ingarymbg.kaplantrucking.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:98:90:02:b3:d1:0a:58:19:93:08:f1:f8:4f:a2:8e:ac:1c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ingarymbg.kaplantrucking.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:98:90:02:b3:d1:0a:58:19:93:08:f1:f8:4f:a2:8e:ac:1c
Serial Number (int): 313251200430363337717130114116382108855324
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c7:7d:f9:85:69:35:fb:a2:5b:a2:35:a6:55:a8:cb:a3:63:21:cd:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7d:23:48:5a:be:8f:79:7c:75:ff:5c:e7:b6:5c:75:a2:32:aa:19:0b
Fingerprint (sha256): 39:f8:59:ae:e1:9f:b0:22:55:46:0b:81:65:53:bb:87:44:7a:2d:42:f7:e1:cb:9b:21:9e:82:d5:19:61:f3:fe

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ingarymbg.kaplantrucking.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ingarymbg.kaplantrucking.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ingarymbg.kaplantrucking.com

Other certificates including the domain name kaplantrucking.com

(limited to 100 certificates)
conference.kaplantrucking.com
*.kaplantrucking.com
password.hznfinc.com
*.kaplantrucking.com
password.hznfinc.com
mail.kaplantrucking.com
mail.kaplantrucking.com
password.hznfinc.com
conference.kaplantrucking.com
conference.kaplantrucking.com
ingarymbg.kaplantrucking.com
*.kaplantrucking.com
*.kaplantrucking.com
mail.kaplantrucking.com
mail.kaplantrucking.com
mail.kaplantrucking.com
mail.kaplantrucking.com
mail.kaplantrucking.com
*.kaplantrucking.com
*.kaplantrucking.com
password.hznfinc.com
mail.kaplantrucking.com
mail.kaplantrucking.com
conference.kaplantrucking.com
mail.kaplantrucking.com
mail.kaplantrucking.com
mail.kaplantrucking.com
password.hznfinc.com
mail.kaplantrucking.com
*.kaplantrucking.com
mail.kaplantrucking.com
password.hznfinc.com
password.hznfinc.com
conference.kaplantrucking.com
mail.kaplantrucking.com
password.hznfinc.com
mail.kaplantrucking.com
*.kaplantrucking.com
password.hznfinc.com
*.kaplantrucking.com
ingarymbg.kaplantrucking.com
mail.kaplantrucking.com
*.kaplantrucking.com
mail.kaplantrucking.com
mail.kaplantrucking.com
password.kaplantrucking.com
mail.kaplantrucking.com
mail.kaplantrucking.com
conference.kaplantrucking.com
*.kaplantrucking.com
conference.kaplantrucking.com
*.kaplantrucking.com
mail.kaplantrucking.com

Certificate

The complete raw certificate details for ingarymbg.kaplantrucking.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGcDCCBVigAwIBAgISA5iQArPRClgZkwjx+E+ijqwcMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MDQwODIyMDdaFw0x
OTExMDIwODIyMDdaMCcxJTAjBgNVBAMTHGluZ2FyeW1iZy5rYXBsYW50cnVja2lu
Zy5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDi+PWyihfTWgqc
1M7ny4+x0KF1TFlg33JRAKBLrlJoz0/fxkqscYUAC/Hv0LplLlQbk9qzz5y79D0m
XNuPqwVNuB71nxI+ei5tPx4Ohgl8Bly/6MdJPwqRL/gaqny3xZgZxCuNVRprbKOI
XCKxt/Ykq9Vy9P17B266QSuYrF2uaYuON/Wuwk0ETan9OJxPxOU3SHbq6DUlZuxY
zXd1Bj/R3AlcLQXFXr9O7k5jvCn4yY1GrkC1WpQdzmW0oAQl3gr7r/pDvDU8XOcw
DuCTIG6rEGRMdo465gWXiRooWvR6dfMlUF5d/lNHE/0qqvP/ntObf/uPi1sPjYC7
/0+3cKVj9f6l+ii7o8g8xkF1lhIVEejQQlQd8/dBmpXbSkje8s0Iqqstb+aVbQyc
sHTiURPNDeR49A5vE2GctDIcjSdjgk1ZYH09kefoP2/li82mQZEg28ls1qCGEnBN
M/+ukefQApKtPqcpoQ5U+notIPcS608nG6/fp3TKIHw26R5HUL+98p5Di2WjRtXB
3A+q25tRxT6g6DXd4zMQbzXrgL2xojQHRrY6KVzSmiEFCKJtGwkcgWyvaDQT47oS
Bk4DiJOPuRA8ilz1fKX57TOisfWBNv0ujkGqRSqiXVbGR90rUa0bxQ9exf1gOHOT
/4zh2/yaw5/ytKnAuCN2ALMS3oC4HQIDAQABo4ICcTCCAm0wDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA
MB0GA1UdDgQWBBTHffmFaTX7oluiNaZVqMujYyHNvjAfBgNVHSMEGDAWgBSoSmpj
BH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0
dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0
dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCcGA1UdEQQgMB6CHGlu
Z2FyeW1iZy5rYXBsYW50cnVja2luZy5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEw
NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j
cnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdwApPFGWVMg5ZbqqUPxY
B9S3b79Yeily3KTDDPTlRUf0eAAAAWxb76MAAAAEAwBIMEYCIQDVF/Xeds9CvOsw
StI1P60JdltwIAJo42ge5EDqAtBp1QIhAIAvKLOQLnFgi8hv6bmlwqDDWdPmun9b
nKM8W9n1lJIVAHUAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFs
W++k1gAABAMARjBEAiBCpzLPLBuuAN/A6Uzfgp+tqMfPPtb4yOgt8Buj8yeoUgIg
YgFYc4x04utPnslboaKZdlJy/cR67dShYyH1QXY30tIwDQYJKoZIhvcNAQELBQAD
ggEBADqERgNrWwyF7pEiaugzKhj+4uGVJgn7dzQv+gxQ05p0ZaW6SOQ7v/D/pnOp
K7erhDF2koZnungg1NkptwoPRbuQQKjl0rWpycILum+Op+HtBWm77Llu+Yt/Ivxu
gh+UBuzRc72K+WpRh0Ky3up0nN/ML8H0Y+iI1hJw9o+7L6XlvmaNVQxVISUOqXSa
RXiVbWdKuK2APjbRbCojt750DrlH+kF0uOy4A4nNdroJIqZnSFXrNzYEw7KD6DWJ
4leTz4S24x7YIEjS+s3s4efe6r4WA4kdTxFT1FWfnD0WTKjzxUujLWg0rCcUFuSL
IvYUfxrCV2lzKEFj6LUYz7JT4wk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313251200430363337717130114116382108855324
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-04 08:22:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-02 08:22:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ingarymbg.kaplantrucking.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 925967009333043623292994334654916990240263388363847302174014600755044914261734116634906297379336678648081710503069852272964063103330270463332193331125020395299182798619597782661104094247146060447395610794180777734342170781939089317709874622413861755936243640778848699284707311395960459424597798632329400895266077556969418083704896463961730070592969226271882353859397633944629162425690880324094991356950559082606843319999830428649437141072920809945890231680374697120719330479428290577669146720159486704153602768985669831590939867130438902446861917999762526641248788351650345424227942933612923154616760012140972555094311251453525113223558678070023387100348826990190159822584278707778422252077579484246282742732804260167869801473245435226555919371608538474188423092396442340264965390294330928897008225248256332712549075904897458773744509657698006203351389597899156600279966326883642740318165972642501486018300641979946948068541688221920391326227376470842320598537793636976397565816275047623074667251869268754239054386495558181999917535826735712690388205984627024088714263217000880217606847640668424338250954863608528330834720943074854927500692464318636073104040246151121881129071418217381648727940462416029318807128165726967335772796957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c77df9856935fba25ba235a655a8cba36321cdbe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ingarymbg.kaplantrucking.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c5befa3000000040300483046022100d517f5de76cf42bceb304ad2353fad09765b70200268e3681ee440ea02d069d5022100802f28b3902e71608bc86fe9b9a5c2a0c359d3e6ba7f5b9ca33c5bd9f5949215007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c5befa4d60000040300463044022042a732cf2c1bae00dfc0e94cdf829fada8c7cf3ed6f8c8e82df01ba3f327a8520220620158738c74e2eb4f9ec95ba1a299765272fdc47aedd4a16321f5417637d2d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003a8446036b5b0c85ee91226ae8332a18fee2e1952609fb77342ffa0c50d39a7465a5ba48e43bbff0ffa673a92bb7ab843176928667ba7820d4d929b70a0f45bb9040a8e5d2b5a9c9c20bba6f8ea7e1ed0569bbecb96ef98b7f22fc6e821f9406ecd173bd8af96a518742b2deea749cdfcc2fc1f463e888d61270f68fbb2fa5e5be668d550c5521250ea9749a4578956d674ab8ad803e36d16c2a23b7be740eb947fa4174b8ecb80389cd76ba0922a6674855eb373604c3b283e83589e25793cf84b6e31ed82048d2facdece1e7deeabe1603891d4f1153d4559f9c3d164ca8f3c54ba32d6834ac271416e48b22f6147f1ac2576973284163e8b518cfb253e309