www.araport.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a7:0d:54:a5:d9:93:f6:4a:1b:8b:46:f1:48:3e:31:6f:5f was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.araport.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a7:0d:54:a5:d9:93:f6:4a:1b:8b:46:f1:48:3e:31:6f:5fSerial Number (int): 318181732551794672080403365931609725431647
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: bf:83:23:2f:89:3c:26:1c:13:6a:91:df:8b:f4:37:7e:2b:7f:84:ec
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 9a:71:41:3a:b5:f0:6e:37:fc:25:25:06:57:21:90:e7:ee:72:95:c9
Fingerprint (sha256): 28:ce:77:8b:37:e3:88:e2:0c:68:a2:78:cd:0f:ca:7f:ef:54:c3:a2:4c:de:c5:1f:f5:67:00:81:89:c8:bf:68
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.araport.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.araport.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
araport.org
www.araport.org
www.araport.org
Other certificates including the domain name araport.org
(limited to 100 certificates)
araport.org
*.araport.org
araport.org
araport.org
www.araport.org
www.araport.org
apps.araport.org
jira.araport.org
wiki.araport.org
*.araport.org
api.araport.org
jira.araport.org
araport.org
araport.org
araport.org
araport.org
araport.org
apps.araport.org
araport.org
araport.org
api.araport.org
araport.org
araport.org
*.araport.org
araport.org
araport.org
www.araport.org
www.araport.org
apps.araport.org
jira.araport.org
wiki.araport.org
*.araport.org
api.araport.org
jira.araport.org
araport.org
araport.org
araport.org
araport.org
araport.org
apps.araport.org
araport.org
araport.org
api.araport.org
araport.org
araport.org
Certificate
The complete raw certificate details for www.araport.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgISA6cNVKXZk/ZKG4tG8Ug+MW9fMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDExMjMxNjMzNTVaFw0y MTAyMjExNjMzNTVaMBoxGDAWBgNVBAMTD3d3dy5hcmFwb3J0Lm9yZzCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAMsMLZPqdnGh6ORrrMmEnyBNgzLyhpy3 dUp1lD4Yq8VLDjo9BJ+xkG5R92B2HiVT0y1Bv5vdi86tJPcfO/h7bHb4bFUNY0i/ gsNMk5gNuyFALWBQggK7FiaVdInpieIhV4qc4ga2Ra8hKWm7Besio3kuHt38J0zk Ion3jlhmUSWu8DQX3Gvw9zwhC4KB7hS10CRiTbh6rjoCUzDvAiEdb3wWqTkYUkj8 ERnM9GqVS9uTTlBUjEk1/NZUvUDXpwqpzBPN9gCkff+WkiRKRIJKLP1V1HiQi1jE tk5zlGvZg5qZlCow93szkGNPt4JiHYiR7hlTkQIO83dHRJvfIFPxOqjV4uliE+4R bve+PrT5txRmYvJQZU4ERHAmxRZpshAkNGU1/Exa2rkQbrim9+mjNSI9ySHcHkZR V4ctSjTUmO1MO0Si5R2z07/NSnYiwY87gsEeru7XMv1eHok1WV9ZkpQ8bG69RUe4 T28VDt7IqRsfKSQJrAEvaS/NrJzyQ6ixQcoMBKRyBY0XBckTKZP/Rs/iEAvwRbiT YaKKXLNHDlU38Vx4QM+GqYvnoTPFdX0jE2g9YTZfoqqJ99x8kC/ZRABEaIfq8ctF KNHYLpwOLT71R8rkhLxg1xFrwZXPEsPeMIP9KOfWgsDQRk/hVtoVMy90O9fs6HnA lRsfy5F2A/EfAgMBAAGjggJxMIICbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFL+D Iy+JPCYcE2qR34v0N34rf4TsMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wJwYDVR0RBCAwHoILYXJhcG9ydC5vcmeCD3d3 dy5hcmFwb3J0Lm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEB ATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQG CisGAQQB1nkCBAIEgfUEgfIA8AB3AESUZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT/T M5a1toGoAAABdfYrUx8AAAQDAEgwRgIhANiPuoyVoclVkvbdIaH2CqAd0+1CyRab SjN3aQm/22Q4AiEAptLhomUNompE9Nkfw5BAW5pXkIiTVKCeqw0VBipguT0AdQD2 XJQv0XcwIhRUGAgwlFaO400TGTO/3wwvIAvMTvFk4wAAAXX2K1M6AAAEAwBGMEQC ICTGF59te1gyQLcUJX1tbcN6kbB6tl5zX6Qatt0246KaAiAitJoGDXKLfBD/fKO2 dorv8l6tbiPceU7XKRHAODv3PDANBgkqhkiG9w0BAQsFAAOCAQEAUuoAqxuwQQPA u2LYLJ3gFNwS1K/Yd7EMp4O8c98X5uPfsfKAR1o73cY59jmtLP9MZdqBGmTSd1fy haKyX4Umu11n8YDVAo+VSpz7rHxjP6Wq5c60IbLmpvWqNz4N169EwOcGjWVLP2a2 JyhRD5bopw40x0VkzaBxQu3OmexKB9Tv3xfHvWenHFOZyYIDAvf4jI4Wko5zuXyp +vwiKIS+4+7/C6X6vNJEM396yqvNvoLPELwIkWfDep1FIGZR7IvT53Sp1kETaNov UhURKJb5mUwJyoWtugKZsVd2f5Qq+BfpQwFGqjDVltcJHoGocoSPzHzar/qYP3Hg ybg69vuGiQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAywwtk+p2caHo5GusyYSf IE2DMvKGnLd1SnWUPhirxUsOOj0En7GQblH3YHYeJVPTLUG/m92Lzq0k9x87+Hts dvhsVQ1jSL+Cw0yTmA27IUAtYFCCArsWJpV0iemJ4iFXipziBrZFryEpabsF6yKj eS4e3fwnTOQiifeOWGZRJa7wNBfca/D3PCELgoHuFLXQJGJNuHquOgJTMO8CIR1v fBapORhSSPwRGcz0apVL25NOUFSMSTX81lS9QNenCqnME832AKR9/5aSJEpEgkos /VXUeJCLWMS2TnOUa9mDmpmUKjD3ezOQY0+3gmIdiJHuGVORAg7zd0dEm98gU/E6 qNXi6WIT7hFu974+tPm3FGZi8lBlTgREcCbFFmmyECQ0ZTX8TFrauRBuuKb36aM1 Ij3JIdweRlFXhy1KNNSY7Uw7RKLlHbPTv81KdiLBjzuCwR6u7tcy/V4eiTVZX1mS lDxsbr1FR7hPbxUO3sipGx8pJAmsAS9pL82snPJDqLFBygwEpHIFjRcFyRMpk/9G z+IQC/BFuJNhoopcs0cOVTfxXHhAz4api+ehM8V1fSMTaD1hNl+iqon33HyQL9lE AERoh+rxy0Uo0dgunA4tPvVHyuSEvGDXEWvBlc8Sw94wg/0o59aCwNBGT+FW2hUz L3Q71+zoecCVGx/LkXYD8R8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 318181732551794672080403365931609725431647 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-23 16:33:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-21 16:33:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.araport.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 828361816361118272367159365799990647424016298469078617746969153389124905123128242659514339390890830518908509490564741245221819288967963762876210101425146354827538245323986612241703019672342648053777427552281773598935974143553572359004936693709119627066537568900945848609185713624256918785598035761907405446841881143021301564682126046237463606886023274946980147598021698881475987947088028427663304904758460968717006655583681540637208973092622197632881748865140314466199822243056503607017459682879372701848613735651509842990210720132628150273997531000544898608375310650393684929999525740094051322077698453147039828155465937537136537537719543604806084170543663191306847527855309517319731450002878251183301198220684415258361183646972179969988277789277749434832782547928904901771774195547889356609686467907811465988345653983695680247048380492753583767417925232474343318189806669736633185359545393772013896394115102136725495647208059946441904660090786702384934023963754933315999518977496603082088387672332717488341227561258922997969898335178367801638997363327784192135300461980093240008452247807422171005660504518615848230846987280950469499670253499403772264282899036486911536862360720014672596110235535082594838895850855692683247695950111 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bf83232f893c261c136a91df8bf4377e2b7f84ec . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'araport.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.araport.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000175f62b531f0000040300483046022100d88fba8c95a1c95592f6dd21a1f60aa01dd3ed42c9169b4a33776909bfdb6438022100a6d2e1a2650da26a44f4d91fc390405b9a5790889354a09eab0d15062a60b93d007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000175f62b533a0000040300463044022024c6179f6d7b583240b714257d6d6dc37a91b07ab65e735fa41ab6dd36e3a29a022022b49a060d728b7c10ff7ca3b6768aeff25ead6e23dc794ed72911c0383bf73c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0052ea00ab1bb04103c0bb62d82c9de014dc12d4afd877b10ca783bc73df17e6e3dfb1f280475a3bddc639f639ad2cff4c65da811a64d27757f285a2b25f8526bb5d67f180d5028f954a9cfbac7c633fa5aae5ceb421b2e6a6f5aa373e0dd7af44c0e7068d654b3f66b62728510f96e8a70e34c74564cda07142edce99ec4a07d4efdf17c7bd67a71c5399c9820302f7f88c8e16928e73b97ca9fafc222884bee3eeff0ba5fabcd244337f7acaabcdbe82cf10bc089167c37a9d45206651ec8bd3e774a9d6411368da2f5215112896f9994c09ca85adba0299b157767f942af817e9430146aa30d596d7091e81a872848fcc7cdaaffa983f71e0c9b83af6fb8689