www.promozionelavoro.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:0e:f5:41:b7:6c:3b:d4:f6:d0:5c:1e:3c:f1:bb:19:e2:7b was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.promozionelavoro.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:0e:f5:41:b7:6c:3b:d4:f6:d0:5c:1e:3c:f1:bb:19:e2:7bSerial Number (int): 266426813010693103674211399289736380670587
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 71:72:71:92:18:b3:91:23:a2:90:3a:90:61:4e:a1:af:e5:c8:3b:0b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d0:97:27:6d:f3:89:f5:3e:60:3f:de:ff:11:02:77:74:4f:25:9d:83
Fingerprint (sha256): 1b:77:49:0e:10:9f:8d:68:40:15:85:e2:f3:f2:49:67:d8:b9:fa:80:e5:af:09:38:fa:27:7d:2d:96:18:f5:21
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.promozionelavoro.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.promozionelavoro.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.promozionelavoro.com
Other certificates including the domain name promozionelavoro.com
(limited to 100 certificates)
www.cruzeirocatolico.com
www.promozionelavoro.com
www.promozionelavoro.com
www.promozionelavoro.com
caprera.org
promozionelavoro.com
vmesto.com
promozionelavoro.com
www.promozionelavoro.com
promozionelavoro.com
promozionelavoro.com
promozionelavoro.com
promozionelavoro.com
mostgoodyoucando.com
78271.com
leproposte.com
www.promozionelavoro.com
carereport.online
promozionelavoro.com
www.promozionelavoro.com
www.promozionelavoro.com
www.promozionelavoro.com
caprera.org
promozionelavoro.com
vmesto.com
promozionelavoro.com
www.promozionelavoro.com
promozionelavoro.com
promozionelavoro.com
promozionelavoro.com
promozionelavoro.com
mostgoodyoucando.com
78271.com
leproposte.com
www.promozionelavoro.com
carereport.online
promozionelavoro.com
Certificate
The complete raw certificate details for www.promozionelavoro.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGaTCCBVGgAwIBAgISAw71QbdsO9T20FwePPG7GeJ7MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjcyMzAyMjhaFw0x OTA4MjUyMzAyMjhaMCMxITAfBgNVBAMTGHd3dy5wcm9tb3ppb25lbGF2b3JvLmNv bTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANn1TzyQUst6hUjYnrdL Y9AHB9ADTxJhH2l4I+caN4iXSt/h/cGpWslo6lfmPqvo8UgbG8OH6gY8tDuljIwF yuXSV1HiuN56mPv9eYxaKscoI4JCEvw7Re+PxFRvFpZfGIV2JDrWvELnSJug8xTM jvo80UafbBl8eOUJVitWSGYVTE0bEEQGHxvF+u9UsYNIk76v4yWoy6AMhuNjySMe WDbdi2k2M89uwDf26fGjhQAff0A6GI1aFBZTmkPcpuNU9mTSEuduFVURpZ7ABaVN eK+LWyhidPd/PRzfutp6JYTs6EhqzdO1A+0crtIPEaXWTl5F4+00mbKRQrhSJdV+ X6kgDaR7Ap7Z8ytL1G6fjjb0dS0pcMOg+WR3Nh5R3tFs0wLlfhre7hEWD6y6PGuR ZkY5u/HX2iYq/Jdajbb6n0dis8vPeVX+Eqh3ODVsbDa14NbLcD4FTTTH/YlY8rSE /IK72bM5OIUAE9hBA49zyjs2tC/jpNf1kkokJC+je4h6fBE9un6S0z2kJF2wj++t zuNikzpx7bZRidia+GXVwPC1L+W+C+DjvE6fIOzr+bpulKsDzTayvoPWIytETRM8 xB11uN4Ov9lOlMImKFUjeDEecwBiu/NisDQM7TitAxmkGlgKol/XI9rTBba2yqSx PfgVffXTg5Fhq4WgEZyrY06VAgMBAAGjggJuMIICajAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFHFycZIYs5EjopA6kGFOoa/lyDsLMB8GA1UdIwQYMBaAFKhKamMEfd26 5tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDov L29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDov L2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIYd3d3LnBy b21vemlvbmVsYXZvcm8uY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAdH7agzGtMxCRIZzOJU9CcMK//V5C IAjGNzV55hB7zFYAAAFq+77UPwAABAMARzBFAiEAhcYmTTVQLaNqTsQNry3Oujkx zeMzpzCUYqSWV4Gv5nACIF8Qtuoyy1hqQe3KsBzxjyBRAAeWzVyYUZ/HzWyapaqY AHcAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFq+77UYQAABAMA SDBGAiEA/G/Oa7vSPaj5YZJdRIBaj3hx6sf/e8T08QJqFiL+jt4CIQDkmhgMZcM9 YY9RQgiPaIllcNXNGcPtp+4RBHUGd7VexzANBgkqhkiG9w0BAQsFAAOCAQEAAgFw tCUcfONa+/m3BGJfXfnXAMaJfVLigb8Uwn6n1kiT9EmMfl6BaFwB6RC5EoJ7fJ23 jiiYCQYrm7Wwd+3kL1XKXwZVwuBStTu6Mtvt5QiFAwbu+7Kfk57kpVI98lDl3Brl PKpkZVhlNkdt4ndbJlUiPnwJldnDTfhULjreFK4i6s0j9bNZAT9f8clIxqUdAcjK vWr2tQDPypDJmxYvCgq29TkDXGTfuaoGRqS8yAvz5HayDnrbcGN/CuBSXex9FNL0 Q/Hhqo/ZCQX5hkLrb1O1PgoYR32FmL/EKhqFFmRDwrLadJdLOEaYFfBnShwEm7tN 8YXK4J+0cWilDViqew== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2fVPPJBSy3qFSNiet0tj 0AcH0ANPEmEfaXgj5xo3iJdK3+H9walayWjqV+Y+q+jxSBsbw4fqBjy0O6WMjAXK 5dJXUeK43nqY+/15jFoqxygjgkIS/DtF74/EVG8Wll8YhXYkOta8QudIm6DzFMyO +jzRRp9sGXx45QlWK1ZIZhVMTRsQRAYfG8X671Sxg0iTvq/jJajLoAyG42PJIx5Y Nt2LaTYzz27AN/bp8aOFAB9/QDoYjVoUFlOaQ9ym41T2ZNIS524VVRGlnsAFpU14 r4tbKGJ09389HN+62nolhOzoSGrN07UD7Ryu0g8RpdZOXkXj7TSZspFCuFIl1X5f qSANpHsCntnzK0vUbp+ONvR1LSlww6D5ZHc2HlHe0WzTAuV+Gt7uERYPrLo8a5Fm Rjm78dfaJir8l1qNtvqfR2Kzy895Vf4SqHc4NWxsNrXg1stwPgVNNMf9iVjytIT8 grvZszk4hQAT2EEDj3PKOza0L+Ok1/WSSiQkL6N7iHp8ET26fpLTPaQkXbCP763O 42KTOnHttlGJ2Jr4ZdXA8LUv5b4L4OO8Tp8g7Ov5um6UqwPNNrK+g9YjK0RNEzzE HXW43g6/2U6UwiYoVSN4MR5zAGK782KwNAztOK0DGaQaWAqiX9cj2tMFtrbKpLE9 +BV99dODkWGrhaARnKtjTpUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 266426813010693103674211399289736380670587 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 23:02:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 23:02:28 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.promozionelavoro.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 889192042133206435985802512007239154446135663755642499720792601885165220383652148513286167751852574170429237500373206937936442626915951114912327931214463645136884874974784175894132459829256860556848929503077611125920638585012017737880570436534897248923158437006823469879402764095211306324908046688897836143893749107825075879112401023603136545302382846124484682053525155389373863886144985120310523725227570115945031557157054236674210096544615983283682493380669212655330673560236374202098321000079608841612694835865461737804979078057701306324229510682326112548364187355144982145258934920926973781762163368247064452426137279840345610637962123816069364126212111542777497384310654342007640265067934013942389078771505022216093342333312723829210318418814058400703715896833150646738762740949735670757009308299290387141726671067311271269392670231136913048838697032777511725638852545852211488144488174555213630499806563180129622202404566533087757219622129292814092927660828650933294512897158859377048712615994385055675880308964664302710757206643613355183086574178948849847192620035752109738505487908083775516172045277150841993705612510551024572796354078231281396158499969885806454856489704092077089355750061727516044188224625362042262873394837 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7172719218b39123a2903a90614ea1afe5c83b0b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.promozionelavoro.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016afbbed43f000004030047304502210085c6264d35502da36a4ec40daf2dceba3931cde333a7309462a4965781afe67002205f10b6ea32cb586a41edcab01cf18f2051000796cd5c98519fc7cd6c9aa5aa98007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016afbbed4610000040300483046022100fc6fce6bbbd23da8f961925d44805a8f7871eac7ff7bc4f4f1026a1622fe8ede022100e49a180c65c33d618f5142088f68896570d5cd19c3eda7ee1104750677b55ec7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00020170b4251c7ce35afbf9b704625f5df9d700c6897d52e281bf14c27ea7d64893f4498c7e5e81685c01e910b912827b7c9db78e289809062b9bb5b077ede42f55ca5f0655c2e052b53bba32dbede508850306eefbb29f939ee4a5523df250e5dc1ae53caa6465586536476de2775b2655223e7c0995d9c34df8542e3ade14ae22eacd23f5b359013f5ff1c948c6a51d01c8cabd6af6b500cfca90c99b162f0a0ab6f539035c64dfb9aa0646a4bcc80bf3e476b20e7adb70637f0ae0525dec7d14d2f443f1e1aa8fd90905f98642eb6f53b53e0a18477d8598bfc42a1a85166443c2b2da74974b38469815f0674a1c049bbb4df185cae09fb47168a50d58aa7b