nk3d.de
Issued by R3
About this certificate
This digital certificate with serial number 04:c6:e8:05:e1:15:94:1b:e6:dc:65:d3:cf:9b:c2:76:16:60 was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=nk3d.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:c6:e8:05:e1:15:94:1b:e6:dc:65:d3:cf:9b:c2:76:16:60Serial Number (int): 416133463799144985255981593507562693989984
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 2d:48:c3:09:9a:d1:a4:79:84:88:5c:fa:5e:3e:3a:75:39:2b:c3:e7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): d6:60:ba:22:58:52:ca:a4:6c:30:47:1b:cf:ad:94:ad:fd:b1:e7:0d
Fingerprint (sha256): 30:6d:da:36:3a:03:70:09:d0:a6:cb:f2:51:cf:ce:f8:91:be:03:d8:47:ce:de:7d:16:20:e4:71:67:24:7f:ae
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate nk3d.de
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nk3d.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.adifference.de
*.de.snkb.de
*.from-fat-to-fit.de
*.nk3d.de
*.nk3de.de
*.snkb.de
*.united-technology.de
adifference.de
from-fat-to-fit.de
nk3d.de
nk3de.de
snkb.de
united-technology.de
www.adifference.de.snkb.de
www.from-fat-to-fit.de.snkb.de
www.nk3d.de.snkb.de
www.nk3de.de.snkb.de
www.united-technology.de.snkb.de
*.de.snkb.de
*.from-fat-to-fit.de
*.nk3d.de
*.nk3de.de
*.snkb.de
*.united-technology.de
adifference.de
from-fat-to-fit.de
nk3d.de
nk3de.de
snkb.de
united-technology.de
www.adifference.de.snkb.de
www.from-fat-to-fit.de.snkb.de
www.nk3d.de.snkb.de
www.nk3de.de.snkb.de
www.united-technology.de.snkb.de
Other certificates including the domain name nk3d.de
(limited to 100 certificates)
Certificate
The complete raw certificate details for nk3d.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGJjCCBQ6gAwIBAgISBMboBeEVlBvm3GXTz5vCdhZgMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEwMjQwMjEyNDlaFw0yNDAxMjIwMjEyNDhaMBIxEDAOBgNVBAMT B25rM2QuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqGTZ90eFv 2FZJvElETg7db5k2+Ac5v+8kZmLWB3LN6KyCjWF/wwwHIW0hJPOLtAg8+xaAXx+g xi9B9xBtc+BxDtl4VwrtPv3HVaWQ8Rvv1ROux+sB207wwkR9mqquvgKi37JVUcPo 4mBWOKAhOeQDEoY6irvlB0YaJOlwpD6UEb/5lwzswEPS7pAt3APaE9lc/JzHlHvc 9StV31rb3vR634Unid0oWK1khVYJoUnz6WmAXr78DmD0GkttMZWp/b5i96I3n5PI A0MVP2pKeIBCwJijfSJBlW6XpgBtpWEygnQDB4CdI4XB+sRMwgfOp8B3glx6RmBA t29WaRupdStlAgMBAAGjggNUMIIDUDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFC1I wwma0aR5hIhc+l4+OnU5K8PnMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52L FMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVu Y3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIBXAYD VR0RBIIBUzCCAU+CECouYWRpZmZlcmVuY2UuZGWCDCouZGUuc25rYi5kZYIUKi5m cm9tLWZhdC10by1maXQuZGWCCSoubmszZC5kZYIKKi5uazNkZS5kZYIJKi5zbmti LmRlghYqLnVuaXRlZC10ZWNobm9sb2d5LmRlgg5hZGlmZmVyZW5jZS5kZYISZnJv bS1mYXQtdG8tZml0LmRlggduazNkLmRlgghuazNkZS5kZYIHc25rYi5kZYIUdW5p dGVkLXRlY2hub2xvZ3kuZGWCGnd3dy5hZGlmZmVyZW5jZS5kZS5zbmtiLmRlgh53 d3cuZnJvbS1mYXQtdG8tZml0LmRlLnNua2IuZGWCE3d3dy5uazNkLmRlLnNua2Iu ZGWCFHd3dy5uazNkZS5kZS5zbmtiLmRlgiB3d3cudW5pdGVkLXRlY2hub2xvZ3ku ZGUuc25rYi5kZTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIE gfQEgfEA7wB1ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABi1+r sW8AAAQDAEYwRAIgIF8rne2MlSQvQOvSbg5TTAGfWVcbI6VDRFUHxjLIk70CIHb8 jkEQiNrxBDacgY5whPqDYTgXVvE/+yBhgQffqzn3AHYA7s3QZNXbGs7FXLedtM0T ojKHRny87N7DUUhZRnEftZsAAAGLX6uyBQAABAMARzBFAiEAvpOSyILBB29jHYFh toHsbwanIF9/HM3+yatfwRW4u04CIFZ2dXZ5DT+xJ5Rud3TZ2OQqhPYH4TzvauzN 3pZx71r7MA0GCSqGSIb3DQEBCwUAA4IBAQC6K71dzI6Md6wh91vGNC0G0m3mRKUy oF+Dy255ZJK3BcVgsl8Cs5oBLSep4odRbOI9iWNWeN0Wr+5xgbbZBnnyCgUrL4I5 LEWueX4tXmbWim/bJOvTTF8XoykMHpnrCAmsTOx5KU88N8fb+LvtzZtrIDrtIjhM 4w7c/jLrMszuHGzpQ6qDMrDNSEwj+jn8Q1szO95d9MJJHe4roAbdQf3Chxca4khr G29g5ZtNHDevgorrT2nPoGC3kYGI4l03TlrDUKnd/Yr4lt7xvn/qJHWOqZiNbwy3 n1eDch7n7oOErFUobl/q5ebA+OPACVWGRuHRBO7mEplODeUoXImlm8tz -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhk2fdHhb9hWSbxJRE4O 3W+ZNvgHOb/vJGZi1gdyzeisgo1hf8MMByFtISTzi7QIPPsWgF8foMYvQfcQbXPg cQ7ZeFcK7T79x1WlkPEb79UTrsfrAdtO8MJEfZqqrr4Cot+yVVHD6OJgVjigITnk AxKGOoq75QdGGiTpcKQ+lBG/+ZcM7MBD0u6QLdwD2hPZXPycx5R73PUrVd9a2970 et+FJ4ndKFitZIVWCaFJ8+lpgF6+/A5g9BpLbTGVqf2+YveiN5+TyANDFT9qSniA QsCYo30iQZVul6YAbaVhMoJ0AweAnSOFwfrETMIHzqfAd4JcekZgQLdvVmkbqXUr ZQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 416133463799144985255981593507562693989984 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-24 02:12:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 02:12:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nk3d.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21472944767574837160778222996795618312209191168841598648362638551750633543200207330619589824377853282369071264115873010591562673751054896029848403322288554008883432845491646137226730973593893887869772941379393612451590831737444747411756886975713343728377755066487941720131070479119057535151337694756581715835444853405390355308010140141342656317210043658158783950049874875415428146447152021188039489135183431285902623724028285086804384560117268317165366320465370373451663343743107439546564282917515794740936989516089277477130938715987822771922853983754379663090720180180431803471930802358054948789644119583953190726501 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2d48c3099ad1a47984885cfa5e3e3a75392bc3e7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (339 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.adifference.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.de.snkb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.from-fat-to-fit.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nk3d.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nk3de.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.snkb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.united-technology.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adifference.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'from-fat-to-fit.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nk3d.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nk3de.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snkb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'united-technology.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adifference.de.snkb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.from-fat-to-fit.de.snkb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nk3d.de.snkb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nk3de.de.snkb.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.united-technology.de.snkb.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b5fabb16f00000403004630440220205f2b9ded8c95242f40ebd26e0e534c019f59571b23a543445507c632c893bd022076fc8e411088daf104369c818e7084fa8361381756f13ffb20618107dfab39f7007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b5fabb2050000040300473045022100be9392c882c1076f631d8161b681ec6f06a7205f7f1ccdfec9ab5fc115b8bb4e022056767576790d3fb127946e7774d9d8e42a84f607e13cef6aeccdde9671ef5afb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00ba2bbd5dcc8e8c77ac21f75bc6342d06d26de644a532a05f83cb6e796492b705c560b25f02b39a012d27a9e287516ce23d89635678dd16afee7181b6d90679f20a052b2f82392c45ae797e2d5e66d68a6fdb24ebd34c5f17a3290c1e99eb0809ac4cec79294f3c37c7dbf8bbedcd9b6b203aed22384ce30edcfe32eb32ccee1c6ce943aa8332b0cd484c23fa39fc435b333bde5df4c2491dee2ba006dd41fdc287171ae2486b1b6f60e59b4d1c37af828aeb4f69cfa060b7918188e25d374e5ac350a9ddfd8af896def1be7fea24758ea9988d6f0cb79f5783721ee7ee8384ac55286e5feae5e6c0f8e3c009558646e1d104eee612994e0de5285c89a59bcb73