epiphany.mcfarlandclinic.com

- McFarland Clinic PC -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 39:82:21:13:c6:1c:eb:ac:c3:70:0e:28:f5:b4:40:de was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

McFarland Clinic PC

Organization: McFarland Clinic PC
Organization unit: MIS
State / Province: Iowa
Locality: Ames
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 39:82:21:13:c6:1c:eb:ac:c3:70:0e:28:f5:b4:40:de
Serial Number (int): 76441665237514735433994131368343519454
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 9c:ea:33:c8:38:1f:81:e9:bb:4b:37:6a:9b:e9:79:96:f7:4b:ab:77
Fingerprint (sha256): 35:1e:26:8c:e8:2e:92:fe:16:9b:8f:0a:9d:7e:28:38:64:a9:7a:10:22:51:1c:29:48:2e:2f:d5:0a:7d:f6:34

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate epiphany.mcfarlandclinic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for epiphany.mcfarlandclinic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

epiphany.mcfarlandclinic.com

Other certificates including the domain name mcfarlandclinic.com

(limited to 100 certificates)
sso2.mcfarlandclinic.com
sfdmcf.mcfarlandclinic.com
update.mcfarlandclinic.com
demosched.mcfarlandclinic.com
pacs.mcfarlandclinic.com
sfdtest.mcfarlandclinic.com
tmtest.mcfarlandclinic.com
sso1.mcfarlandclinic.com
eclink.mcfarlandclinic.com
demosched.mcfarlandclinic.com
webvpn.mcfarlandclinic.com
mcffed.mcfarlandclinic.com
epiphany.mcfarlandclinic.com
apps.mcfarlandclinic.com
tm01.mcfarlandclinic.com
sso.mcfarlandclinic.com
eclink.mcfarlandclinic.com
sso.mcfarlandclinic.com
emrproxy.mcfarlandclinic.com
sched.mcfarlandclinic.com
access.mcfarlandclinic.com
work.mcfarlandclinic.com
password.mcfarlandclinic.com
access.mcfarlandclinic.com
mcfarlandclinic.com
password.mcfarlandclinic.com
www.mitsubishidrummondville.com
citrix.mcfarlandclinic.com
share.mcfarlandclinic.com
emrproxy.mcfarlandclinic.com
tokensigning1.mcfarlandclinic.com
password.mcfarlandclinic.com
app.sukii.at
sfdtest.mcfarlandclinic.com
apps.mcfarlandclinic.com
citrix.mcfarlandclinic.com
mcfarlandclinic.com
sfdmcf.mcfarlandclinic.com
www.mcfarlandclinic.com
pacs.mcfarlandclinic.com
update.mcfarlandclinic.com
www.ultimatesoundgroup.com
epiphany.mcfarlandclinic.com
tokensigning1.mcfarlandclinic.com
mcffed.mcfarlandclinic.com
*.mcfarlandclinic.com
epiphany.mcfarlandclinic.com
nasb.beta.literalword.com
pacs.mcfarlandclinic.com
remote.mcfarlandclinic.com
rte.mcfarlandclinic.com
emrproxy.mcfarlandclinic.com
www.mcfarlandclinic.com
password.mcfarlandclinic.com
update.mcfarlandclinic.com
sched.mcfarlandclinic.com
schedule.mcfarlandclinic.com
mcffed.mcfarlandclinic.com
mcf-fresh.mcfarlandclinic.com
emrproxytst.mcfarlandclinic.com
share.mcfarlandclinic.com
webvpn.mcfarlandclinic.com
access.mcfarlandclinic.com
pacs.mcfarlandclinic.com
password.mcfarlandclinic.com
access.mcfarlandclinic.com
password.mcfarlandclinic.com
demosched.mcfarlandclinic.com
epiphany.mcfarlandclinic.com
mcffed.mcfarlandclinic.com
rte.mcfarlandclinic.com
tm01.mcfarlandclinic.com
access.mcfarlandclinic.com
apps.mcfarlandclinic.com
app.masworldsuite.com
mycharttst.mcfarlandclinic.com
sso2.mcfarlandclinic.com
mcfarlandclinic.com
citrix.mcfarlandclinic.com
renouf.dev
MYCHARTTST.MCFARLANDCLINIC.COM
PASSWORD.MCFARLANDCLINIC.COM
webvpn.mcfarlandclinic.com
eclink.mcfarlandclinic.com
apps.mcfarlandclinic.com
securelink.mcfarlandclinic.com
mycharttst.mcfarlandclinic.com
epiphany.mcfarlandclinic.com
sfdtest.mcfarlandclinic.com
citrix.mcfarlandclinic.com
share.mcfarlandclinic.com
tm01.mcfarlandclinic.com
mcfarlandclinic.com
mcffed.mcfarlandclinic.com
mcfarlandclinic.com
www.mcfarlandclinic.com
mcffed.mcfarlandclinic.com
sso.mcfarlandclinic.com
mycharttst.mcfarlandclinic.com
citrix.mcfarlandclinic.com

Certificate

The complete raw certificate details for epiphany.mcfarlandclinic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPuHoKX465EzSkUWAWCS
KVjcgOB2QTrD8hvceXLgyQ5PVv1ClpSh9jKuF5ePeCWSsKUMFX/qhvbLuQrkH5z5
JUvOkO3/u4zkfcMBTN6Jb4iVRan6ACEK+XZxLINCJs9fWIDJ3wtF46EjuYo5aGfJ
HB3TnedJOUKoadbZNbWAjP8WsXlm5HDLCSEs8SNqJMrhudJA0fii+JUpnFgb3y32
giXWVljrX9d71HBtJuKDHAJsvrBtndpNK9B8zY0BSCqcyMVJS8vsLIB2//TzckFy
6tc8YKfqpY0Tsn3H9u0GG3pHbxZLjUvb3/orxa0nXQyaLYNj9VDwPXW7guoR29TR
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 76441665237514735433994131368343519454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Iowa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ames'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'McFarland Clinic PC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'epiphany.mcfarlandclinic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22846928858638373998972777701538321420374845944917375093512674196624911058042473961758576010492084553684195102743768618155779078568055043144119789807955447179530040273176187948004067210753455626129569208636277863303451915721882998250517465005169618640313935299323364171468065159059513399822267329830821720538831035908953917685681954405251525834602846878815921766641919660881687527382248477017159675825894014753480823089787555338041255067060126757020530780180408852106496953266769813984569052081855039619331305890846793783493707037891205653935043681596656337706170067565764774235068494449219003446631243272156611924339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epiphany.mcfarlandclinic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00c489e43d5954ad374079843df5b9e80b8cfd615d2e290ef9926a5a3e8cebd4e351c60f5517cf3a1b302865ba30f7bbe176c68203120146804aa1d037297c743b516b5b983ce398dbfc7ed0cdf3979d8feae8c855c42a561a22a4dbfe2c4b79a947fcb9cf595610c200000fed7533cb5f906cee23ac2936dfb246a97a7f35e691991d79aab5d04cf99dea9698d54077703fd3ce73db55d06b5f2e6e34e79cb02b8d1ef26e9ff4c6b9bb90eb9f7bf28e1ffce59cf4f2e30ce5fab94cd112bf161e2bea7e64e0d91b2d1025aa88d60b71150078f73057e2150fd27cc514b3611b33348d3582b61a5e88102b4b4ed967bbd959ec06c1096f45f445d72faa76244c46