helpdesk.vtfresno.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:d7:41:a7:b6:8f:9c:32:50:a1:9b:c4:8d:e0:72:b1:aa:8f was issued on by Let's Encrypt.
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=helpdesk.vtfresno.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:d7:41:a7:b6:8f:9c:32:50:a1:9b:c4:8d:e0:72:b1:aa:8fSerial Number (int): 421697123251120666671811247333827641715343
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: af:02:5e:63:32:3b:32:77:4d:3e:43:11:70:d8:89:a8:2c:14:4a:ab
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 29:8e:d6:65:e7:f3:b8:f9:37:cf:14:c3:4e:31:61:ef:d5:b2:ef:05
Fingerprint (sha256): 47:5f:34:c1:73:2a:24:1f:48:a3:e8:c7:81:d9:4f:a2:25:69:2c:85:33:c6:7e:dd:66:5c:bd:f8:e2:9e:7d:ab
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate helpdesk.vtfresno.com
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for helpdesk.vtfresno.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
helpdesk.vtfresno.com
soporte.clicsoporte.com
soporte.estrategasdigitales.com
support.afritask.com
support.bestchoiceit.com
support.bookatech.com.au
support.cte.net.au
support.farmstripe.com
support.just-fashion.com
support.scsfixit.com
usdesk.thandora.com
soporte.clicsoporte.com
soporte.estrategasdigitales.com
support.afritask.com
support.bestchoiceit.com
support.bookatech.com.au
support.cte.net.au
support.farmstripe.com
support.just-fashion.com
support.scsfixit.com
usdesk.thandora.com
Other certificates including the domain name vtfresno.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for helpdesk.vtfresno.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgISBNdBp7aPnDJQoZvEjeBysaqPMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjMwMjAwMThaFw0y MDAxMjEwMjAwMThaMCAxHjAcBgNVBAMTFWhlbHBkZXNrLnZ0ZnJlc25vLmNvbTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKJDMd6/+yAdW0tL+VAMfJ+k l+XqwA4SOy/+WFs5FE+4+0yeuiFbPvE+L8GG9WyGr+TysUUcDi5/Q9lyO+MV4HzH pu7YGDqLymyGiEHKc2Gf8GlVV1yP5+A7DR39oHH+a9Jqv57eXcpkeU9+obdUoW05 j2OYZpZpf7oPT0QPP+mn8FA3H0WeZB90D/1b6dU5fm/hSaSAWSCn0kD7MRMUr0kk mq6dKz30Eezjtfyw9CVWiSBXwD7Y+wbhA+za2BPqLLU5QySKp6GT3rVTUYzQv9Ha zEiB7aceDEjZYIBE/hAXKyUxHtXWbXoTMs32Pj+gRZE2IyQ048j1+rH7NAZTT6cC AwEAAaOCA2UwggNhMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUrwJeYzI7MndNPkMR cNiJqCwUSqswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzCCARkGA1UdEQSCARAwggEMghVoZWxwZGVzay52dGZyZXNuby5j b22CF3NvcG9ydGUuY2xpY3NvcG9ydGUuY29tgh9zb3BvcnRlLmVzdHJhdGVnYXNk aWdpdGFsZXMuY29tghRzdXBwb3J0LmFmcml0YXNrLmNvbYIYc3VwcG9ydC5iZXN0 Y2hvaWNlaXQuY29tghhzdXBwb3J0LmJvb2thdGVjaC5jb20uYXWCEnN1cHBvcnQu Y3RlLm5ldC5hdYIWc3VwcG9ydC5mYXJtc3RyaXBlLmNvbYIYc3VwcG9ydC5qdXN0 LWZhc2hpb24uY29tghRzdXBwb3J0LnNjc2ZpeGl0LmNvbYITdXNkZXNrLnRoYW5k b3JhLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYG CCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB 1nkCBAIEgfUEgfIA8AB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kT AAABbfaO1T8AAAQDAEcwRQIhAI8DIcwkI5Mv67oY2rqWynrGFbowKhw7WcOtNxhg /Uy7AiBklOr94AsmmuoULRp6al23vtufVJiROwTLS2TcqqapgwB2AAe3XBvlfWj/ 8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABbfaO1UEAAAQDAEcwRQIgKC2DKnPk QlWaK9jgthtJ1tKz0DWiVMy5wW/KD1vgsEICIQCt9Szv3S2fTMycUz7F2OzW710Z RAoC7+OmqDsakqMWmDANBgkqhkiG9w0BAQsFAAOCAQEAlXobpP0AccAWE5tUdqos YZCQ6Y8i9tPRNPF6bi0Ys79h/fga/dThu0+geXL8iyo7Y3AklBz8Ftd/oOuza4Tj MnfAIYgunV0ojci64k86fD0UPjDY/46ymQeU0zRZ2YtvIKA6BGOxvJOukCKBvnAp 3PgQkX3jvHqQl8GnS0XCGvibiccUP3BjxF0cch/P9u+Qf4G9aJt6jtuvGA63y1Rv iM4L3dA9T90SDrEBj5cVZiqdxr2baGuhl5cg+8tJ7K9glrMw4mGEm4zaqTIadac9 2sG+mXLNguRaiONslcr7EUcdfxOEXuc1r7oVU82L94loqPZgpua7rwVTkpoaI4BD 7Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokMx3r/7IB1bS0v5UAx8 n6SX5erADhI7L/5YWzkUT7j7TJ66IVs+8T4vwYb1bIav5PKxRRwOLn9D2XI74xXg fMem7tgYOovKbIaIQcpzYZ/waVVXXI/n4DsNHf2gcf5r0mq/nt5dymR5T36ht1Sh bTmPY5hmlml/ug9PRA8/6afwUDcfRZ5kH3QP/Vvp1Tl+b+FJpIBZIKfSQPsxExSv SSSarp0rPfQR7OO1/LD0JVaJIFfAPtj7BuED7NrYE+ostTlDJIqnoZPetVNRjNC/ 0drMSIHtpx4MSNlggET+EBcrJTEe1dZtehMyzfY+P6BFkTYjJDTjyPX6sfs0BlNP pwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 421697123251120666671811247333827641715343 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-23 02:00:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 02:00:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'helpdesk.vtfresno.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20483740397876181990717529191567257330852302373259035696036962719005264914125706180426604497634072410451841284229966290672099609643614044536772826374929562364089569215509657587881278493861458542421898951930113050722592599661965919348213341244359506272793573139894838845014476835872073895327574621971467081561258752550935136902957295175448388343500043638669870918069305310031963961783173646121797470271446490008730080527798619449831848481486016616694715131130761357227853421163563347309356506334601695250367415125721591800881252958219469230784781862373250246476410362699969079369394381209264311737401202695410174611367 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) af025e63323b32774d3e431170d889a82c144aab . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (272 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.vtfresno.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.clicsoporte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soporte.estrategasdigitales.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.afritask.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bestchoiceit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.bookatech.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.cte.net.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.farmstripe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.just-fashion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.scsfixit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usdesk.thandora.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016df68ed53f00000403004730450221008f0321cc2423932febba18daba96ca7ac615ba302a1c3b59c3ad371860fd4cbb02206494eafde00b269aea142d1a7a6a5db7bedb9f5498913b04cb4b64dcaaa6a98300760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016df68ed54100000403004730450220282d832a73e442559a2bd8e0b61b49d6d2b3d035a254ccb9c16fca0f5be0b042022100adf52cefdd2d9f4ccc9c533ec5d8ecd6ef5d19440a02efe3a6a83b1a92a31698 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00957a1ba4fd0071c016139b5476aa2c619090e98f22f6d3d134f17a6e2d18b3bf61fdf81afdd4e1bb4fa07972fc8b2a3b637024941cfc16d77fa0ebb36b84e33277c021882e9d5d288dc8bae24f3a7c3d143e30d8ff8eb2990794d33459d98b6f20a03a0463b1bc93ae902281be7029dcf810917de3bc7a9097c1a74b45c21af89b89c7143f7063c45d1c721fcff6ef907f81bd689b7a8edbaf180eb7cb546f88ce0bddd03d4fdd120eb1018f9715662a9dc6bd9b686ba1979720fbcb49ecaf6096b330e261849b8cdaa9321a75a73ddac1be9972cd82e45a88e36c95cafb11471d7f13845ee735afba1553cd8bf78968a8f660a6e6bbaf0553929a1a238043ed