www.candlecharting.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:8b:0f:48:40:a3:9e:c7:c9:1e:f0:e8:3b:d8:a3:f8:7b:80 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.candlecharting.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:8b:0f:48:40:a3:9e:c7:c9:1e:f0:e8:3b:d8:a3:f8:7b:80Serial Number (int): 308656420373639319888051874804265028975488
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 74:4f:c2:23:90:69:cd:90:84:64:d5:bd:e6:ad:d5:28:b6:9c:5c:83
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 5c:a5:2b:eb:6f:3b:87:f1:aa:47:f4:a1:00:a8:db:83:98:48:2c:a9
Fingerprint (sha256): 3b:cb:c6:ce:e0:45:5b:fe:ac:d9:3d:72:56:a4:38:30:51:b3:cb:c9:53:57:52:6b:e0:f3:3f:19:78:37:72:7a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.candlecharting.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.candlecharting.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.candlecharting.com
Other certificates including the domain name candlecharting.com
(limited to 100 certificates)
selfridingcab.com
candlecharting.com
stflanagan.ie
candlecharting.com
www.hmolaw.com
www.candlecharting.com
aerofare.com
candlecharting.com
gamersground.ca
sunraj.in.canibuild.house
candlecharting.com
www.candlecharting.com
www.candlecharting.com
h1920.com
allanblock.ca
selfridingcab.com
varnd.com
miragesubsea.org
candlecharting.com
candlecharting.com
strandhotel.co.za
candlecharting.com
stflanagan.ie
candlecharting.com
www.hmolaw.com
www.candlecharting.com
aerofare.com
candlecharting.com
gamersground.ca
sunraj.in.canibuild.house
candlecharting.com
www.candlecharting.com
www.candlecharting.com
h1920.com
allanblock.ca
selfridingcab.com
varnd.com
miragesubsea.org
candlecharting.com
candlecharting.com
strandhotel.co.za
Certificate
The complete raw certificate details for www.candlecharting.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgISA4sPSECjnsfJHvDoO9ij+HuAMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MTAwMDQzNTJaFw0x OTExMDgwMDQzNTJaMCExHzAdBgNVBAMTFnd3dy5jYW5kbGVjaGFydGluZy5jb20w ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDMQEABW4L4FNsfdpcJo3+7 aAz5mmCTNOQWdMX45mISITKK/zxAZFTzUC1/sHvwZghtdDWAeY/qXeohHqkGdLtX YexN2RVHA5o3fVM2edufniRHicqufWxREaFRhflAWSfup+7QKni3/o67JRfEaxbW OJL6upEsvffBZG0fD94YmVnvJ34ZAod62PVAHC30sGVMYB5nYU/VlHR2ma5oVEnW ffNh9bwieQk2Wij5JO3LwspcgXEQiqln/thipTfh/KK7m+2oKyEQtiMQuV5Of5Kk 4Gbus6lr/Qoq9tTdenkSH3ZZRHkRMcWJwf17TNjAGjXTf/WSP3V1ECC+kkCascd/ 7VtPmevikSjpuipijmSBu/BltXSs2T3vjA5XiTJfk6rdJ05SVZQeAJth+Eo37CJw kJxnqJc/THHAfQJQ852a0iiNpGBvn9+KenKb1H+PEqMvKSBX9SICWqXeEL/ed4Lp 9dZNimOOodNjCdsRaa3IOgNVRJp7XGIljZ3AzV2deXYs0UWS3aMcxXMmmLeOKqwe nR43W39C6Mo2sODWG5bG2JI7daW4kGgoOuAz2hdITGobQuoeTcqvneA11mXwa33D HDiG4+6yhVTEPyJMbnOz1OzTkiTqbKd55Cv216z9UNttrOLcpd09hDpYyCsXTs2C 2SUSeG/mdmMT/frdVCu7gwIDAQABo4ICazCCAmcwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBR0T8IjkGnNkIRk1b3mrdUotpxcgzAfBgNVHSMEGDAWgBSoSmpjBH3duubR ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEGA1UdEQQaMBiCFnd3dy5jYW5k bGVjaGFydGluZy5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEE BgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8o kwGd3fHb/gAAAWx5MkKMAAAEAwBHMEUCIQDUXdjCXEfIn6OJGrHBjZGF3UycU4KX AphBP9oD5NpWOgIgOJeFIe/AeyTzIH06dYFXuBqfEzkVssa65JyTKR464qcAdgBj 8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWx5MkKuAAAEAwBHMEUC IHiVwEEeAtKUW8NdDr2x3WvHwVNuXJUQlASp2dIkYYM6AiEAp7VxC9T8J0kpETtH CrpBiucb8cvfCyTy25WYw+VUB0EwDQYJKoZIhvcNAQELBQADggEBAHI3cmhDq3gT ors2Hie2qgBrR3vtrxr6I0/P2GU6ZYj2K7DVn/h0zIkzn3MJvEBMTt++m+NZRgFS X9FHrZ+KjE7xQNzYtQUW/3Y3fbbf9lV3UziLz1Zi1mkW9wwBRPz+WeKqwr8sEIwb N+vohZn3gwvvgUdAEtaLG3c4E1dtzk03hT8GwPsejLAN7KFkp/4fn//sZx03d6Pu CCV1cDPkDGi+qmbvkk1AhFOQh1MCd4emXqre1zlLgHwmWEt6WL4gdEJNhgRdR6t4 tVUr0WQboI6k+3qDe2mmrlSkOdzgGejXMOScJ8RxpQlktDwFa0JnVWMb+s3ctWTt FK2hGGK73XA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzEBAAVuC+BTbH3aXCaN/ u2gM+ZpgkzTkFnTF+OZiEiEyiv88QGRU81Atf7B78GYIbXQ1gHmP6l3qIR6pBnS7 V2HsTdkVRwOaN31TNnnbn54kR4nKrn1sURGhUYX5QFkn7qfu0Cp4t/6OuyUXxGsW 1jiS+rqRLL33wWRtHw/eGJlZ7yd+GQKHetj1QBwt9LBlTGAeZ2FP1ZR0dpmuaFRJ 1n3zYfW8InkJNloo+STty8LKXIFxEIqpZ/7YYqU34fyiu5vtqCshELYjELleTn+S pOBm7rOpa/0KKvbU3Xp5Eh92WUR5ETHFicH9e0zYwBo103/1kj91dRAgvpJAmrHH f+1bT5nr4pEo6boqYo5kgbvwZbV0rNk974wOV4kyX5Oq3SdOUlWUHgCbYfhKN+wi cJCcZ6iXP0xxwH0CUPOdmtIojaRgb5/finpym9R/jxKjLykgV/UiAlql3hC/3neC 6fXWTYpjjqHTYwnbEWmtyDoDVUSae1xiJY2dwM1dnXl2LNFFkt2jHMVzJpi3jiqs Hp0eN1t/QujKNrDg1huWxtiSO3WluJBoKDrgM9oXSExqG0LqHk3Kr53gNdZl8Gt9 wxw4huPusoVUxD8iTG5zs9Ts05Ik6myneeQr9tes/VDbbazi3KXdPYQ6WMgrF07N gtklEnhv5nZjE/363VQru4MCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 308656420373639319888051874804265028975488 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-10 00:43:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-08 00:43:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.candlecharting.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 833271285250610616491332426198810815439476491457656905191987380230843130734560758851185874743600276665598266288581152123171471026654088172116067897764553371681513095560148885861497436301116434316941713218117181210142104414158786731469801420904660531755970555963233688573140125267613160753016567747032923420507091508127824838649965001950129988574295564045026529532325575064490175255592607886142209452901548674724796862921915048447264446845184423668168621542253842523928403987782207336528740699187520163555720021228513973820054064816891493238607600300113024135300058792092186773557679625532127191488711971036193415538206799558434879403946974195595915773204379806718776563401020885825252408788567371199938804796739361574401010608039804494194198441793352400316682252764002466749870722965650233775789036188182053124535119253603097539046730716278281153619239257549929557020985658908912163629060632291755962765689421050641563218775718495198899889266805038597999167186950094634148437224576285130341755634116670059221797504424339011639190274036666557681063948159322470271770872389790848505652519383038491495484932812665629024070359615702402139666217127204412164673979041656172514970767181180564274258292588558469810782717458540523181314915203 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 744fc2239069cd908464d5bde6add528b69c5c83 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.candlecharting.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c7932428c0000040300473045022100d45dd8c25c47c89fa3891ab1c18d9185dd4c9c5382970298413fda03e4da563a022038978521efc07b24f3207d3a758157b81a9f133915b2c6bae49c93291e3ae2a700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c793242ae000004030047304502207895c0411e02d2945bc35d0ebdb1dd6bc7c1536e5c95109404a9d9d22461833a022100a7b5710bd4fc274929113b470aba418ae71bf1cbdf0b24f2db9598c3e5540741 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007237726843ab7813a2bb361e27b6aa006b477bedaf1afa234fcfd8653a6588f62bb0d59ff874cc89339f7309bc404c4edfbe9be3594601525fd147ad9f8a8c4ef140dcd8b50516ff76377db6dff6557753388bcf5662d66916f70c0144fcfe59e2aac2bf2c108c1b37ebe88599f7830bef81474012d68b1b773813576dce4d37853f06c0fb1e8cb00deca164a7fe1f9fffec671d3777a3ee0825757033e40c68beaa66ef924d408453908753027787a65eaaded7394b807c26584b7a58be2074424d86045d47ab78b5552bd1641ba08ea4fb7a837b69a6ae54a439dce019e8d730e49c27c471a50964b43c056b426755631bfacddcb564ed14ada11862bbdd70