trackier.com
Issued by R3
About this certificate
This digital certificate with serial number 03:32:df:d6:20:aa:19:88:03:79:79:e5:5e:b4:63:f3:92:5b was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=trackier.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:32:df:d6:20:aa:19:88:03:79:79:e5:5e:b4:63:f3:92:5bSerial Number (int): 278648505798429222305653814565648670626395
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 8b:c4:61:70:1d:9d:f4:81:6d:e0:61:63:64:5c:3d:66:95:0d:19:a1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 24:2c:99:06:6c:f0:b4:5d:45:8d:41:86:cb:d7:d7:39:83:38:4c:e3
Fingerprint (sha256): 1c:4e:25:5b:6f:22:94:e0:df:55:ba:64:72:45:cd:77:de:d8:c5:73:5b:5c:72:4f:b6:1c:b5:e2:97:ab:88:08
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate trackier.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for trackier.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
trackier.com
www.trackier.com
www.trackier.com
Other certificates including the domain name trackier.com
(limited to 100 certificates)
links.chat.trackier.com
api.trackier.com
api.trackier.com
trackier.com
hr.azlabs.sg
clk.trackier.com
links.chat.trackier.com
*.trackier.com
*.trackier.com
apidocs.trackier.com
*.trackier.com
clk.trackier.com
apidocs.trackier.com
hr.azlabs.sg
*.trackier.com
api.trackier.com
apidocs.trackier.com
apidocs.trackier.com
*.trackier.com
apidocs.trackier.com
clk.trackier.com
*.trackier.com
apidocs.trackier.com
*.trackier.com
trackier.com
*.trackier.com
*.trackier.com
clk.trackier.com
links.chat.trackier.com
clk.trackier.com
api.trackier.com
apidocs.trackier.com
apidocs.trackier.com
links.chat.trackier.com
clk.trackier.com
apidocs.trackier.com
apidocs.trackier.com
apidocs.trackier.com
api.trackier.com
api.trackier.com
trackier.com
hr.azlabs.sg
clk.trackier.com
links.chat.trackier.com
*.trackier.com
*.trackier.com
apidocs.trackier.com
*.trackier.com
clk.trackier.com
apidocs.trackier.com
hr.azlabs.sg
*.trackier.com
api.trackier.com
apidocs.trackier.com
apidocs.trackier.com
*.trackier.com
apidocs.trackier.com
clk.trackier.com
*.trackier.com
apidocs.trackier.com
*.trackier.com
trackier.com
*.trackier.com
*.trackier.com
clk.trackier.com
links.chat.trackier.com
clk.trackier.com
api.trackier.com
apidocs.trackier.com
apidocs.trackier.com
links.chat.trackier.com
clk.trackier.com
apidocs.trackier.com
apidocs.trackier.com
apidocs.trackier.com
Certificate
The complete raw certificate details for trackier.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgISAzLf1iCqGYgDeXnlXrRj85JbMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MjMxODIwMjZaFw0yNDA3MjIxODIwMjVaMBcxFTATBgNVBAMT DHRyYWNraWVyLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOhn t3Dlg2mrSn+87I1aYFh1y0eRyiuBhc1NqBuT9yvNa7pvAR65k9WV8Ef3I/mLRwPn cPUwVZkE3IL6wm/LVkOmAUCsBL8OaZKczQHeQ8wQCbmX8cT7ZkqSQWPBJV2uA1cm OcOKi5qAWjlj21oAuFpFRLKUfx0odqRNXMw5MRqQtgzkaYagQiuPLlKv/GoYB59H 3XmzaEiEnO4xzgMxmiK0h6Zt2t5aQfehWtAok/fCPRKhQLcMFwtEkRh1V4Gre1wT inNZ2kvrp+KnfgwUDWOw7RM3jPrZLl7axeumjWDW/EwgBQXWGJe7XufqFr8Id3ca STjyAZksFcKYuqM6xHIKgzIFbOBBpEDXSNnOCPHlk/t386f5UNqvdNnetn++p4gx QQqCSg6UTJlWmLbO2yq6fxlWxvHKGlZPMuuH14c8wIO6m3JE3N1i/SosYUwXIKh4 35FLPGfZrr0VBV2toKAgvBVyQ9IOqhs52zfx7HA876kErEZIFS9M7mYSu0hC0lwj hDq1mUZG0KgoW5te/8Qbz8pKGcuutZtXK4X3OZl6H8yXpC4W2lOm816vr2NMrKjF LsqInc/0YAh7O/PPSEFJxb05dsvl1L464NdN244q0wdlSEbEh/L8zJj0b12LtZ05 jQ7jJVL4icjuc+qHmWkRojkcLt1Gt1q4q7rAcT/BAgMBAAGjggIgMIICHDAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFIvEYXAdnfSBbeBhY2RcPWaVDRmhMB8GA1UdIwQY MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v cjMuaS5sZW5jci5vcmcvMCkGA1UdEQQiMCCCDHRyYWNraWVyLmNvbYIQd3d3LnRy YWNraWVyLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIE gfUEgfIA8AB2AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABjwxm +gcAAAQDAEcwRQIgMD6wZJ89Uz6P6DpDdtB9tsnp2qlZ7iknOnDYJYTUIFwCIQCq bGnsyOjalmuW0Lr+L7ZFCk+ztYvFfy5B4/BaXq0C9QB2AN/hVuuqBa+1nA+GcY2o wDJOrlbZbqf1pWoB0cE7vlJcAAABjwxm+skAAAQDAEcwRQIhAP8Rgrc5hp/OL+Iv 2GoZFsS5WJuF9rjKMt1l4RHKJRNsAiBhJKN/jCTyny8j8ZMuXTXio0jjuHF1HCOx fwqyG9SCiDANBgkqhkiG9w0BAQsFAAOCAQEAezxbyXOEdHejyROPzRRXL5B2E1Yj r2ZJM3xrrzvdFa+9PrcGX+iw8/qg0sriXBx8OpgQDuzG36Ry6oq0VbkRAsrs15aX /ZGhmAKMTfu4ek6DgUj27fslQo8dmb2q9CfUPIrfpeMVn8BchjX3p/eZIkg0jX7V fjhNMfe3tIGHfXwaxIbvdHtZkr3Sp7bjsdn6y/nLLE1Kv5GUnK5SNhAld+x9Dx93 yFGawGsn75aTwpJZJysh9gPhGgqemt9SZw9JED5+fPLeKeM3BQ4ieRDu/CMKruEu PIJ9kzP7wjRrk9zM0w3VvZEhRqLgf9MY+Qr8eKOsYJ+5NBAUSVUppXv0uQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6Ge3cOWDaatKf7zsjVpg WHXLR5HKK4GFzU2oG5P3K81rum8BHrmT1ZXwR/cj+YtHA+dw9TBVmQTcgvrCb8tW Q6YBQKwEvw5pkpzNAd5DzBAJuZfxxPtmSpJBY8ElXa4DVyY5w4qLmoBaOWPbWgC4 WkVEspR/HSh2pE1czDkxGpC2DORphqBCK48uUq/8ahgHn0fdebNoSISc7jHOAzGa IrSHpm3a3lpB96Fa0CiT98I9EqFAtwwXC0SRGHVXgat7XBOKc1naS+un4qd+DBQN Y7DtEzeM+tkuXtrF66aNYNb8TCAFBdYYl7te5+oWvwh3dxpJOPIBmSwVwpi6ozrE cgqDMgVs4EGkQNdI2c4I8eWT+3fzp/lQ2q902d62f76niDFBCoJKDpRMmVaYts7b Krp/GVbG8coaVk8y64fXhzzAg7qbckTc3WL9KixhTBcgqHjfkUs8Z9muvRUFXa2g oCC8FXJD0g6qGznbN/HscDzvqQSsRkgVL0zuZhK7SELSXCOEOrWZRkbQqChbm17/ xBvPykoZy661m1crhfc5mXofzJekLhbaU6bzXq+vY0ysqMUuyoidz/RgCHs7889I QUnFvTl2y+XUvjrg103bjirTB2VIRsSH8vzMmPRvXYu1nTmNDuMlUviJyO5z6oeZ aRGiORwu3Ua3WrirusBxP8ECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 278648505798429222305653814565648670626395 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 18:20:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-22 18:20:25 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trackier.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 948130262354607223320916382108384182875430278176973926947179486209121321643955630398792292784326601595999196487121709498195917909319148392199907218852633518576784505713510926830983036552784450227473964640958952187774760045328965812026221005070476703413622341456898061215341487662675973634891918435852774210765656429891378443890553330908378706567604041865538861195846434198104305035674193426139668740305378407192611997739343044928233396943949675859025328444830209364441440834046690037710548359052920386355139996806064998077518479995680189394082856417508876177774964080287962419217094673996297259852478440352784139119418793282382145018340463203254697095866372163027772623908350364954578028775550917412112756008763830365184226734022342862178186280425533959747311841940809376794251226464759283192032836835354155817048038129577735405105568160194329381185065780158859534015480087945672627114787510440256246117672812577805419940907987451718655111661394810629695205909749958311584839314156653896630347719369754265008142192361169450746475225869233037004946530615821394074141942860973320020175845466082331113787054785423261897819829655945711057617497678542466348080309681833816936441155785207381139705735873640757835362709314333149756491120577 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8bc461701d9df4816de06163645c3d66950d19a1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trackier.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trackier.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f0c66fa0700000403004730450220303eb0649f3d533e8fe83a4376d07db6c9e9daa959ee29273a70d82584d4205c022100aa6c69ecc8e8da966b96d0bafe2fb6450a4fb3b58bc57f2e41e3f05a5ead02f5007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f0c66fac90000040300473045022100ff1182b739869fce2fe22fd86a1916c4b9589b85f6b8ca32dd65e111ca25136c02206124a37f8c24f29f2f23f1932e5d35e2a348e3b871751c23b17f0ab21bd48288 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007b3c5bc973847477a3c9138fcd14572f9076135623af6649337c6baf3bdd15afbd3eb7065fe8b0f3faa0d2cae25c1c7c3a98100eecc6dfa472ea8ab455b91102caecd79697fd91a198028c4dfbb87a4e838148f6edfb25428f1d99bdaaf427d43c8adfa5e3159fc05c8635f7a7f7992248348d7ed57e384d31f7b7b481877d7c1ac486ef747b5992bdd2a7b6e3b1d9facbf9cb2c4d4abf91949cae5236102577ec7d0f1f77c8519ac06b27ef9693c29259272b21f603e11a0a9e9adf52670f49103e7e7cf2de29e337050e227910eefc230aaee12e3c827d9333fbc2346b93dcccd30dd5bd912146a2e07fd318f90afc78a3ac609fb9341014495529a57bf4b9