morganblackhurst.com
Issued by R3
About this certificate
This digital certificate with serial number 03:4f:5b:1f:73:dd:b4:5a:c4:b0:fd:f6:90:39:67:d0:c0:80 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=morganblackhurst.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4f:5b:1f:73:dd:b4:5a:c4:b0:fd:f6:90:39:67:d0:c0:80Serial Number (int): 288340287840896265847103905745818126172288
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 24:43:ee:96:e6:ed:28:4d:dc:95:35:32:de:5a:00:9d:ed:cb:27:f0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): a4:c8:65:c9:6c:a7:90:5c:b7:95:93:a2:71:a0:4f:5e:3f:8e:be:f7
Fingerprint (sha256): 45:de:92:bf:01:ab:9b:35:2c:de:c3:df:0f:ce:c1:a8:00:da:b5:a1:2c:2d:ce:ad:04:4a:ac:1b:ee:c9:e0:94
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate morganblackhurst.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for morganblackhurst.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.morganblackhurst.com
morganblackhurst.com
morganblackhurst.com
Other certificates including the domain name morganblackhurst.com
(limited to 100 certificates)
1.bixpro.co
househustles.com
imexhs.com
cannabistaxi.co
airmedix.app
morganblackhurst.com
bestfinancialcu.wallit.app
paulosimoes.nerit.app
www.morganblackhurst.com
morganblackhurst.com
cdn.thingbase.com
1.bixpro.co
www.bracketmaster.net
www.mytesladata.com
kingslanding.pgevents.my
www.triporate.eu
www.triporate.eu
morganblackhurst.com
io.frc4322.com
www.derma-t.com
cdn.thingbase.com
dev.bidget.app
morganblackhurst.com
marmalade023.diofantino.com
morganblackhurst.com
www.nuvudigital.com
morganblackhurst.com
househustles.com
app.myop.fr
austincondolaw.com
morganblackhurst.com
saviortvd.tk
jsoneditor.site
dev.bidget.app
shopcasas.com.br
househustles.com
imexhs.com
cannabistaxi.co
airmedix.app
morganblackhurst.com
bestfinancialcu.wallit.app
paulosimoes.nerit.app
www.morganblackhurst.com
morganblackhurst.com
cdn.thingbase.com
1.bixpro.co
www.bracketmaster.net
www.mytesladata.com
kingslanding.pgevents.my
www.triporate.eu
www.triporate.eu
morganblackhurst.com
io.frc4322.com
www.derma-t.com
cdn.thingbase.com
dev.bidget.app
morganblackhurst.com
marmalade023.diofantino.com
morganblackhurst.com
www.nuvudigital.com
morganblackhurst.com
househustles.com
app.myop.fr
austincondolaw.com
morganblackhurst.com
saviortvd.tk
jsoneditor.site
dev.bidget.app
shopcasas.com.br
Certificate
The complete raw certificate details for morganblackhurst.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgISA09bH3PdtFrEsP32kDln0MCAMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA5MTYwMDE3NDhaFw0yMzEyMTUwMDE3NDdaMB8xHTAbBgNVBAMT FG1vcmdhbmJsYWNraHVyc3QuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC CgKCAgEAx6ibMxF7XssZjPtq2hjrWgWww7wn3lVMbnz7RrYOoEPoduOMsLpicoHw qvbhD0AWjgs0wHWkwhAi4px+KCZNlSL956qK6EhW0cUfGI8UatfvjiGwYn4C/TkN QyzBntKcIBLKFaD00Qb/t8siBvs39pPK7vYuvj7dyONJN5rTHFOm5cFPP1sMXE9I IbGJm3ekVU07Qs31u9Zs0LYL+myZgwP/T4x/lt/WzYesrKDyrXikPYJCAtRotKbV jO5FO3Kz5jbdIeVW5qJTvQ20bzQyKNUaIEkB0b+AHgO77v7nh4/9KHz3JRLO7tUJ GYJimHJLR7ol3JvXsLdilC3H2TnvQBzKwH/LPlTxqjK5yWqoLn61/m+6UdVNkb3S ATLCakVQ4VtAcakcYVNrhqmAGJIUpfXrsIV12VsRJRPMFS+KpiY1TIZV3TBM/owN skU8vk1wB7L0sBG/NNLrJxAyYQaWUiP8Nj8jcohbWMQmE+KElRQi8OZGkWoBFW8C AM3zYbWhSI6+egKZNagyMeBsnA54+vCKL7JQ9dZQO9Qdbf8nAq0hr/FgA1j/4CKh UKr/wZoK3v8+VpUlNocYTIv/0MGXZaW9kZlEOhxmEtlyT3wiHaLTQNdjtFhx88n7 8Ag/R4e0fDMFZeZXkfz2eYZeC0b8XhC4v7CO6OlB01BB3xpDbhcCAwEAAaOCAi4w ggIqMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJEPulubtKE3clTUy3loAne3LJ/Aw HwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBH MCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKG Fmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wNwYDVR0RBDAwLoIWKi5tb3JnYW5ibGFj a2h1cnN0LmNvbYIUbW9yZ2FuYmxhY2todXJzdC5jb20wEwYDVR0gBAwwCjAIBgZn gQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgC3Pvsk35xNunXyOcW6WPRs XfxCz3qfNcSeHQmBJe20mQAAAYqbkL42AAAEAwBHMEUCIQCDElHMWNxXo9zzqxni K2Tdjnq4WTkjl6eR4kR071NTvgIge1+Xs+r8cw88KdEsRFdI0wlGZ5M7PexeaZzJ enm57+oAdgCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAYqbkL6B AAAEAwBHMEUCIFYneIkCHUTtADQjthMZL0iqUV6Hsone8eF8pOw8eGRPAiEAsYS3 NrAXbpiIn2gJufEQy7Kk+SYhoPJmjkzcExrYr7QwDQYJKoZIhvcNAQELBQADggEB ABGcrfv3+lUf4Q4tfHDv2u6bhsE0OQ14lDxk9aPoSb89cEDSg2BkaOxkxhHGM2Ca GlF9/mxBkWTQoBoy2ef4Yzmt90T5EFQibHG8mb6KvsD8hfK1T641QZ55ncZKLu8B /nueliY6ZsgfxKA1hhRuIdnkFTLo5KZre9iuUrpTRyuik1mna46y/0znec8+S3gi bsUo/y2uis/JmWPI3X9aQYS/Wqvi3YD7DjOl6h42bKj3LsgXiWN89lRm6Ufka7gn 2tfX2GpZk4eVcSxwPrgQbCm6IExsPwLvDr8kh78FfnQsW5TIX5MV08dbVv4hyFQ8 zu42AFyiXPWv5drIO0jLf2M= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx6ibMxF7XssZjPtq2hjr WgWww7wn3lVMbnz7RrYOoEPoduOMsLpicoHwqvbhD0AWjgs0wHWkwhAi4px+KCZN lSL956qK6EhW0cUfGI8UatfvjiGwYn4C/TkNQyzBntKcIBLKFaD00Qb/t8siBvs3 9pPK7vYuvj7dyONJN5rTHFOm5cFPP1sMXE9IIbGJm3ekVU07Qs31u9Zs0LYL+myZ gwP/T4x/lt/WzYesrKDyrXikPYJCAtRotKbVjO5FO3Kz5jbdIeVW5qJTvQ20bzQy KNUaIEkB0b+AHgO77v7nh4/9KHz3JRLO7tUJGYJimHJLR7ol3JvXsLdilC3H2Tnv QBzKwH/LPlTxqjK5yWqoLn61/m+6UdVNkb3SATLCakVQ4VtAcakcYVNrhqmAGJIU pfXrsIV12VsRJRPMFS+KpiY1TIZV3TBM/owNskU8vk1wB7L0sBG/NNLrJxAyYQaW UiP8Nj8jcohbWMQmE+KElRQi8OZGkWoBFW8CAM3zYbWhSI6+egKZNagyMeBsnA54 +vCKL7JQ9dZQO9Qdbf8nAq0hr/FgA1j/4CKhUKr/wZoK3v8+VpUlNocYTIv/0MGX ZaW9kZlEOhxmEtlyT3wiHaLTQNdjtFhx88n78Ag/R4e0fDMFZeZXkfz2eYZeC0b8 XhC4v7CO6OlB01BB3xpDbhcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 288340287840896265847103905745818126172288 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-16 00:17:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 00:17:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'morganblackhurst.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814536097190085486219648387355150870573200698253450184015146270002152578315687819816267505867693310405082468133567306672202296262407717291824414560637217623535175476219258791729363198796857087443952045112447359819806984232826663130465476738256914030732394861371362300395000449018023068559339344875675235334346772654735502325420053139303664375402333466181456317684094638120511222761473769097039527800215799561058669476661266159426913784639962315254424711774314770943457217984194816742944384498635564574730853830203158321280288035738276677217654527469133292486167271470366355159246489810185277251568751158268737034557959870905593017783209179400957982836510723195061300780843639082926572553719571005042265586015477527246979889580966040188662924251567969158061075758658217431496760496016464605700846728540708277865885186546925160570548422399842334267470889238331472358039857884855202656508415272429926391953272726461206875800475738459917422862537294403601133393726547965100171981233716360643458059642227756807142807272874697838038792437501226712294759517052304423234060737124796247621340680265937634187910282782041356652458257775491474416751294448429488532509842815598583719964466362645399106457945783508748362451527188042812909095710231 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2443ee96e6ed284ddc953532de5a009dedcb27f0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morganblackhurst.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morganblackhurst.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a9b90be360000040300473045022100831251cc58dc57a3dcf3ab19e22b64dd8e7ab859392397a791e24474ef5353be02207b5f97b3eafc730f3c29d12c445748d3094667933b3dec5e699cc97a79b9efea007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a9b90be810000040300473045022056277889021d44ed003423b613192f48aa515e87b289def1e17ca4ec3c78644f022100b184b736b0176e98889f6809b9f110cbb2a4f92621a0f2668e4cdc131ad8afb4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00119cadfbf7fa551fe10e2d7c70efdaee9b86c134390d78943c64f5a3e849bf3d7040d283606468ec64c611c633609a1a517dfe6c419164d0a01a32d9e7f86339adf744f91054226c71bc99be8abec0fc85f2b54fae35419e799dc64a2eef01fe7b9e96263a66c81fc4a03586146e21d9e41532e8e4a66b7bd8ae52ba53472ba29359a76b8eb2ff4ce779cf3e4b78226ec528ff2dae8acfc99963c8dd7f5a4184bf5aabe2dd80fb0e33a5ea1e366ca8f72ec81789637cf65466e947e46bb827dad7d7d86a59938795712c703eb8106c29ba204c6c3f02ef0ebf2487bf057e742c5b94c85f9315d3c75b56fe21c8543cceee36005ca25cf5afe5dac83b48cb7f63