pikkop.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:04:68:f4:99:a6:a8:11:6e:61:53:9d:ed:66:a1:00:77:fe was issued on by Let's Encrypt.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=pikkop.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:04:68:f4:99:a6:a8:11:6e:61:53:9d:ed:66:a1:00:77:feSerial Number (int): 262837497011372166433166601161110355736574
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 99:10:04:87:bb:68:60:c3:1f:37:20:25:8b:10:90:2d:9d:64:0d:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 29:f2:b4:ba:25:7e:64:01:0c:2f:ff:83:4c:4f:cd:bd:4c:80:a6:c0
Fingerprint (sha256): 2d:bb:6c:d2:92:d7:27:1a:37:12:ee:f8:55:a6:f5:fc:77:de:8c:2a:3b:f5:76:36:88:bb:20:b9:f2:44:7d:57
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate pikkop.com
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pikkop.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api-local.pikkop.com
blog.pikkop.com
blog.pikkop.mx
pikkop.com
pikkop.mx
shopify.pikkop.com
shopify.pikkop.mx
blog.pikkop.com
blog.pikkop.mx
pikkop.com
pikkop.mx
shopify.pikkop.com
shopify.pikkop.mx
Other certificates including the domain name pikkop.com
(limited to 100 certificates)
www.digitall.me
www.russellbenton.co.uk
app.pikkop.com
www.pikkop.com
pikkop.com
thasaltydawg.com
www.pikkop.com
www.car-evolution.de
pikkop.com
www.pikkop.com
pikkop.com
www.pikkop.com
pikkop.com
api-local.pikkop.com
api-local.pikkop.com
www.pikkop.com
pikkop.com
www.pikkop.com
api-local.pikkop.com
api-local.pikkop.com
api-local.pikkop.com
pikkop.com
api-local.pikkop.com
pikkop.com
www.pikkop.com
www.pikkop.com
cory.benbraham.com
www.pikkop.com
app.pikkop.com
www.pikkop.com
www.frontendshere.com
pikkop.com
pikkop.com
www.pikkop.com
www.pikkop.com
www.pikkop.com
pikkop.com
www.russellbenton.co.uk
app.pikkop.com
www.pikkop.com
pikkop.com
thasaltydawg.com
www.pikkop.com
www.car-evolution.de
pikkop.com
www.pikkop.com
pikkop.com
www.pikkop.com
pikkop.com
api-local.pikkop.com
api-local.pikkop.com
www.pikkop.com
pikkop.com
www.pikkop.com
api-local.pikkop.com
api-local.pikkop.com
api-local.pikkop.com
pikkop.com
api-local.pikkop.com
pikkop.com
www.pikkop.com
www.pikkop.com
cory.benbraham.com
www.pikkop.com
app.pikkop.com
www.pikkop.com
www.frontendshere.com
pikkop.com
pikkop.com
www.pikkop.com
www.pikkop.com
www.pikkop.com
pikkop.com
Certificate
The complete raw certificate details for pikkop.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAwRo9JmmqBFuYVOd7WahAHf+MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MTYxNDQ5MDlaFw0x OTA4MTQxNDQ5MDlaMBUxEzARBgNVBAMTCnBpa2tvcC5jb20wggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQD0aziAr5EU8YWA05WWS9RRgB8tfZtJkm39t1aC WKqfoC4OuW85TXrmA1/HX5RkRYC5PJtVKDoevJQp5TgXwTUhDXgOnhk1YKKnoG7U Ke3le5X8N4Q+jxeWAvEvTJLCTzq4D6e7urnLRPcqC5krxZcJFMugbjqLekxsa/4e FbI6zYYsv+fP9CtimXXFAjIWRmAMLMW5krNoZmT8excdF8V3/OS2MH/0LLofgJT6 DB2mkuo1zeMHPTkfqIiqH0KyWIAJ4bvhDBsyUUr2iCYOtAxZX2w0Jxq0ODFX4qCy LIsLoi675lKnFwEmdgXlGbcTigQmKY09ukgyVGCdyfLrWVOTAgMBAAGjggLGMIIC wjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJkQBIe7aGDDHzcgJYsQkC2dZA3CMB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w fgYDVR0RBHcwdYIUYXBpLWxvY2FsLnBpa2tvcC5jb22CD2Jsb2cucGlra29wLmNv bYIOYmxvZy5waWtrb3AubXiCCnBpa2tvcC5jb22CCXBpa2tvcC5teIISc2hvcGlm eS5waWtrb3AuY29tghFzaG9waWZ5LnBpa2tvcC5teDBMBgNVHSAERTBDMAgGBmeB DAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxl dHNlbmNyeXB0Lm9yZzCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1AOJpS64m6OlA CeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAABasFVOgoAAAQDAEYwRAIgdfeUjT2S +B0Djkp0aod2+6q4BW88zetaBGdUl9fYfs0CIFlEDC0VKOEL/PrLGX+HmN6Xoqeu BtwsBTOL9fGo6BFmAHUAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgA AAFqwVU78AAABAMARjBEAiAHVRduTh6lV8bOvrv4NvXSPo7p/15S6dRybCszT8XG /gIgMVfzebEbZwNR2e//UDpzQfMou87rGkliNtYy/44FOlEwDQYJKoZIhvcNAQEL BQADggEBACXv3ueEPaFU/wCVWLkFP2zxKDxVw6cUCUWnz4ds6zE3AjKuVqram5lA caqI2nry0byNJMcMpGaZmlUmuZs2pRwbc4aUSJhxc5IwxHEzjwMrhUSXvVO/St6j kT5YbkyfgpkKYKA9rfi1MvKsMtC3PaFTjIcJHLhesmpmkNB53g9OpFt7/K2Sri1n htyDe4IAK7nIHF2q2+tAYcK+svODZ84CkcIiBFquQtl7Zibio8OpAPGmt1F+iGiK GkCrv5ATPRAQnAMjb9nIZVVUnyZGfTURRaMLflRF1dUquyrOUzRhB+iLPrxoDYqe 7Qs9kTXBw1izrATM3o4v70LDaE5vvpI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Gs4gK+RFPGFgNOVlkvU UYAfLX2bSZJt/bdWgliqn6AuDrlvOU165gNfx1+UZEWAuTybVSg6HryUKeU4F8E1 IQ14Dp4ZNWCip6Bu1Cnt5XuV/DeEPo8XlgLxL0ySwk86uA+nu7q5y0T3KguZK8WX CRTLoG46i3pMbGv+HhWyOs2GLL/nz/QrYpl1xQIyFkZgDCzFuZKzaGZk/HsXHRfF d/zktjB/9Cy6H4CU+gwdppLqNc3jBz05H6iIqh9CsliACeG74QwbMlFK9ogmDrQM WV9sNCcatDgxV+KgsiyLC6Iuu+ZSpxcBJnYF5Rm3E4oEJimNPbpIMlRgncny61lT kwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 262837497011372166433166601161110355736574 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-16 14:49:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-14 14:49:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pikkop.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30855018916174559232937619887043801682060104431076356351264950181725872588964189833421879904144904561112016103930969000192382818728805254506607320691357609138550316771917400769537780666591042079388438507824866060013592577526445462504035794973313510246949892228775625931879632375956612800323476177066662412694686073049538737592704317376743997954464004838623866877074272494887666531201902334478370759996638523289206617955363078056323850162363248450734553170662937218867338074810685045736391470834920978008731238334382580896449759375728246514417269733812916176787588927821030852241573875803587808205064795630411940713363 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 99100487bb6860c31f3720258b10902d9d640dc2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-local.pikkop.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.pikkop.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.pikkop.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pikkop.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pikkop.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopify.pikkop.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopify.pikkop.mx' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ac1553a0a0000040300463044022075f7948d3d92f81d038e4a746a8776fbaab8056f3ccdeb5a04675497d7d87ecd022059440c2d1528e10bfcfacb197f8798de97a2a7ae06dc2c05338bf5f1a8e81166007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ac1553bf0000004030046304402200755176e4e1ea557c6cebebbf836f5d23e8ee9ff5e52e9d4726c2b334fc5c6fe02203157f379b11b670351d9efff503a7341f328bbceeb1a496236d632ff8e053a51 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0025efdee7843da154ff009558b9053f6cf1283c55c3a7140945a7cf876ceb31370232ae56aada9b994071aa88da7af2d1bc8d24c70ca466999a5526b99b36a51c1b738694489871739230c471338f032b854497bd53bf4adea3913e586e4c9f82990a60a03dadf8b532f2ac32d0b73da1538c87091cb85eb26a6690d079de0f4ea45b7bfcad92ae2d6786dc837b82002bb9c81c5daadbeb4061c2beb2f38367ce0291c222045aae42d97b6626e2a3c3a900f1a6b7517e88688a1a40abbf90133d10109c03236fd9c86555549f26467d351145a30b7e5445d5d52abb2ace53346107e88b3ebc680d8a9eed0b3d9135c1c358b3ac04ccde8e2fef42c3684e6fbe92