5766380947243008-fe1.pantheonsite.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:75:19:4f:32:d4:d4:a5:48:21:18:a1:d9:23:12:bc:56:51 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=5766380947243008-fe1.pantheonsite.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:75:19:4f:32:d4:d4:a5:48:21:18:a1:d9:23:12:bc:56:51
Serial Number (int): 388295822579119895230986502760461600839249
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b0:ad:28:7d:6c:db:11:b0:47:19:b8:bd:da:4e:7c:cc:71:97:ba:f8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ed:ee:e8:65:23:fe:e2:a7:2c:de:c1:0c:e8:df:13:40:8b:b4:f9:5d
Fingerprint (sha256): 31:4b:de:79:f4:70:4e:3d:ff:d8:f2:39:08:5b:ed:ec:28:59:a7:17:25:5f:e7:80:a8:0d:95:8c:49:5c:82:f0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 5766380947243008-fe1.pantheonsite.io

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 5766380947243008-fe1.pantheonsite.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

5766380947243008-fe1.pantheonsite.io
abor.freightinnovationcollaboration.org
adirondackbt3.org
artspace.org
calvarynj.com
cbl.uchastings.edu
cce.stonybrook.edu
classie.stonybrook.edu
collectivegrowth.com
creditcompliancegroup.com
dev-marketing.mybasis.com
dev.artspace.org
diagnosticsolutionslab.com
discountfabrics-sf.com
dkicatresponse.com
edipub.org
freshdrycleaning.com
futureoflearning.asu.edu
hardcase.com
helpsystems.com
hpadoctors.com
innovation-sp.stonybrook.edu
it-dp.stonybrook.edu
it-pp.stonybrook.edu
kairosandassociates.com
lakeviewterrace.com
majesticpawn.com
makeyourowntest.statisticseducation.org
music.weillcornell.org
neilsperlingmd.com
nycdotcarshare.info
premierrodent.com
radva.com
research-dp.stonybrook.edu
research-sp.stonybrook.edu
rxpro.app
scitent.com
slingstarmyth.com
staging.tbs-online.org
syllabus-s.stonybrook.edu
syllabus.stonybrook.edu
talbottcampus.com
tbs-online.org
templeohebshalom.org
test.creditcompliancegroup.com
utahcommercialwindowcleaning.com
voteabsenteesc.com
weston4kc.com
www.adirondackbt3.org
www.artspace.org
www.barkerfoundation.org
www.beveragebusinessbuilders.com
www.brcardiology.com
www.calvarynj.com
www.cce.stonybrook.edu
www.collectivegrowth.com
www.corbettdesignbuild.com
www.cvillechallenge.org
www.diagnosticsolutionslab.com
www.discountfabrics-sf.com
www.dkicatresponse.com
www.edipub.org
www.erikamuelle.com
www.freshdrycleaning.com
www.glenfield.caci.co.nz
www.hardcase.com
www.helpsystems.com
www.hpadoctors.com
www.jsska.org
www.kairosandassociates.com
www.lakeviewterrace.com
www.laytonsquareapts.com
www.majesticpawn.com
www.neilsperlingmd.com
www.nycdotcarshare.info
www.premierrodent.com
www.prisoneradvocacynetwork.org
www.scitent.com
www.slingstarmyth.com
www.storeadvise.com
www.talbottcampus.com
www.tbs-online.org
www.templeohebshalom.org
www.utahcommercialwindowcleaning.com
www.voteabsenteesc.com
www.weston4kc.com

Other certificates including the domain name 5766380947243008-fe1.pantheonsite.io

(limited to 100 certificates)
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io
5766380947243008-fe1.pantheonsite.io

Certificate

The complete raw certificate details for 5766380947243008-fe1.pantheonsite.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN0DCCDLigAwIBAgISBHUZTzLU1KVIIRih2SMSvFZRMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MjcyMjM3NDNaFw0x
ODEyMjYyMjM3NDNaMC8xLTArBgNVBAMTJDU3NjYzODA5NDcyNDMwMDgtZmUxLnBh
bnRoZW9uc2l0ZS5pbzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOcO
3BQUCldGQJs/+hMzVT1wIOtv4KKXc4XRSrXcKz+/6ruWR+G1tz+dPWjuL77k+pug
LAIMlpjLUlR040jvkgFj4z+0YkKQYYt9rrbd1T1mhNkKqPBxr0krK1y7RYoBugxR
2z3gXRhxo+MFkKsVjzNscDRRoPKxABBPgEf4e0D1RNzVkyRroUNfZGgSJQsp8Mv4
IM5hfuduK+pBprKf0aTtYwQdw7e3aqi5rXC9gUsbD+hePcECS5fMUB5p3LwQ5sly
xgfLyxM8dMXYH5LPBquIzItOM0KSY8F0bhvURAnmk63HwAcG+YBMvBpKJ08rjPiR
oEeI0yblUyOCVpbswgMCAwEAAaOCCskwggrFMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUsK0ofWzbEbBHGbi92k58zHGXuvgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3
pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz
cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy
dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCCB8oGA1UdEQSCB8Ewgge9giQ1NzY2
MzgwOTQ3MjQzMDA4LWZlMS5wYW50aGVvbnNpdGUuaW+CJ2Fib3IuZnJlaWdodGlu
bm92YXRpb25jb2xsYWJvcmF0aW9uLm9yZ4IRYWRpcm9uZGFja2J0My5vcmeCDGFy
dHNwYWNlLm9yZ4INY2FsdmFyeW5qLmNvbYISY2JsLnVjaGFzdGluZ3MuZWR1ghJj
Y2Uuc3Rvbnlicm9vay5lZHWCFmNsYXNzaWUuc3Rvbnlicm9vay5lZHWCFGNvbGxl
Y3RpdmVncm93dGguY29tghljcmVkaXRjb21wbGlhbmNlZ3JvdXAuY29tghlkZXYt
bWFya2V0aW5nLm15YmFzaXMuY29tghBkZXYuYXJ0c3BhY2Uub3JnghpkaWFnbm9z
dGljc29sdXRpb25zbGFiLmNvbYIWZGlzY291bnRmYWJyaWNzLXNmLmNvbYISZGtp
Y2F0cmVzcG9uc2UuY29tggplZGlwdWIub3JnghRmcmVzaGRyeWNsZWFuaW5nLmNv
bYIYZnV0dXJlb2ZsZWFybmluZy5hc3UuZWR1ggxoYXJkY2FzZS5jb22CD2hlbHBz
eXN0ZW1zLmNvbYIOaHBhZG9jdG9ycy5jb22CHGlubm92YXRpb24tc3Auc3Rvbnli
cm9vay5lZHWCFGl0LWRwLnN0b255YnJvb2suZWR1ghRpdC1wcC5zdG9ueWJyb29r
LmVkdYIXa2Fpcm9zYW5kYXNzb2NpYXRlcy5jb22CE2xha2V2aWV3dGVycmFjZS5j
b22CEG1hamVzdGljcGF3bi5jb22CJ21ha2V5b3Vyb3dudGVzdC5zdGF0aXN0aWNz
ZWR1Y2F0aW9uLm9yZ4IWbXVzaWMud2VpbGxjb3JuZWxsLm9yZ4ISbmVpbHNwZXJs
aW5nbWQuY29tghNueWNkb3RjYXJzaGFyZS5pbmZvghFwcmVtaWVycm9kZW50LmNv
bYIJcmFkdmEuY29tghpyZXNlYXJjaC1kcC5zdG9ueWJyb29rLmVkdYIacmVzZWFy
Y2gtc3Auc3Rvbnlicm9vay5lZHWCCXJ4cHJvLmFwcIILc2NpdGVudC5jb22CEXNs
aW5nc3Rhcm15dGguY29tghZzdGFnaW5nLnRicy1vbmxpbmUub3JnghlzeWxsYWJ1
cy1zLnN0b255YnJvb2suZWR1ghdzeWxsYWJ1cy5zdG9ueWJyb29rLmVkdYIRdGFs
Ym90dGNhbXB1cy5jb22CDnRicy1vbmxpbmUub3JnghR0ZW1wbGVvaGVic2hhbG9t
Lm9yZ4IedGVzdC5jcmVkaXRjb21wbGlhbmNlZ3JvdXAuY29tgiB1dGFoY29tbWVy
Y2lhbHdpbmRvd2NsZWFuaW5nLmNvbYISdm90ZWFic2VudGVlc2MuY29tgg13ZXN0
b240a2MuY29tghV3d3cuYWRpcm9uZGFja2J0My5vcmeCEHd3dy5hcnRzcGFjZS5v
cmeCGHd3dy5iYXJrZXJmb3VuZGF0aW9uLm9yZ4Igd3d3LmJldmVyYWdlYnVzaW5l
c3NidWlsZGVycy5jb22CFHd3dy5icmNhcmRpb2xvZ3kuY29tghF3d3cuY2FsdmFy
eW5qLmNvbYIWd3d3LmNjZS5zdG9ueWJyb29rLmVkdYIYd3d3LmNvbGxlY3RpdmVn
cm93dGguY29tghp3d3cuY29yYmV0dGRlc2lnbmJ1aWxkLmNvbYIXd3d3LmN2aWxs
ZWNoYWxsZW5nZS5vcmeCHnd3dy5kaWFnbm9zdGljc29sdXRpb25zbGFiLmNvbYIa
d3d3LmRpc2NvdW50ZmFicmljcy1zZi5jb22CFnd3dy5ka2ljYXRyZXNwb25zZS5j
b22CDnd3dy5lZGlwdWIub3JnghN3d3cuZXJpa2FtdWVsbGUuY29tghh3d3cuZnJl
c2hkcnljbGVhbmluZy5jb22CGHd3dy5nbGVuZmllbGQuY2FjaS5jby5ueoIQd3d3
LmhhcmRjYXNlLmNvbYITd3d3LmhlbHBzeXN0ZW1zLmNvbYISd3d3LmhwYWRvY3Rv
cnMuY29tgg13d3cuanNza2Eub3Jnght3d3cua2Fpcm9zYW5kYXNzb2NpYXRlcy5j
b22CF3d3dy5sYWtldmlld3RlcnJhY2UuY29tghh3d3cubGF5dG9uc3F1YXJlYXB0
cy5jb22CFHd3dy5tYWplc3RpY3Bhd24uY29tghZ3d3cubmVpbHNwZXJsaW5nbWQu
Y29tghd3d3cubnljZG90Y2Fyc2hhcmUuaW5mb4IVd3d3LnByZW1pZXJyb2RlbnQu
Y29tgh93d3cucHJpc29uZXJhZHZvY2FjeW5ldHdvcmsub3Jngg93d3cuc2NpdGVu
dC5jb22CFXd3dy5zbGluZ3N0YXJteXRoLmNvbYITd3d3LnN0b3JlYWR2aXNlLmNv
bYIVd3d3LnRhbGJvdHRjYW1wdXMuY29tghJ3d3cudGJzLW9ubGluZS5vcmeCGHd3
dy50ZW1wbGVvaGVic2hhbG9tLm9yZ4Ikd3d3LnV0YWhjb21tZXJjaWFsd2luZG93
Y2xlYW5pbmcuY29tghZ3d3cudm90ZWFic2VudGVlc2MuY29tghF3d3cud2VzdG9u
NGtjLmNvbTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEw
gdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggr
BgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVk
IHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ug
d2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0
c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw
AHYAwRZK4Kdy0tQ5LcgKwQdw1PDEm96ZGkhAwfoHUWT2M2AAAAFmHWU0wAAABAMA
RzBFAiEA6/dK84hgzVaMZPyQoS/8LFUSjMoc0XhCWG0UNWJpis0CIAP9YYLSCjFv
qm/W/GEh5KolF3Gtcg6aZx82CWV3nrIcAHYAKTxRllTIOWW6qlD8WAfUt2+/WHop
ctykwwz05UVH9HgAAAFmHWU2qgAABAMARzBFAiBeU+yHHILiiq1lwVDE/l9wQr08
k78WbkciAIQjl5MPGgIhAKMawglz7FJW3T10iM1vYwLZJUY9DCnkR2qoQAdyqxiW
MA0GCSqGSIb3DQEBCwUAA4IBAQAr+GkKbvNMT+pGuyj+LxxUrCwURgs2oMYuho7E
NjvvfZ9p8Ucr8xQTl42KAVcuVtbhg4LScVLRw4zxdI9cTIABOWBTXjR5wc0VON0g
0eJx6xeLn6LKxB9S0U7FYstARUMfzgTzicxGxqjQ2knOXCljA2IBdqHTHDnqsW/I
37eeZgfJkmoYIAdXp5kPS7cJBDQ5E53CG2POqYU//RUD7ERf5PyejUu98Ue/UMbs
x8JiEIXuF1KiYKtzZoeNhvBksocgCkBs6Gf2+dzZ6dpgz1BpOBoNcNj7r7DKHB7D
8MiiXklDeR+HsfFBK1eyu6hYwg2+FFvz4oau1QxVULlrEt9C
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5w7cFBQKV0ZAmz/6EzNV
PXAg62/gopdzhdFKtdwrP7/qu5ZH4bW3P509aO4vvuT6m6AsAgyWmMtSVHTjSO+S
AWPjP7RiQpBhi32utt3VPWaE2Qqo8HGvSSsrXLtFigG6DFHbPeBdGHGj4wWQqxWP
M2xwNFGg8rEAEE+AR/h7QPVE3NWTJGuhQ19kaBIlCynwy/ggzmF+524r6kGmsp/R
pO1jBB3Dt7dqqLmtcL2BSxsP6F49wQJLl8xQHmncvBDmyXLGB8vLEzx0xdgfks8G
q4jMi04zQpJjwXRuG9RECeaTrcfABwb5gEy8GkonTyuM+JGgR4jTJuVTI4JWluzC
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388295822579119895230986502760461600839249
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-27 22:37:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-26 22:37:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5766380947243008-fe1.pantheonsite.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29168376029145948373794962978731830303103301886710704942153624222506600681699931657011283128223630243545968773684619213763478574464820586388029336577057793324037663242174500534635626160066506692470829972901988579832273152044351892968362980395718088285017397794135614913197106730544815924862274579840517084180487288373455017347549940090987440829640363011615380060936187026394271943885162812722269598732510662511509847542199618338348670932854622617909652843273592703773361490199614258527587867566672308613733180724688747132289154558377748623179688840308892554568336925544373440588450892271502108901389231658647860068867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0ad287d6cdb11b04719b8bdda4e7ccc7197baf8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1985 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '5766380947243008-fe1.pantheonsite.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abor.freightinnovationcollaboration.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adirondackbt3.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artspace.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calvarynj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbl.uchastings.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cce.stonybrook.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classie.stonybrook.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectivegrowth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcompliancegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-marketing.mybasis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.artspace.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagnosticsolutionslab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discountfabrics-sf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dkicatresponse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edipub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freshdrycleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futureoflearning.asu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpadoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovation-sp.stonybrook.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-dp.stonybrook.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-pp.stonybrook.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kairosandassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lakeviewterrace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'majesticpawn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makeyourowntest.statisticseducation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.weillcornell.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neilsperlingmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nycdotcarshare.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premierrodent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research-dp.stonybrook.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research-sp.stonybrook.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxpro.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scitent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slingstarmyth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.tbs-online.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syllabus-s.stonybrook.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syllabus.stonybrook.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talbottcampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tbs-online.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'templeohebshalom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.creditcompliancegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utahcommercialwindowcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voteabsenteesc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weston4kc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adirondackbt3.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artspace.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barkerfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beveragebusinessbuilders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brcardiology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calvarynj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cce.stonybrook.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collectivegrowth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corbettdesignbuild.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cvillechallenge.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diagnosticsolutionslab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discountfabrics-sf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dkicatresponse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edipub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erikamuelle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freshdrycleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenfield.caci.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hardcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helpsystems.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpadoctors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jsska.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kairosandassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lakeviewterrace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laytonsquareapts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.majesticpawn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neilsperlingmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nycdotcarshare.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.premierrodent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prisoneradvocacynetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scitent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slingstarmyth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storeadvise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talbottcampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tbs-online.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.templeohebshalom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.utahcommercialwindowcleaning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voteabsenteesc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weston4kc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f63360000001661d6534c00000040300473045022100ebf74af38860cd568c64fc90a12ffc2c55128cca1cd17842586d143562698acd022003fd6182d20a316faa6fd6fc6121e4aa251771ad720e9a671f360965779eb21c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001661d6536aa000004030047304502205e53ec871c82e28aad65c150c4fe5f7042bd3c93bf166e472200842397930f1a022100a31ac20973ec5256dd3d7488cd6f6302d925463d0c29e4476aa8400772ab1896
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002bf8690a6ef34c4fea46bb28fe2f1c54ac2c14460b36a0c62e868ec4363bef7d9f69f1472bf31413978d8a01572e56d6e18382d27152d1c38cf1748f5c4c80013960535e3479c1cd1538dd20d1e271eb178b9fa2cac41f52d14ec562cb4045431fce04f389cc46c6a8d0da49ce5c296303620176a1d31c39eab16fc8dfb79e6607c9926a18200757a7990f4bb709043439139dc21b63cea9853ffd1503ec445fe4fc9e8d4bbdf147bf50c6ecc7c2621085ee1752a260ab7366878d86f064b287200a406ce867f6f9dcd9e9da60cf5069381a0d70d8fbafb0ca1c1ec3f0c8a25e4943791f87b1f1412b57b2bba858c20dbe145bf3e286aed50c5550b96b12df42