www.lavoroagricolo.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:49:eb:7c:c1:dd:2b:4f:a5:b9:15:bd:22:bc:86:c1:9b:65 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.lavoroagricolo.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:49:eb:7c:c1:dd:2b:4f:a5:b9:15:bd:22:bc:86:c1:9b:65Serial Number (int): 373602772868117289531671838390579342973797
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: e1:de:65:79:aa:6f:dd:7a:9d:d0:b8:cb:53:4c:ab:75:31:82:01:59
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 63:3e:37:ee:14:1e:07:5e:1f:56:ff:c4:54:ea:66:58:9c:6c:61:a6
Fingerprint (sha256): 2d:5c:fc:7e:9a:85:19:c2:68:74:41:9f:65:b3:59:23:20:13:d8:ab:97:8b:ae:60:10:e9:72:52:02:c8:3d:0a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.lavoroagricolo.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.lavoroagricolo.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.lavoroagricolo.com
Other certificates including the domain name lavoroagricolo.com
(limited to 100 certificates)
www.lavoroagricolo.com
www.realtimecombatsystems.com
www.lavoroagricolo.com
www.lavoroagricolo.com
lavoroagricolo.com
lavoroagricolo.com
lavoroagricolo.com
www.lavoroagricolo.com
www.tennesseesfinest.com
lavoroagricolo.com
lavoroagricolo.com
www.lavoroagricolo.com
www.lavoroagricolo.com
lavoroagricolo.com
www.lavoroagricolo.com
www.realtimecombatsystems.com
www.lavoroagricolo.com
www.lavoroagricolo.com
lavoroagricolo.com
lavoroagricolo.com
lavoroagricolo.com
www.lavoroagricolo.com
www.tennesseesfinest.com
lavoroagricolo.com
lavoroagricolo.com
www.lavoroagricolo.com
www.lavoroagricolo.com
lavoroagricolo.com
www.lavoroagricolo.com
Certificate
The complete raw certificate details for www.lavoroagricolo.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgISBEnrfMHdK0+luRW9IryGwZtlMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMTMxOTU0MTVaFw0y MDA0MTIxOTU0MTVaMCExHzAdBgNVBAMTFnd3dy5sYXZvcm9hZ3JpY29sby5jb20w ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCn8pqTVpn8RiiD2pC8BmkC CpKm/zHXEEIKuWtiPpj/H07913ZhWEPMt4TENgWQaZTigqP7//NtKXpoG1HICNil sHzS05mJfK0/sQ1LTk6YZNme+yueuGjgHBfx8msSAKc8wviEr+rX2GYhqJCO023W OZJUXdwU6hFWNeFLr448ZE/GHnPXMt6lizsoo3TTQ0JA/QzVIHNySi99kAsWMXRF rG87yz72WpFRQDgD1nSXpyO6i4Yc+IfFCM3EiQ81DECNtfb9Zl6u+JYhEtsiY4wH Q3HRvIq3kqoew9x5PYKVbNkgEN48m9Ismli5jtyEyjCiF0JLIwjRTvNQ4YLCuXh9 DwnpWdR+bOf22u4kp2+VrUSc7ebFBtlNzaVOIvcqbvrfb1w9NOwXt8wPBvS1jCWd 6uzGQyQI2/F9aJsLPrNlQ7UBa3e/Ax2kRbp9npIb1YkM5FbjSnYAt2eixrThTdjh MMbfMOPkpguA6UJobUFGPqn4joZaiQWrUZX6V4xEjS4t/kQKq78YxOsGq+BFRfjC Hyhx6miu9IxcBw5P7o6nh7oAdYnJj7X680Un7dswghNrX82xzr2AjvKQNhOyaYbO fA2aQbdq2z/eGjH7t/qIdsFIEyTTJqTGAAv/XU0HCa3MbCpEPiLaebmTDihTkzMO EBmKKQ1FcQEoQWLefZA5WQIDAQABo4ICbDCCAmgwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBTh3mV5qm/dep3QuMtTTKt1MYIBWTAfBgNVHSMEGDAWgBSoSmpjBH3duubR ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEGA1UdEQQaMBiCFnd3dy5sYXZv cm9hZ3JpY29sby5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEF BgorBgEEAdZ5AgQCBIH2BIHzAPEAdwBep3P531bA57U2SH3QSeAyepGaDIShEhKE GHWWgXFFWAAAAW+gr4WOAAAEAwBIMEYCIQC5k/Ycz1vJv/zE8Vfucd9OdUOTV3Vi Hx836q2MsgXksAIhAMhAyOj8ZtfHCiaZ0mWdHMvtJhKuVsu3pkhjcsD+F0U2AHYA B7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFvoK+FsgAABAMARzBF AiEAmXw7rA5SD8+4MHe3WdBSbXhZTGeH25KsF1ecfF9vOQECID08oHR7tRCUhyKO LdC/VgACD5hxGkq12UYqnuid+TIWMA0GCSqGSIb3DQEBCwUAA4IBAQBuGSv9C6iL QFknduiIrp4fnztmzk+QOfGarmZkYohhqp4LZV2dKgUhq6jJR+6cVQvysMfvH3m4 YwWEi/tAG+u3Dg1KqE+b+Ap9YXMBfYqevIbvqTf/fCIhZjO8kXO0edUw56VYXqUF bkBHoEFT/VAO721Ph7yFIiQ5FvBHqCM7HrNYazlzf6bCiDW2KDnN4+BMmQlEEsFF kmdvML3OLxSQc30DbaATpquKVQdTJ/oIMKPlM/mnmWbxR7TKc+ZUHe+vlHfLupaK 8Vt7OaVXAwAstDKMXmiTjojsK7O5CPd7kfWssEEBrzwp+JZ8fXHEnx/MI/KRz84I 4XaWn1JnEIiu -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAp/Kak1aZ/EYog9qQvAZp AgqSpv8x1xBCCrlrYj6Y/x9O/dd2YVhDzLeExDYFkGmU4oKj+//zbSl6aBtRyAjY pbB80tOZiXytP7ENS05OmGTZnvsrnrho4BwX8fJrEgCnPML4hK/q19hmIaiQjtNt 1jmSVF3cFOoRVjXhS6+OPGRPxh5z1zLepYs7KKN000NCQP0M1SBzckovfZALFjF0 RaxvO8s+9lqRUUA4A9Z0l6cjuouGHPiHxQjNxIkPNQxAjbX2/WZerviWIRLbImOM B0Nx0byKt5KqHsPceT2ClWzZIBDePJvSLJpYuY7chMowohdCSyMI0U7zUOGCwrl4 fQ8J6VnUfmzn9truJKdvla1EnO3mxQbZTc2lTiL3Km76329cPTTsF7fMDwb0tYwl nersxkMkCNvxfWibCz6zZUO1AWt3vwMdpEW6fZ6SG9WJDORW40p2ALdnosa04U3Y 4TDG3zDj5KYLgOlCaG1BRj6p+I6GWokFq1GV+leMRI0uLf5ECqu/GMTrBqvgRUX4 wh8oceporvSMXAcOT+6Op4e6AHWJyY+1+vNFJ+3bMIITa1/Nsc69gI7ykDYTsmmG znwNmkG3ats/3hox+7f6iHbBSBMk0yakxgAL/11NBwmtzGwqRD4i2nm5kw4oU5Mz DhAZiikNRXEBKEFi3n2QOVkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 373602772868117289531671838390579342973797 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 19:54:15 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 19:54:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lavoroagricolo.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 685166720285990172916143863029208850028703213752444520535086930174835739128638465082039220611918898805902283115306238821297974311454789266604739075112453571306724481406261159136796826961489908732416339406159630278552421731452794318441775280513908990908165885686539610695293560525281344229941674067859061128289573353055129493978186740677628036132223855260881466383946534379634402234717461701416846758186406502618215872798406207386127400011167717752058066483765221443924188997123175739232604526704042901948174593911938040412742938517236867377768625114556844500232148635396728436038604015252563169725591937688634947746080113475551868532716887271510669919082034295936882569499361681926288209012597067158869587237229062361513782175907899419803786526937644771884240036508933083984011917635324576628817160933616023926877171792257004075590884723411020440548375448349857722569664064015080137631956655327076383037171279359397122774321711737783366580871128470252267453178220593322623130845013992659683667031448648166974779232500234189415187389014964447379984083572723809455490761619803532855970431360485139606097543279645659474126739733128789669945733450934583317988165220250664970718426523646974320933167306613524567730021636448206841608943961 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e1de6579aa6fdd7a9dd0b8cb534cab7531820159 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lavoroagricolo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fa0af858e0000040300483046022100b993f61ccf5bc9bffcc4f157ee71df4e7543935775621f1f37eaad8cb205e4b0022100c840c8e8fc66d7c70a2699d2659d1ccbed2612ae56cbb7a6486372c0fe17453600760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fa0af85b20000040300473045022100997c3bac0e520fcfb83077b759d0526d78594c6787db92ac17579c7c5f6f390102203d3ca0747bb5109487228e2dd0bf5600020f98711a4ab5d9462a9ee89df93216 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 006e192bfd0ba88b40592776e888ae9e1f9f3b66ce4f9039f19aae6664628861aa9e0b655d9d2a0521aba8c947ee9c550bf2b0c7ef1f79b86305848bfb401bebb70e0d4aa84f9bf80a7d6173017d8a9ebc86efa937ff7c22216633bc9173b479d530e7a5585ea5056e4047a04153fd500eef6d4f87bc8522243916f047a8233b1eb3586b39737fa6c28835b62839cde3e04c99094412c14592676f30bdce2f1490737d036da013a6ab8a55075327fa0830a3e533f9a79966f147b4ca73e6541defaf9477cbba968af15b7b39a55703002cb4328c5e68938e88ec2bb3b908f77b91f5acb04101af3c29f8967c7d71c49f1fcc23f291cfce08e176969f52671088ae