m.novatours.lv
Issued by RapidSSL SHA256 CA
About this certificate
This digital certificate with serial number 1a:48:ad:a2:2d:29:a2:be:a1:91:8d:a9:f7:0a:72:5d was issued on by GeoTrust Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=m.novatours.lv
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 1a:48:ad:a2:2d:29:a2:be:a1:91:8d:a9:f7:0a:72:5dSerial Number (int): 34937294970023239275017781380565856861
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f
Fingerprint (sha1): 70:d0:81:58:22:f8:95:f8:e2:fc:5e:89:44:90:78:ea:8f:cd:eb:4a
Fingerprint (sha256): 3a:77:79:43:fd:a9:c5:df:85:0c:e4:c9:80:b1:ac:0a:32:83:e3:13:31:42:f5:b2:01:9c:56:25:ea:dc:40:53
Issuing Certificate URL: http://gp.symcb.com/gp.crt
Revocation information
OCSP Server: http://gp.symcd.comCRL Distribution Point: http://gp.symcb.com/gp.crl
Check the revocation status for certificate m.novatours.lv
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for m.novatours.lv
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
m.novatours.lv
Other certificates including the domain name novatours.lv
(limited to 100 certificates)
beta.novatours.lv
beta.novatours.lv
m.novatours.lv
beta.novatours.lv
mollerauto.lv
www.novatours.lv
m.novatours.lv
www.novatours.lv
www.novatours.lv
m.novatours.lv
novatours.lv
www.novatours.lv
www.novatours.lv
beta.novatours.lv
www.novatours.lv
beta.novatours.lv
novatours.lv
m.novatours.lv
mollerauto.lv
mollerauto.lv
www.novatours.lv
beta.novatours.lv
m.novatours.lv
www.novatours.lv
www.novatours.lv
beta.novatours.lv
www.novatours.lv
beta.novatours.lv
www.novatours.lv
beta.novatours.lv
novatours.lv
beta.novatours.lv
beta.novatours.lv
mollerauto.lv
mollerauto.lv
mollerauto.lv
beta.novatours.lv
beta.novatours.lv
www.novatours.lv
m.novatours.lv
www.novatours.lv
www.novatours.lv
beta.novatours.lv
mollerauto.lv
mollerauto.lv
beta.novatours.lv
m.novatours.lv
mollerauto.lv
beta.novatours.lv
m.novatours.lv
beta.novatours.lv
mollerauto.lv
www.novatours.lv
m.novatours.lv
www.novatours.lv
www.novatours.lv
m.novatours.lv
novatours.lv
www.novatours.lv
www.novatours.lv
beta.novatours.lv
www.novatours.lv
beta.novatours.lv
novatours.lv
m.novatours.lv
mollerauto.lv
mollerauto.lv
www.novatours.lv
beta.novatours.lv
m.novatours.lv
www.novatours.lv
www.novatours.lv
beta.novatours.lv
www.novatours.lv
beta.novatours.lv
www.novatours.lv
beta.novatours.lv
novatours.lv
beta.novatours.lv
beta.novatours.lv
mollerauto.lv
mollerauto.lv
mollerauto.lv
beta.novatours.lv
beta.novatours.lv
www.novatours.lv
m.novatours.lv
www.novatours.lv
www.novatours.lv
beta.novatours.lv
mollerauto.lv
mollerauto.lv
beta.novatours.lv
m.novatours.lv
mollerauto.lv
Certificate
The complete raw certificate details for m.novatours.lv in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIQGkitoi0por6hkY2p9wpyXTANBgkqhkiG9w0BAQsFADBC MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMS UmFwaWRTU0wgU0hBMjU2IENBMB4XDTE3MDMwOTAwMDAwMFoXDTE4MDQwODIzNTk1 OVowGTEXMBUGA1UEAwwObS5ub3ZhdG91cnMubHYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD9hB03RskpE+paqiNFwPGMqPiggxHfFPYjWab12EWGbf5G 84nRCtni5VUqTD/UwYzmlwRVQegIdceNsPEphP1FQopNdnStk15I03EvtsSe+fkH vEI2/YQNpG2ZWzxlVm++reFdXu8C4mhzV/Txz0SeLNwjw7BW2nhkFSbv0+CBvfzd P8tt8yl5jMowNpgTVG30SzVcCMLzL0aYZbLuparDyvv4LrfqhxozajnVG5Ah3rpa 6GefjERDTuE5FVXLWcjYZfhvNJvsGkeq9S5VjQGkmw+rjtWSXPAb2QsEL3iodm4Y mHhzCcz5mDcF8NYayA9ungfK6j8C1nO6llecJ+zbAgMBAAGjggJ6MIICdjAZBgNV HREEEjAQgg5tLm5vdmF0b3Vycy5sdjAJBgNVHRMEAjAAMCsGA1UdHwQkMCIwIKAe oByGGmh0dHA6Ly9ncC5zeW1jYi5jb20vZ3AuY3JsMG8GA1UdIARoMGYwZAYGZ4EM AQIBMFowKgYIKwYBBQUHAgEWHmh0dHBzOi8vd3d3LnJhcGlkc3NsLmNvbS9sZWdh bDAsBggrBgEFBQcCAjAgDB5odHRwczovL3d3dy5yYXBpZHNzbC5jb20vbGVnYWww HwYDVR0jBBgwFoAUl8InUJ7CyewMiDLIfK3ipgFP2m8wDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBXBggrBgEFBQcBAQRLMEkw HwYIKwYBBQUHMAGGE2h0dHA6Ly9ncC5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0 dHA6Ly9ncC5zeW1jYi5jb20vZ3AuY3J0MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDx AHcA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFaswfTwgAABAMA SDBGAiEA/GnF0tvhf4lDa20x+Gy+VuvHLvNPAD8AJl03epacX5ECIQDEpMUSg9V3 eJAxhJRuesn5KiK9U8fFA57n4aPO76+2DAB2AKS5CZC0GFgUh7sTosxncAo8NZgE +RvfuON3zQ7IDdwQAAABWrMH098AAAQDAEcwRQIgSja7XDORqzuYHAQ6b7jJlR+2 1t9r+GBoIlu9IvNBxg0CIQCjPTP5cwGV2Lr1MmQx8f6/dFMlBoKSUj+wQ0adD6J8 oDANBgkqhkiG9w0BAQsFAAOCAQEApzwoZB3rg+hA5YqaZFglQp/Pa7i1Vu+j+yNN AhTzhY6L7e4hx/eSZDyEW+RSJomBIjGNWkTEGtJillgxHpn7TXa3g0ohdpl9beJJ ILrImx/ZiAY87roDRBVKucum6Pq8VMi9BW8LTw0bb3n052ixYZd5/VJMajy3W2XU imEFPv2jqb5VBDBPKGrU88MaAZcDUmfGpG0rKJAwEPrg5aut1NPXjl2QxccdnF1F Q+TFH9LwBfVYtlGPE3QjnMZdPjTej0kx9RUNuv69mb0Nr2R/++mgjjJxrC6Ut08r 4R0rvElFqvVgEMNPPzgGqABRld18mdrigcCdwJB6EV13+5vTBA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/YQdN0bJKRPqWqojRcDx jKj4oIMR3xT2I1mm9dhFhm3+RvOJ0QrZ4uVVKkw/1MGM5pcEVUHoCHXHjbDxKYT9 RUKKTXZ0rZNeSNNxL7bEnvn5B7xCNv2EDaRtmVs8ZVZvvq3hXV7vAuJoc1f08c9E nizcI8OwVtp4ZBUm79Pggb383T/LbfMpeYzKMDaYE1Rt9Es1XAjC8y9GmGWy7qWq w8r7+C636ocaM2o51RuQId66Wuhnn4xEQ07hORVVy1nI2GX4bzSb7BpHqvUuVY0B pJsPq47VklzwG9kLBC94qHZuGJh4cwnM+Zg3BfDWGsgPbp4Hyuo/AtZzupZXnCfs 2wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 34937294970023239275017781380565856861 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'm.novatours.lv' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 32003439059399259771465888969280731463613310942922451371017284320784073669712141194457738901798649581690031478886679301705039001346703337734563601248279144253333553601924362148067542469436451815888384947978188060611458805548055814638971597651069225013077043622070899359331364717119904284877991927350882069934555362774402598131610344427955668534501525603734983380557940572549024060634913414362243685484702608051186898111578794959463632402125328203339013669309103745492150068165085413738081824233752835898846178655711496207372724377423620272539727976025953024731346442942259007049319354058752852413530481491616889040091 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.novatours.lv' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015ab307d3c20000040300483046022100fc69c5d2dbe17f89436b6d31f86cbe56ebc72ef34f003f00265d377a969c5f91022100c4a4c51283d57778903184946e7ac9f92a22bd53c7c5039ee7e1a3ceefafb60c007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015ab307d3df000004030047304502204a36bb5c3391ab3b981c043a6fb8c9951fb6d6df6bf86068225bbd22f341c60d022100a33d33f9730195d8baf5326431f1febf745325068292523fb043469d0fa27ca0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00a73c28641deb83e840e58a9a645825429fcf6bb8b556efa3fb234d0214f3858e8bedee21c7f792643c845be45226898122318d5a44c41ad2629658311e99fb4d76b7834a2176997d6de24920bac89b1fd988063ceeba0344154ab9cba6e8fabc54c8bd056f0b4f0d1b6f79f4e768b1619779fd524c6a3cb75b65d48a61053efda3a9be5504304f286ad4f3c31a0197035267c6a46d2b28903010fae0e5abadd4d3d78e5d90c5c71d9c5d4543e4c51fd2f005f558b6518f1374239cc65d3e34de8f4931f5150dbafebd99bd0daf647ffbe9a08e3271ac2e94b74f2be11d2bbc4945aaf56010c34f3f3806a8005195dd7c99dae281c09dc0907a115d77fb9bd304