385901641863683622620550359273283694726400873708862463780380800802517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4ea4601d9c6b6b0a32c2a93e4237390eda1c9ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/ge4helFmjsk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms-invoice.billing.tecalis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/14ud8AuodEY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00632216b6e09bd332faca0e4c6e9518444c7e0b495e7e1d2e41a3d679c355e47ab6ee8ba3cbd726d5b60b602d059889798d032ed2d46562212b3f9193bf2f4afb19fa35e4e1e68d933eef7941ac45c5f2e90f32b7b1ee6120dd33488ea2dfa1c6ea0ab99b676c308d8afc3d66a494c712712c28d09df7579c683c74d6bc9637d2550e57a1adc5c5d4069aa48cf04d413315e3948607250f885242fb3d5fdd03582727e1c50a6e350632aca6cffc7d39f9ce22acaa94f1027b014bf0f33ae9d74f417c2adbd305de3b37df121169953b85b36b0a3239e009c186cf74fef98563431135bc9c9a62b9db8059c5aeb2d450a8b79eda9526dc2be2e824d38020d5e7ee