newtunes.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:38:15:80:c5:33:df:f6:c8:4f:0f:0e:9c:5f:9f:2f:e3:19 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=newtunes.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:38:15:80:c5:33:df:f6:c8:4f:0f:0e:9c:5f:9f:2f:e3:19
Serial Number (int): 280421252744507311291568122591801729082137
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7c:26:75:0d:6f:c3:76:e5:89:b1:0f:21:d1:59:7d:75:f2:c8:a9:d1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9b:a6:7a:82:55:43:b6:5b:62:e2:b5:fc:24:d5:96:72:a6:51:b1:5f
Fingerprint (sha256): 1d:80:41:62:ac:f1:a8:eb:c4:c8:08:16:63:dd:cc:3f:ca:8e:af:78:1e:05:19:77:94:3d:cf:d6:31:c0:d2:c3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate newtunes.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for newtunes.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.newtunes.ca
newtunes.ca

Other certificates including the domain name newtunes.ca

(limited to 100 certificates)

Certificate

The complete raw certificate details for newtunes.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgISAzgVgMUz3/bITw8OnF+fL+MZMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDEwOTM4NDNaFw0y
MDAyMjkwOTM4NDNaMBYxFDASBgNVBAMTC25ld3R1bmVzLmNhMIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEA1VqaEpm+bsldkjIsCYC3gLZZHIOTCOXDwtal
v4Q43hg54J1sDHpV2ywrELTvlk/QNkRTDyc03GTy0pCFHEt97Th0V/tXuM2vjOVz
2XW7DQ8c/cXhaPusxzzo8iNf+KcNhg/toJbajgjpZJBU8qDnWdENN11ZIkm9SNiN
wqhDmgPykNjdTnym8+v52IMftGj1+uzupqNG5txSh3mFBUP6DBNi/KTvz+smfPSQ
ZrMw8R1oGjWRhaxwveyAH69YRjbW2KU+5Ggzp5syWM3y5t6AuP9NBQIM3redtCoK
Ob5nEmrXxHXk+pVBkXLlUl0YExG4IEPl9PVM8gSNoetpLW3x1DZWMMaQ090+rI8S
STfqfMQrFhly+rGETNc+cTK4xiJ5xcAYFONxhFC9PDoh/RSkOScEwtOiS4CmVqF5
9IFcbUBdWRyBOcjf7u17vcaXxBhfF/DAQVTSR/jiKs0N+HBMqCn8rxeU8uS9dUYx
26UvZwGaA+VQa7HJXfagro5UcKF6t3SiYma5szs/PAySd0d99zeYFqgdd5W3IVWB
YYKxgwCqP+S0PIuuo6riPr4TpFI0mQ/kjBIp+VUX9DeyMV8rHVlNHZrRHd/bKOFp
DFexizKR37H86IgWYQswGyXeb+hwOOnkMO4Dsc8gpJ7w+w+0VGVtJ5nCpF5d9xdQ
gn/RLu0CAwEAAaOCAm4wggJqMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUfCZ1DW/D
duWJsQ8h0Vl9dfLIqdEwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzAlBgNVHREEHjAcgg0qLm5ld3R1bmVzLmNhggtuZXd0
dW5lcy5jYTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYG
CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB
1nkCBAIEgfQEgfEA7wB2AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVY
AAABbsEKiPIAAAQDAEcwRQIgd6RZeVs0JVc9+qcwoKFd+7NZywi4uVQiZ8q3+7BN
FSgCIQCueOOAbsAmI1q7g+cJnSTwUMLxWVx0D5u+wvsfnUvxRQB1ALIeBcyLos2K
IE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABbsEKiO4AAAQDAEYwRAIgetdTRRkc
O2+9cFftE2mFhKvD9OZkQaysPcHYPs71o78CIGv42Y2IMaJPbmWd5B/unfF3ctGY
pUcR8myw6KDnhW1zMA0GCSqGSIb3DQEBCwUAA4IBAQBmXeRSZ52CvHb7CjcUkBip
HF6WE+UXlc2tg2PZkg9zOWPlPSCNEihzOSS2t05cOWppRMyRxXZ4qyj+dkyfn8Mh
ObTA+Nde7DnjwFLXrmz/9XeRUzPNmtivIAQfPAfIXWrKKBK71OELJYZeRItTtPhW
tUoOB5q3G4vGHbrr6bqQUZPbYUbHwFALRMDHYmS2NObQSxhm5QlXlPr/buFAq8Z0
sOMJQ0XaiJi93v1kHousmJzJ2oQv1swdgFsxma8P1d1/DE1/lIm1Z2ZHDx+JpmbD
b7Ji6ajP4FQvypRULGDIDpD26aBI3goq5xoHQDi5DDtYsClVy1QuO1UaDw9D9Ogn
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1VqaEpm+bsldkjIsCYC3
gLZZHIOTCOXDwtalv4Q43hg54J1sDHpV2ywrELTvlk/QNkRTDyc03GTy0pCFHEt9
7Th0V/tXuM2vjOVz2XW7DQ8c/cXhaPusxzzo8iNf+KcNhg/toJbajgjpZJBU8qDn
WdENN11ZIkm9SNiNwqhDmgPykNjdTnym8+v52IMftGj1+uzupqNG5txSh3mFBUP6
DBNi/KTvz+smfPSQZrMw8R1oGjWRhaxwveyAH69YRjbW2KU+5Ggzp5syWM3y5t6A
uP9NBQIM3redtCoKOb5nEmrXxHXk+pVBkXLlUl0YExG4IEPl9PVM8gSNoetpLW3x
1DZWMMaQ090+rI8SSTfqfMQrFhly+rGETNc+cTK4xiJ5xcAYFONxhFC9PDoh/RSk
OScEwtOiS4CmVqF59IFcbUBdWRyBOcjf7u17vcaXxBhfF/DAQVTSR/jiKs0N+HBM
qCn8rxeU8uS9dUYx26UvZwGaA+VQa7HJXfagro5UcKF6t3SiYma5szs/PAySd0d9
9zeYFqgdd5W3IVWBYYKxgwCqP+S0PIuuo6riPr4TpFI0mQ/kjBIp+VUX9DeyMV8r
HVlNHZrRHd/bKOFpDFexizKR37H86IgWYQswGyXeb+hwOOnkMO4Dsc8gpJ7w+w+0
VGVtJ5nCpF5d9xdQgn/RLu0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280421252744507311291568122591801729082137
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-01 09:38:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 09:38:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'newtunes.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 870408027444925453069007155802111584620488958649269523277552577095896704398715215226896985211647016181679516800715442398558805739360080452466507735342777294984078136893777211209509304272815313516330047908465108614217151838841507445328836561963576912709383951318486644490853979244727597975337727807216321089425591613573210485859477899668829705010948424388323105317351346597666024245604222459247784116027189144870548931961440720183111277312100193349071327285478537140172510021758873360679587832289775658251200301232316387745111339839283988466946714960827182381865193915736765507990796669728482633580196499065025306878657637554438257454081875828424350586207221612563682267180459475195873543093407478458989855546018999823562011824252330986248143738156070527599436771417425476477342966323089415549773799864845363898180131351955729984316020065107283685751739261612099584258754233513747608779328084684412778666862615569235840618791531628136258588244608658678109536564229787481109606369509145672664056603599498919506803465515621770462941767787071942891014330190692894734426983944310043128645147791818453188268011124154283582794609021440568763348940411871910571350252749398391747443591202466064387430783818685608662210808333314450580661415661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c26750d6fc376e589b10f21d1597d75f2c8a9d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newtunes.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newtunes.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ec10a88f20000040300473045022077a459795b3425573dfaa730a0a15dfbb359cb08b8b9542267cab7fbb04d1528022100ae78e3806ec026235abb83e7099d24f050c2f1595c740f9bbec2fb1f9d4bf145007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ec10a88ee000004030046304402207ad75345191c3b6fbd7057ed13698584abc3f4e66441acac3dc1d83ecef5a3bf02206bf8d98d8831a24f6e659de41fee9df17772d198a54711f26cb0e8a0e7856d73
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00665de452679d82bc76fb0a37149018a91c5e9613e51795cdad8363d9920f733963e53d208d1228733924b6b74e5c396a6944cc91c57678ab28fe764c9f9fc32139b4c0f8d75eec39e3c052d7ae6cfff577915333cd9ad8af20041f3c07c85d6aca2812bbd4e10b25865e448b53b4f856b54a0e079ab71b8bc61dbaebe9ba905193db6146c7c0500b44c0c76264b634e6d04b1866e5095794faff6ee140abc674b0e3094345da8898bddefd641e8bac989cc9da842fd6cc1d805b3199af0fd5dd7f0c4d7f9489b56766470f1f89a666c36fb262e9a8cfe0542fca94542c60c80e90f6e9a048de0a2ae71a074038b90c3b58b02955cb542e3b551a0f0f43f4e827