mondays.krugpark.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3e:86:98:54:b8:17:5c:d4:da:76:be:ca:bc:83:86:0f:61 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mondays.krugpark.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3e:86:98:54:b8:17:5c:d4:da:76:be:ca:bc:83:86:0f:61
Serial Number (int): 282613272043244219686307461236819688296289
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 30:6a:5a:a5:19:c3:fe:ef:6f:61:78:df:45:82:c7:ff:8a:d8:20:e5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6d:8a:20:25:65:00:73:95:dd:25:7e:62:0f:bb:af:d8:cd:f8:65:2d
Fingerprint (sha256): 23:a3:cc:cb:c2:ff:4e:52:65:f9:aa:9d:7e:c1:ef:97:46:3d:2c:09:fb:89:ad:6a:8d:ad:bf:76:9c:bf:8d:97

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mondays.krugpark.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mondays.krugpark.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bloodies.krugpark.com
cocktails.krugpark.com
instahunt.krugpark.com
mondays.krugpark.com
obw2013.krugpark.com
www.bloodies.krugpark.com
www.cocktails.krugpark.com
www.instahunt.krugpark.com
www.mondays.krugpark.com
www.obw2013.krugpark.com

Other certificates including the domain name krugpark.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for mondays.krugpark.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgISAz6GmFS4F1zU2na+yryDhg9hMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMTIwNzA3MzlaFw0x
OTA2MTAwNzA3MzlaMB8xHTAbBgNVBAMTFG1vbmRheXMua3J1Z3BhcmsuY29tMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynSAsOsA4nYBjR790t7K2VLc
ujELKsDmmrsruJR7CCa4VXM6DgxVJPmG/Eai7jF2kp2tlYf79DMwwMxG3zjv4n0q
hdh/E4297hGg2dKvRGMYwrk2KuumHDPHZ8wgMluEJ70b04baoUptxeC5OJOFmiWL
E/3E1gltXsUBQ2T5Bbd0zSy/J6qOYmz1SgHevYD3C51hKnoKfImO4h5S9uYTx7tA
ZkCGzY2WFF32UwOVUv7Mc/CmwU9fsR63K/yRmp3ECgccHPAflYLvxJc2bpKs3eCv
As0x9GFkO0bYt6tSOqAFvTPdzp+4wy/Obhj+IBtOjEghcV70CXsr1Q1qjs45MQID
AQABo4IDTzCCA0swDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQwalqlGcP+729heN9F
gsf/itgg5TAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEF
BQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5j
cnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5j
cnlwdC5vcmcvMIIBBQYDVR0RBIH9MIH6ghVibG9vZGllcy5rcnVncGFyay5jb22C
FmNvY2t0YWlscy5rcnVncGFyay5jb22CFmluc3RhaHVudC5rcnVncGFyay5jb22C
FG1vbmRheXMua3J1Z3BhcmsuY29tghRvYncyMDEzLmtydWdwYXJrLmNvbYIZd3d3
LmJsb29kaWVzLmtydWdwYXJrLmNvbYIad3d3LmNvY2t0YWlscy5rcnVncGFyay5j
b22CGnd3dy5pbnN0YWh1bnQua3J1Z3BhcmsuY29tghh3d3cubW9uZGF5cy5rcnVn
cGFyay5jb22CGHd3dy5vYncyMDEzLmtydWdwYXJrLmNvbTBMBgNVHSAERTBDMAgG
BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz
LmxldHNlbmNyeXB0Lm9yZzCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB2AOJpS64m
6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABaXDxXLIAAAQDAEcwRQIhAPzY
ORPHrTPSizDf9D40zK2N1Tgvsgpej1AtN4Blm4qsAiByhnK7fjzCw5XB4oWJuqZh
ZG/boH9nP053TSE8gkVIRgB0AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hU
S9iNAAABaXDxXPoAAAQDAEUwQwIfeo84B7IgAXPbP4cxGuQQnVIwnsRXRm3RxMQg
Az4aIQIgB6gVlZgj7jJztcTF1CO71TRmFVvWLbIJ1F2HxPCM5R4wDQYJKoZIhvcN
AQELBQADggEBADa6qxuTfmVRq2fc03/PPJ1NuGkM3HeFo4965MGgHW/fVzuv1MIE
9rK+QEiBgPRXMxxHMs6hnidIGPC7EzDeIKwwCGoH/cuVbtO97PAlIpjXyDZZNEWR
E2jpahtiUzkDoAb20rKuVw7TOKwg6ewmTPildTaQeLsNUwRA5K9ENZvevtN9U816
Di14O5r7y2ATraks4T3ShGPsNyWwj6oPIe9nDOTQouCHN9QwK29eC+zHjCGpXr87
BuutzU/vpe2a6YE+8QMfmo/zt/yU008gOmGsonPlK+iWkH01szhLDMjW8+WZoS48
MGpA5TGOia3w83Wl4nCLnk5aTeUOgC9Ijdc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynSAsOsA4nYBjR790t7K
2VLcujELKsDmmrsruJR7CCa4VXM6DgxVJPmG/Eai7jF2kp2tlYf79DMwwMxG3zjv
4n0qhdh/E4297hGg2dKvRGMYwrk2KuumHDPHZ8wgMluEJ70b04baoUptxeC5OJOF
miWLE/3E1gltXsUBQ2T5Bbd0zSy/J6qOYmz1SgHevYD3C51hKnoKfImO4h5S9uYT
x7tAZkCGzY2WFF32UwOVUv7Mc/CmwU9fsR63K/yRmp3ECgccHPAflYLvxJc2bpKs
3eCvAs0x9GFkO0bYt6tSOqAFvTPdzp+4wy/Obhj+IBtOjEghcV70CXsr1Q1qjs45
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282613272043244219686307461236819688296289
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-12 07:07:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-10 07:07:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mondays.krugpark.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25557587225470750793287375830036012790207226056138521540033043071811821234338491313482697946205000609118489142572156847442428665939952825670561764768549745438971152638167047588222112093032128780029758452006243438798443938630904327339652046267163249925027620640482978860366671107931744632092410562313167510667238416604964116148782290256935248911846004571984719805266071803054524877622631028368498600341195228191912374703477869855830163050525883025794028179310294940032065908785615009068313793321317160954069424123958045744311281623951222395942871257204709178863377064857570517979754638956756044975064467328579767515441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							306a5aa519c3feef6f6178df4582c7ff8ad820e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (253 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloodies.krugpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cocktails.krugpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instahunt.krugpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mondays.krugpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obw2013.krugpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bloodies.krugpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cocktails.krugpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.instahunt.krugpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mondays.krugpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.obw2013.krugpark.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016970f15cb20000040300473045022100fcd83913c7ad33d28b30dff43e34ccad8dd5382fb20a5e8f502d3780659b8aac0220728672bb7e3cc2c395c1e28589baa661646fdba07f673f4e774d213c8245484600740063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016970f15cfa0000040300453043021f7a8f3807b2200173db3f87311ae4109d52309ec457466dd1c4c420033e1a21022007a815959823ee3273b5c4c5d423bbd53466155bd62db209d45d87c4f08ce51e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0036baab1b937e6551ab67dcd37fcf3c9d4db8690cdc7785a38f7ae4c1a01d6fdf573bafd4c204f6b2be40488180f457331c4732cea19e274818f0bb1330de20ac30086a07fdcb956ed3bdecf0252298d7c836593445911368e96a1b62533903a006f6d2b2ae570ed338ac20e9ec264cf8a575369078bb0d530440e4af44359bdebed37d53cd7a0e2d783b9afbcb6013ada92ce13dd28463ec3725b08faa0f21ef670ce4d0a2e08737d4302b6f5e0becc78c21a95ebf3b06ebadcd4fefa5ed9ae9813ef1031f9a8ff3b7fc94d34f203a61aca273e52be896907d35b3384b0cc8d6f3e599a12e3c306a40e5318e89adf0f375a5e2708b9e4e5a4de50e802f488dd7