hesperian.slzusd.org

- CloudFlare, Inc. -

Issued by CloudFlare Inc RSA CA-1

About this certificate

This digital certificate with serial number 01:21:8b:8a:47:78:ab:ba:ba:35:93:cc:47:a5:62:c6 was issued on by CloudFlare, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

CloudFlare, Inc.

Organization: CloudFlare, Inc.
State / Province: CA
Locality: San Francisco
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:21:8b:8a:47:78:ab:ba:ba:35:93:cc:47:a5:62:c6
Serial Number (int): 1503404002657217500162846986275742406
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 82:14:4c:79:48:05:9c:5b:7d:92:94:03:8d:9c:ce:f5:99:71:26:89
AuthorityKeyId: 91:05:8a:df:4c:22:c6:6d:8b:94:4c:16:45:7e:ee:6f:02:fb:b7:c0

Fingerprint (sha1): 7a:2a:a9:31:b0:81:08:7e:99:aa:37:09:f3:8c:7e:f9:a3:0b:bf:84
Fingerprint (sha256): 1e:10:a3:e3:d8:06:40:72:f9:e5:c5:3d:90:f1:95:b1:05:13:49:be:d6:7c:cb:e5:b5:7d:67:a9:ea:c4:22:57

Issuing Certificate URL: http://cacerts.digicert.com/CloudFlareIncRSACA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/CloudFlareIncRSACA1.crl
CRL Distribution Point: http://crl4.digicert.com/CloudFlareIncRSACA1.crl

Check the revocation status for certificate hesperian.slzusd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hesperian.slzusd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hesperian.slzusd.org

Other certificates including the domain name slzusd.org

(limited to 100 certificates)
admin-adu.slzusd.org
admin-ahs.slzusd.org
bay.slzusd.org
admin.godwinschools.org
col.slzusd.org
admin.ajhs.dcs.edu
wmms.slzusd.org
hesperian.slzusd.org
admin.hs.gsd.wednet.edu
admin-wms.slzusd.org
admin.springcovesd.org
adult.slzusd.org
royalsunset.slzusd.org
hil.slzusd.org
admin-ahs.slzusd.org
washingtonmanor.slzusd.org
hillside.slzusd.org
adu.slzusd.org
www.hoganprep.net
adult.slzusd.org
bohannon.slzusd.org
hesperian.slzusd.org
del.slzusd.org
lorenzomanor.slzusd.org
colonial.slzusd.org
wilkeson.whiteriver.wednet.edu
www.slzusd.org
eastbayarts.slzusd.org
admin.fta.hasdpa.net
wrhs.whiteriver.wednet.edu
admin.eceap.gsd.wednet.edu
www.escalonusd.org
mtadams.wednet.edu
www.slzusd.org
admin.jamesmartinmiddleschool.wearecms.com
lorenzomanor.slzusd.org
slz.slzusd.org
admin.ms.gsd.wednet.edu
ncsd.net
stw.hasdpa.net
colonial.slzusd.org
newhorizon.bviu.org
bms.slzusd.org
grant.slzusd.org
admin.es.gsd.wednet.edu
admin-ahs.slzusd.org
admin.ajhs.dcs.edu
adult.slzusd.org
admin-wms.slzusd.org
day.slzusd.org
admin-adu.slzusd.org
bay.slzusd.org
admin-adu.slzusd.org
washingtonmanor.slzusd.org
delrey.slzusd.org
arroyo.slzusd.org
gra.slzusd.org
dayton.slzusd.org
admin.orchardviewschool.org
delrey.slzusd.org
admin-adu.slzusd.org
eastbayarts.slzusd.org
admin-adu.slzusd.org
naugatuck.k12.ct.us
www.slzusd.org
www.ranchitoelementary.org
grant.slzusd.org
corvallis.slzusd.org
admin-wms.slzusd.org
ahs.slzusd.org
corvallis.slzusd.org
hillside.slzusd.org
washingtonmanor.slzusd.org
washingtonmanor.slzusd.org
phs.parlierunified.org
royalsunset.slzusd.org
hillside.slzusd.org
ahs.slzusd.org
wms.slzusd.org
corvallis.slzusd.org
arroyo.slzusd.org
washingtonmanor.slzusd.org
adult.slzusd.org
hesperian.slzusd.org
admin-adu.slzusd.org
ahs.slzusd.org
admin-adu.slzusd.org
sanlorenzo.slzusd.org
admin-wms.slzusd.org
bay.slzusd.org
www.fhasd.com
sanlorenzo.slzusd.org
eastbayarts.slzusd.org
bms.slzusd.org
orchardviewschool.org
delrey.slzusd.org
hil.slzusd.org
phs.parlierunified.org
admin-adu.slzusd.org
bohannon.slzusd.org

Certificate

The complete raw certificate details for hesperian.slzusd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7+NS2fIgWJIomHKXw16
9w4wY7ckiajfzxJ0AXSlC99rMpyYkjA88BB60bsXg/2p4i2uJ3N8u7kHDvBRZydc
yI0vetZK3bT85fyLRPq4AEshpowV/A3LsIB6Sq3+mAaBsAzudPscxTjB91ef6V8s
DEiMt017aVOsitk1klP4n434699erOHci610mV3JIczgXknuAa7khuCi3EsWoubU
zI8qXcbmodFIphNVx0HjxWvb4HUZrivraz+/IzBVfY1I3kpVnlFdE9SEqP4lZaVC
NL0EyimWZYsVWj6aO8HMh+w5iv5xmmPhu0tmTV6eW8o/vCT43d8CWOBpdRWGJ4vp
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1503404002657217500162846986275742406
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare Inc RSA CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CloudFlare, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hesperian.slzusd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23701020806735402597514003730059609387750024793681008850525072350530870488535552500064713741042103196358600068046876693674593698749249838100251791591863072164181291115668258988771742690444889963360551793644543998606732316497129565570218003322271289477304168339909149256424281685751936298005551748113182512902078696319593117383504878733649444343523932721640380758688334972156655315052887394991698782876570324705828537412890476542597237814579764132842252620952744872192253806652757058598646773451252853269052652122496910020996507129646687756273298998518296285488595599404024086951593020829362807208660541725487240309053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 91058adf4c22c66d8b944c16457eee6f02fbb7c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82144c7948059c5b7d9294038d9ccef599712689
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hesperian.slzusd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/CloudFlareIncRSACA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/CloudFlareIncRSACA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/CloudFlareIncRSACA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0029e62dbf98c748afd7929aa93352ce7e2ed4d9e12bcaddf995b2ce8793184d6c1b9f9ad6a288f188b97023e9c0952a1c8289f2034d012e47cbe4a77edfb6e8bfaffd72db7612e5222a61e2dd1a547150318bbb0927c06bb9d9052587d36aeae87b1310d2b9bc6b21ec3f95817a08113f9affad539f39e5cae1b3de0a96f90dc33ceddaaa8c4a632c58ab31fe542afc01d20a960f8c679148a6ddb6fd9c3cb73730515bdb3f72899db4ffb186276fc63a7aab518a3179541ea6c3708f62949eaf1c258d387e3c3e6eabbd4033d157d5d0628475fe112a5682c8e5b53f0dc2cd9b0facf388562a48b57e10e9e90893ecdb01eebb98160c37af069d8fd8441d9b17