sambafresh.com.br
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ab:f0:3e:b9:03:e9:62:d8:eb:82:de:4e:41:f0:d4:81:24 was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=sambafresh.com.br
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ab:f0:3e:b9:03:e9:62:d8:eb:82:de:4e:41:f0:d4:81:24Serial Number (int): 319844482932710516830414731259244151341348
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 68:f1:d5:e4:13:14:74:cb:00:dc:36:d7:95:3d:de:00:c0:41:63:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 5e:eb:ef:f3:25:0c:da:74:22:61:93:3f:1f:67:a1:b8:7d:60:48:32
Fingerprint (sha256): 3a:7b:c7:3b:14:ad:b0:da:bb:4a:80:9b:eb:10:32:33:97:9b:2b:03:68:dd:e3:66:70:65:75:6e:50:8e:6a:df
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate sambafresh.com.br
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sambafresh.com.br
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mail.sambafresh.com.br.cp-21.webhostbox.net
sambafresh.com.br
sambafresh.com.br.cp-21.webhostbox.net
www.sambafresh.com.br
www.sambafresh.com.br.cp-21.webhostbox.net
sambafresh.com.br
sambafresh.com.br.cp-21.webhostbox.net
www.sambafresh.com.br
www.sambafresh.com.br.cp-21.webhostbox.net
Other certificates including the domain name sambafresh.com.br
(limited to 100 certificates)
Certificate
The complete raw certificate details for sambafresh.com.br in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGqTCCBZGgAwIBAgISA6vwPrkD6WLY64LeTkHw1IEkMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MTkwNTA5MTdaFw0x ODEyMTgwNTA5MTdaMBwxGjAYBgNVBAMTEXNhbWJhZnJlc2guY29tLmJyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziaFNY+aD6xLbO2TNu1DsAI+QGOP GUqvOPdgCYBSO79CoIy4I72tB3BiaT7WbgHf+QPcN1YE0weMwIrQCuwi2t6f41D8 +3f/dfvJpuAkRYd2TwO2mvWWSYMq2GQ2gieoQcz9N7x0XzRjpiPJh3r4dcY4VdRA jGvOwx7/tjkXrevfV6+ZpU08eY2qPsBErr/vgNu+XKYjBtGpfAN8P1/pXwUJM2mO yLDdPNGJ088n8ZSErq5Ma92Kvjl45dKoS4x2WHnGWmDGoGWRJY79C78Kjdo91FNU urahGOMsxjTRfosJQqXEQvfsabHY9JGLYDA+LwVKIXjrTRv5W1dmveWHRwIDAQAB o4IDtTCCA7EwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRo8dXkExR0ywDcNteVPd4A wEFj6TAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw dC5vcmcvMIG2BgNVHREEga4wgauCK21haWwuc2FtYmFmcmVzaC5jb20uYnIuY3At MjEud2ViaG9zdGJveC5uZXSCEXNhbWJhZnJlc2guY29tLmJygiZzYW1iYWZyZXNo LmNvbS5ici5jcC0yMS53ZWJob3N0Ym94Lm5ldIIVd3d3LnNhbWJhZnJlc2guY29t LmJygip3d3cuc2FtYmFmcmVzaC5jb20uYnIuY3AtMjEud2ViaG9zdGJveC5uZXQw gf4GA1UdIASB9jCB8zAIBgZngQwBAgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsG AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIw gZ4MgZtUaGlzIENlcnRpZmljYXRlIG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5 IFJlbHlpbmcgUGFydGllcyBhbmQgb25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhl IENlcnRpZmljYXRlIFBvbGljeSBmb3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0 Lm9yZy9yZXBvc2l0b3J5LzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AG9Tdqwx 8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABZfBydnoAAAQDAEcwRQIhAJJN p1J0NDplVThbrnLwfvwd6owNuoxqn7Jl9gyt/R56AiBLjSi5iNclLJcJcYSQZtT6 SjcsnBzrINsueUAKLhtYcgB3ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLcpMMM9OVF R/R4AAABZfByduIAAAQDAEgwRgIhAPbnyNn3FcPa67Hcptt9oRLI2iLsvLoL5xJx zYA5aNcyAiEAjRQeqm8tGS3ORooE44bTSpKWSyxO/jHC4YpU4xi2K60wDQYJKoZI hvcNAQELBQADggEBAEBiOw745S6RDwBSlgPBAUoUskfN+3uLs4VQxM8gNhklSycF lX3JRz4WXzDNFOvwurU1QdzOXMrPmM+cpwhHB6xtV+4fTTJvQqrAcfq/B0Ea5RY7 JZqBuD7bC0phCdvedkzqt18nXeCewr4BUcrcIrewv8YwHFQodH8S9TU1DoIBuvmq I5JeEfos74PWexlD5hCJtmzaF4qidZSIUq1ReXsQxTxDCTNcgpi2O48AiTtgkVM0 ak6aSWsxZBbdRaLofM3czVPVyV9fU8D9zqwov8lQ9n/7EddpdmvPsq4btg2Mzh8e 1/6kQ5Jo4vVZecnOXvIZ+JvHvuqL5niaWqli760= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziaFNY+aD6xLbO2TNu1D sAI+QGOPGUqvOPdgCYBSO79CoIy4I72tB3BiaT7WbgHf+QPcN1YE0weMwIrQCuwi 2t6f41D8+3f/dfvJpuAkRYd2TwO2mvWWSYMq2GQ2gieoQcz9N7x0XzRjpiPJh3r4 dcY4VdRAjGvOwx7/tjkXrevfV6+ZpU08eY2qPsBErr/vgNu+XKYjBtGpfAN8P1/p XwUJM2mOyLDdPNGJ088n8ZSErq5Ma92Kvjl45dKoS4x2WHnGWmDGoGWRJY79C78K jdo91FNUurahGOMsxjTRfosJQqXEQvfsabHY9JGLYDA+LwVKIXjrTRv5W1dmveWH RwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 319844482932710516830414731259244151341348 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-19 05:09:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-18 05:09:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sambafresh.com.br' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26024085914822597062712990251386453284941377363041536532077005539251311075406117554490106853741970689976994131055108100919757791366961486699428298118023766385169010450555022371473872061813330223292302580556317357947219171119085043379656304624626545163870543334126497864557325026803275487418201332769165583584571543509971398005739817415779626333632033589088362457025935404969257388304390433599362406848659240057723456850667056199408380906014214870421939687763153885440099480325579036292333458678669978921298246979931295218926366476295611696747119960526562320412094605992289654565352726977926451888859189926802886068039 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 68f1d5e4131474cb00dc36d7953dde00c04163e9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (174 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sambafresh.com.br.cp-21.webhostbox.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sambafresh.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sambafresh.com.br.cp-21.webhostbox.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sambafresh.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sambafresh.com.br.cp-21.webhostbox.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000165f072767a0000040300473045022100924da75274343a6555385bae72f07efc1dea8c0dba8c6a9fb265f60cadfd1e7a02204b8d28b988d7252c970971849066d4fa4a372c9c1ceb20db2e79400a2e1b5872007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165f07276e20000040300483046022100f6e7c8d9f715c3daebb1dca6db7da112c8da22ecbcba0be71271cd803968d7320221008d141eaa6f2d192dce468a04e386d34a92964b2c4efe31c2e18a54e318b62bad . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0040623b0ef8e52e910f00529603c1014a14b247cdfb7b8bb38550c4cf203619254b2705957dc9473e165f30cd14ebf0bab53541dcce5ccacf98cf9ca7084707ac6d57ee1f4d326f42aac071fabf07411ae5163b259a81b83edb0b4a6109dbde764ceab75f275de09ec2be0151cadc22b7b0bfc6301c5428747f12f535350e8201baf9aa23925e11fa2cef83d67b1943e61089b66cda178aa275948852ad51797b10c53c4309335c8298b63b8f00893b609153346a4e9a496b316416dd45a2e87ccddccd53d5c95f5f53c0fdceac28bfc950f67ffb11d769766bcfb2ae1bb60d8cce1f1ed7fea4439268e2f55979c9ce5ef219f89bc7beea8be6789a5aa962efad