www.roofingmaster.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:5b:4c:69:fc:ac:1b:2b:d9:dc:b7:bb:53:71:65:62:f2:5e was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.roofingmaster.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:5b:4c:69:fc:ac:1b:2b:d9:dc:b7:bb:53:71:65:62:f2:5eSerial Number (int): 292404124828738813058855355215496928752222
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b6:44:59:71:88:3f:95:17:9b:d6:0a:c9:b7:e1:58:9c:13:81:3c:46
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 87:59:7f:13:0d:2c:9b:c3:b5:6b:8c:a0:24:7d:57:8f:61:7f:d7:59
Fingerprint (sha256): 37:7c:ab:12:31:f4:33:6a:19:1d:f3:dc:58:87:78:e7:8b:26:47:49:d3:7a:08:a4:d9:7a:93:5a:88:f8:d7:8c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.roofingmaster.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.roofingmaster.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.roofingmaster.com
Other certificates including the domain name roofingmaster.com
(limited to 100 certificates)
cabinlander.com
www.ceuprofessor.com
www.rivernorthcorp.com
www.roofingmaster.com
www.neotarp.com
www.roofingmaster.com
roofingmaster.com
www.mypap.com
roofingmaster.com
71850.com
roofingmaster.com
www.lk-labs.com
roofingmaster.com
www.roofingmaster.com
wildlifetravelguide.com
ugpco.com
roofingmaster.com
www.ceuprofessor.com
www.rivernorthcorp.com
www.roofingmaster.com
www.neotarp.com
www.roofingmaster.com
roofingmaster.com
www.mypap.com
roofingmaster.com
71850.com
roofingmaster.com
www.lk-labs.com
roofingmaster.com
www.roofingmaster.com
wildlifetravelguide.com
ugpco.com
roofingmaster.com
Certificate
The complete raw certificate details for www.roofingmaster.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgISA1tMafysGyvZ3Le7U3FlYvJeMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTExMzE5MDBaFw0y MDAzMTAxMzE5MDBaMCAxHjAcBgNVBAMTFXd3dy5yb29maW5nbWFzdGVyLmNvbTCC AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMXsNHbK5SiiqLyPwfFZtoda F46Gaxs0FCNc9mfnJVJeMsExKGsenOG+Pez5Z2y+Ub2STpbMb/iwWBcdRPz1+GOm Qp7/yhsuuBoZ6C4LrrUppIRiqC3Z5LCRcDHUu2LLKWA7T/jhzpV7OiEz/CkCkXeK zheExx3SNvmN1bAbdUpPueDQKYihn+N3TuKBbzlsgnWxGdf2bMhWmDCkLR/bZRov a+dDZmLPP7OSorLPpRobpQJ/G+ITGjTJEsaZ/G8qsCqB24MQsnvEoQMOgN5Xxape s9WkES3MyGcWmDE1956SbhIdhB7W3AwHKaqCoIg4K4q+Y0j9juxsPWDrxgWHs3q1 PTSn1ZtJs+sYE9tWhnbmMyuLWygeMwd5pgOTxv29HmwP+IKkDpDIAXoqeCYQpGI0 qknF5tTrh1ok0WPp4EbDfLZA/0/pwEgxSQrJqPCsL0wa6Upfy56oSyoCttkMTEJk rn0EswpZDITpXAdCXkotHQ0xgKDJHqp15rUmsT1sHn0Xp47wvG5U8b0dieNJ3Vwc t0vcAsk3v0+3yCw1ij4/AQuhsGTQ7SjSKCtXLts/Rlr6HhHu5I0Rm+YqH8EVlaMb ++Xz+pTfERXP9AfzOnnT7qZPl0j+v1HViMA+xo8TNjZ1+q5QI64PeX4B8QZ0LRLW uqltz0OfIXP+2O4JAIgxAgMBAAGjggJqMIICZjAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFLZEWXGIP5UXm9YKybfhWJwTgTxGMB8GA1UdIwQYMBaAFKhKamMEfd265tE5 t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIAYDVR0RBBkwF4IVd3d3LnJvb2Zp bmdtYXN0ZXIuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYK KwYBBAHWeQIEAgSB9QSB8gDwAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklT Le+LkF4AAAFu9VPM+wAABAMARzBFAiEAuySZv9C7AGFgP0ry8KKll73cb1/krFy4 22LMn/fas9sCIFJgwXOOYNqwoTEDN3uRJQcz0DYDiSE+aEve6oIJoL6+AHYAb1N2 rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFu9VPOTgAABAMARzBFAiEA ufswnDO4ygS5fNE01Wv3+dEw8iFE1CXuhBQHBwM9w5QCIDMtICfTEaPEKQ74kEsD k2LCebxQ+QXg6Bge9gHM+s3uMA0GCSqGSIb3DQEBCwUAA4IBAQAZ7EFRFPGs5yTU DNdKR/Ae5zyhonpnh53UY5h4BdarQvRjYCVmpLCaI6/4yYHGANQe1cgABMokCwfz MvuPs5FQpbwIYEBHX0iS3Pz1h8r99w1zKsdc2ZVAk2Om/5JPav6WfAIjLhVGOnif QRO1xWow50lBKq+sXAK4wtIiGR3z2FDvQxwJAiPd7Ac43D9RX/6glX0Fn5v/zAVn 3dyBf7kjK6APJpeC6xKMu2jbsq68p5Vww72Sndy6dM2BB+E+vZ25V7FnJq9OgkGm nux3O0/Ka5329un1cfAVnoLtvlJ4mxzLsR4+fsL96wIKln+Kp/ItvCrCtCPmDUIj IF4++/iv -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxew0dsrlKKKovI/B8Vm2 h1oXjoZrGzQUI1z2Z+clUl4ywTEoax6c4b497PlnbL5RvZJOlsxv+LBYFx1E/PX4 Y6ZCnv/KGy64GhnoLguutSmkhGKoLdnksJFwMdS7YsspYDtP+OHOlXs6ITP8KQKR d4rOF4THHdI2+Y3VsBt1Sk+54NApiKGf43dO4oFvOWyCdbEZ1/ZsyFaYMKQtH9tl Gi9r50NmYs8/s5Kiss+lGhulAn8b4hMaNMkSxpn8byqwKoHbgxCye8ShAw6A3lfF ql6z1aQRLczIZxaYMTX3npJuEh2EHtbcDAcpqoKgiDgrir5jSP2O7Gw9YOvGBYez erU9NKfVm0mz6xgT21aGduYzK4tbKB4zB3mmA5PG/b0ebA/4gqQOkMgBeip4JhCk YjSqScXm1OuHWiTRY+ngRsN8tkD/T+nASDFJCsmo8KwvTBrpSl/LnqhLKgK22QxM QmSufQSzClkMhOlcB0JeSi0dDTGAoMkeqnXmtSaxPWwefRenjvC8blTxvR2J40nd XBy3S9wCyTe/T7fILDWKPj8BC6GwZNDtKNIoK1cu2z9GWvoeEe7kjRGb5iofwRWV oxv75fP6lN8RFc/0B/M6edPupk+XSP6/UdWIwD7GjxM2NnX6rlAjrg95fgHxBnQt Eta6qW3PQ58hc/7Y7gkAiDECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 292404124828738813058855355215496928752222 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 13:19:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 13:19:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.roofingmaster.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807454069183721861628120873818272849937277213681966511299170079235422786381600990706210255387454403690759693629135181323256139989493336657263902824709896391952741046771815444757959635116086393569687468312499891796103817006464284548521723563197332217092013340199869846755660771150437215046594299778133581268163704394647670117093930017937099478270171634817292825862837197075877017786897000967059245148123179341288684382173802441210425734294031284389389935242579405249343341737527937281298853779164299962076513504798898954677583230135252963485057566278024949069419888977034209801958557651054242523211310249784178041662638988312715189405469740106308987096295524327189616782313407048386769464649870776870858678576300049245924901625020266228678223281030006783941497096491502324249509498233381246931696377980220074413983865552420914688185957293300684334554377553647101088877979021040202316169758745366385564693087376234548484086436993112453025784064963592166329871457505268684450778820005766729592770682169509281072703642597998052120883753527392063306301980413369614344052559483124875869561263739432776183333701703140290935887385955863614118892693189509192143668663745717346383456105347561144708940827105570619256172712706557157564269758513 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b6445971883f95179bd60ac9b7e1589c13813c46 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roofingmaster.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ef553ccfb0000040300473045022100bb2499bfd0bb0061603f4af2f0a2a597bddc6f5fe4ac5cb8db62cc9ff7dab3db02205260c1738e60dab0a13103377b91250733d0360389213e684bdeea8209a0bebe0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ef553ce4e0000040300473045022100b9fb309c33b8ca04b97cd134d56bf7f9d130f22144d425ee84140707033dc3940220332d2027d311a3c4290ef8904b039362c279bc50f905e0e8181ef601ccfacdee . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0019ec415114f1ace724d40cd74a47f01ee73ca1a27a67879dd463987805d6ab42f463602566a4b09a23aff8c981c600d41ed5c80004ca240b07f332fb8fb39150a5bc086040475f4892dcfcf587cafdf70d732ac75cd995409363a6ff924f6afe967c02232e15463a789f4113b5c56a30e749412aafac5c02b8c2d222191df3d850ef431c090223ddec0738dc3f515ffea0957d059f9bffcc0567dddc817fb9232ba00f269782eb128cbb68dbb2aebca79570c3bd929ddcba74cd8107e13ebd9db957b16726af4e8241a69eec773b4fca6b9df6f6e9f571f0159e82edbe52789b1ccbb11e3e7ec2fdeb020a967f8aa7f22dbc2ac2b423e60d4223205e3efbf8af