app.cupdapp.com

- China Unionpay Data Services Co., Ltd. -

Issued by TrustAsia OV TLS Pro CA G3

About this certificate

This digital certificate with serial number 08:7c:63:fc:0a:71:43:ed:98:35:d1:7a:e4:30:a3:c4 was issued on by TrustAsia Technologies, Inc..

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

China Unionpay Data Services Co., Ltd.

Organization: China Unionpay Data Services Co., Ltd.
State / Province: 上海市
Country: CN

TrustAsia Technologies, Inc.

Organization: TrustAsia Technologies, Inc.
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 08:7c:63:fc:0a:71:43:ed:98:35:d1:7a:e4:30:a3:c4
Serial Number (int): 11279696704017140216383786690676827076
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ce:a7:ac:0b:6b:c3:72:38:d5:95:d4:84:75:f4:04:a4:ae:e8:18:d9
AuthorityKeyId: 9a:d9:0d:10:c9:c4:5f:4c:32:d2:e7:f0:1b:ad:4a:a6:2d:25:3b:d4

Fingerprint (sha1): 64:94:94:16:83:b7:fb:26:08:08:b7:5d:c4:ac:e1:94:5e:9e:7c:4f
Fingerprint (sha256): 48:c7:7d:74:88:b1:82:67:49:f9:91:dd:8f:64:9c:99:c2:22:4b:4b:ee:91:b9:0b:39:75:c5:27:0f:26:9e:19

Issuing Certificate URL: http://cacerts.digicert.cn/TrustAsiaOVTLSProCAG3.crt

Revocation information

OCSP Server: http://ocsp.digicert.cn
CRL Distribution Point: http://crl.digicert.cn/TrustAsiaOVTLSProCAG3.crl

Check the revocation status for certificate app.cupdapp.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.cupdapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.cupdapp.com
creditcardapp.jlnls.com
creditcard.srcb.com
trip.creditcard.gzcb.com.cn
schedule.leagcard.com
trip.cupdata.com
payment.hebbank.com
collector.cupdapp.com
monitor.cupdapp.com
creditcard.shrcb.com

Other certificates including the domain name cupdapp.com

(limited to 100 certificates)
wechat.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
api.ws.cupdapp.net
stmt.cupdapp.com
ncoas.cupdapp.com
ncoas.cupdapp.com
wechat.cupdapp.com
ws.cupdapp.net
stmt.cupdapp.com
*.unicorn.cupdapp.com
ant.ccbillinst.cupdapp.com
ncoas.cupdapp.com
milkywaypage.cupdapp.com
xdzlar.cupdata.com
ncoas.cupdapp.com
ws.cupdapp.net
appsignsrc.cupdapp.com
ncoas.cupdapp.com
api.ws.cupdapp.net
*.static.cupdapp.com
ws.cupdapp.net
api.ws.cupdapp.net
app.cupdapp.com
ncoas.cupdapp.com
securityplus.cupdata.com
api.ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
directbank.cupdata.com
ws.cupdapp.net
perbank.cupdapp.com
apptranssign.cupdapp.com
stmt.cupdapp.com
ws.cupdapp.net
prepaidcard.leagcard.com
ncoas.cupdapp.com
ncoas.cupdapp.com
appsigndest.cupdapp.com
ncoas.cupdapp.com
stmt.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
api.ws.cupdapp.net
api.ws.cupdapp.net
ncoas.cupdapp.com
app.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
milkywaypage.cupdapp.com
crbep.cupdapp.com
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
stmt.cupdapp.com
app.cupdapp.com
appsigndest.cupdapp.com
ncoas.cupdapp.com
stmt.cupdapp.com
perbank.cupdapp.com
stmt.cupdapp.com
api.ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
ncoas.cupdapp.com
app.cupdapp.com
stmt.cupdapp.com
app.cupdapp.com
ncoas.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ncoas.cupdapp.com
ncoas.cupdapp.com
ncoas.cupdapp.com
app.cupdapp.com
ws.cupdapp.net
stmt.cupdapp.com
api.ws.cupdapp.net
app.cupdapp.com
stmt.cupdapp.com
stmt.cupdapp.com
ncoas.cupdapp.com
ncoas.cupdapp.com
wechat.cupdapp.com
stmt.cupdapp.com
stmt.cupdapp.com
ws.cupdapp.net
api.ws.cupdapp.net
stmt.cupdapp.com
stmt.cupdapp.com
api.ws.cupdapp.net
wx.cupdapp.com

Certificate

The complete raw certificate details for app.cupdapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cdZdGPdXMRiH5JXTeLX
OU3L1pSw2eObXSxpiOh/VjQT2JrIM4b1yh10c67sjX5MJ9YatHRo2NoB0r150hch
9O6ii5Lp15j5oWmIF3tK5P/5t5JI0bvbyAMSWViyElBea7433BQyXOOGQexPkY+4
BLAJvTUjvRgnyE1ANxIpPrQng94AgrMf1Rnar+ykwWwgzMx9Vu9iwwUsYhZM4obq
eYZBgibTvsBNxty53ASh5iLX7GjpCRTNRHyC6MYV2n/aaHWw4WjPrl+pd1w7eroc
Fm6sAqdBdHx4+ltzCvNSXPqd4hB6mo4t/nAQzYVMYi6Jz1OXHQL25KBxR0bRfVqb
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11279696704017140216383786690676827076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia OV TLS Pro CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '上海市'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'China Unionpay Data Services Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.cupdapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27996968266325685061152172869182018147728899899570297903980821637070050231392188412561950649707435711574825221719649043947369964954991247302011541224540013253472355637085425214494536660325240784434873681272960425189659876482079810577026612626561434451296886584217648332859121762721658608339183186336411142238750899436576074196824161625231132550709269115859779330257078814844740667928885700366643569176125656379768179451902067791429391542691223153792675486524840505922148070180939811166638201976202103109783112531844673965122296117334628922462327638041391727781561748280721171859166733717409564302940939768314776427299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9ad90d10c9c45f4c32d2e7f01bad4aa62d253bd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cea7ac0b6bc37238d595d48475f404a4aee818d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (223 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.cupdapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardapp.jlnls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcard.srcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trip.creditcard.gzcb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schedule.leagcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trip.cupdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.hebbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collector.cupdapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.cupdapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcard.shrcb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.cn/TrustAsiaOVTLSProCAG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.cn/TrustAsiaOVTLSProCAG3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009f1d242e2ae8b1dfd99e8dd6fc7d98d7eaea93c4c92c0c3fe75d0ae7357dd0aa2e812a3499786bfc62a5752f77c045499f1e19d29d9a2600f558065454417efd4ce0731b38adee159af25aa9a179122827ffee7862af618a77d140bc908770a8ae569a04d0ca30df41273bb06ea23fab15fb7c485e823bb6914a2fa0c1a546c145de942545f973d2de17ede86b959f5646c3e1e9d7a4ae945fd179a18bbba1239de444931725657466946d6770cf654bc64a93e0d18fa074e767ef96e989ad082da6e8f43a9baedad0adade1331286a0ae8e08850f728af21640e5ebefc2e4c5b95382f885d6cd6b174cbb257ee255250372ecb99b7acf12da1d8de63cb88c12