castelbolognese.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:b0:ce:cc:6a:b6:cb:9e:79:1c:81:b3:99:86:59:53:fa:9c was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=castelbolognese.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b0:ce:cc:6a:b6:cb:9e:79:1c:81:b3:99:86:59:53:fa:9cSerial Number (int): 321501436733474703887958639675797438462620
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 4e:f6:db:30:22:23:92:9d:11:bd:aa:d5:b9:6b:45:cf:e5:b5:b3:3b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 2e:79:f2:80:a8:62:7a:b6:7c:c0:dd:05:55:cc:c4:85:5b:cc:47:b3
Fingerprint (sha256): 4f:9d:89:2d:cc:d7:0c:a6:05:b5:71:3f:c4:43:12:e9:79:e7:b6:c3:bb:11:7d:28:01:e0:ff:1a:58:2f:6e:24
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate castelbolognese.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for castelbolognese.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
castelbolognese.com
Other certificates including the domain name castelbolognese.com
(limited to 100 certificates)
advancedroofingservice.com
www.castelbolognese.com
pbfa.ca
castelbolognese.com
www.castelbolognese.com
www.castelbolognese.com
castelbolognese.com
castelbolognese.com
castelbolognese.com
castelbolognese.com
www.castelbolognese.com
castelbolognese.com
www.castelbolognese.com
castelbolognese.com
463.me
castelbolognese.com
sangiovanniinfiore.org
castelbolognese.com
yacht.wine
www.cobbinsurance.com
artificialtooth.com
www.castelbolognese.com
pbfa.ca
castelbolognese.com
www.castelbolognese.com
www.castelbolognese.com
castelbolognese.com
castelbolognese.com
castelbolognese.com
castelbolognese.com
www.castelbolognese.com
castelbolognese.com
www.castelbolognese.com
castelbolognese.com
463.me
castelbolognese.com
sangiovanniinfiore.org
castelbolognese.com
yacht.wine
www.cobbinsurance.com
artificialtooth.com
Certificate
The complete raw certificate details for castelbolognese.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgISA7DOzGq2y555HIGzmYZZU/qcMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDIwOTAyMzhaFw0y MDAzMDEwOTAyMzhaMB4xHDAaBgNVBAMTE2Nhc3RlbGJvbG9nbmVzZS5jb20wggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDAsKjM4jXAI+Xz2OGP/ukDVTgX LeWCj24u/eL4xgSyyxLCD9RrvEBo60A4wlGf4XxAduN/EPXiIG1YLAQMjftkaDBC 7Rv0EdwGOHJQDo7sv70U/9L/mndAZXeFfR7uDkEJmrsITcafjc2HBgkUqDsP6KZ6 3JdzI/NG40mXDkh6HUXuB8orJT1zhn/CFVNoZAjobpzu1ljPxxWoYsGpqehK0jP8 yjmq1jg77v0f0ZG1CmjI3DXGj338YZwBkiiq0847zvNQ0QMSSLl7ah/lbvKmlQZp 6wOZPZfEMf48wswM1f3KeAD4Tegv+/pQNNwnx5mVXElm7qGnw6chNDsPQ2j26RWu RwEnjIjweAW9Ttgf0bvyk5Laf7YRJ7T462ktOq0Hr/1MGQzpNYQRpCapcJ/4lLsO Mvl400i6bJiamRwkjAIer1iIazMRQaJpGvvqNcrFAm0GOQY2FKHOjVB8jcvIr3uo B0/XjzR/YZSZ5WmoM6PVUo9Czue6zj7+He5lHn8OCPCz5O1pBY4oLVt25kcDxW6s 2EjFroFbBBzeWWDaxvCENDN7Kgr1MzTedxCGgAGC45QopNxpUNxQ5Y7WTA+PkRD4 Up7NMCiqlsmFU/SOmnklETbNEJHbURXq4BOTrtZNO4vPYCvFIzoANvDVjLLsmwqQ kRJEDtrNpLk6QcSEyQIDAQABo4ICaTCCAmUwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBRO9tswIiOSnRG9qtW5a0XP5bWzOzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE2Nhc3RlbGJvbG9n bmVzZS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEE AdZ5AgQCBIH2BIHzAPEAdgDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6y cwAAAW7GD927AAAEAwBHMEUCIQCwGQFiaZmAprIwoEjWBs/eFCO3KsOXE0vkcKqr 8s4+OAIgVnCnbZ+isNhH/xCDUtWQQ2x7uzMfBsXux4eA1nNAOnIAdwCyHgXMi6LN iiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW7GD928AAAEAwBIMEYCIQCe/V0A cQohvYVVZGZsXAmjviavObN+2YSMl13im9w2TwIhAJC2r1mwOvqkA67JW2iyklR3 Rp7SKWqUwV+1hRK/fYjmMA0GCSqGSIb3DQEBCwUAA4IBAQBoSmt0sNM8HpOuWWpY 5XWoQshvKfv0krPbZ+J7AJ+pAV3RLQ9oE0gmb54OAGHCx9KkfeK9hvPx8cfir5Ry 8U17gkfq4TMe37v6UcSJqs0HrBDy9ivVy4TE6E0RiMIlVC6+JbGuh5Cu43n5i0BW nLXHrrNUoy0on1E5A4xEHRbzUE5KXeeFfIe+OHapY8oROPrqakm2COkNk+P38I9o rezoXKs4adkk8JTwGwMIr6osl9tHf66WjSU3JCRSXJmvU3RNyL2GfTy6pgjwnj1B MdTj0B2DZCjJv6TreeIKEn4t2/qF6sTi3Eg0eYthZdO3SxbPGg5tH5jcsCRPu40q R5KB -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwLCozOI1wCPl89jhj/7p A1U4Fy3lgo9uLv3i+MYEsssSwg/Ua7xAaOtAOMJRn+F8QHbjfxD14iBtWCwEDI37 ZGgwQu0b9BHcBjhyUA6O7L+9FP/S/5p3QGV3hX0e7g5BCZq7CE3Gn43NhwYJFKg7 D+imetyXcyPzRuNJlw5Ieh1F7gfKKyU9c4Z/whVTaGQI6G6c7tZYz8cVqGLBqano StIz/Mo5qtY4O+79H9GRtQpoyNw1xo99/GGcAZIoqtPOO87zUNEDEki5e2of5W7y ppUGaesDmT2XxDH+PMLMDNX9yngA+E3oL/v6UDTcJ8eZlVxJZu6hp8OnITQ7D0No 9ukVrkcBJ4yI8HgFvU7YH9G78pOS2n+2ESe0+OtpLTqtB6/9TBkM6TWEEaQmqXCf +JS7DjL5eNNIumyYmpkcJIwCHq9YiGszEUGiaRr76jXKxQJtBjkGNhShzo1QfI3L yK97qAdP1480f2GUmeVpqDOj1VKPQs7nus4+/h3uZR5/Dgjws+TtaQWOKC1bduZH A8VurNhIxa6BWwQc3llg2sbwhDQzeyoK9TM03ncQhoABguOUKKTcaVDcUOWO1kwP j5EQ+FKezTAoqpbJhVP0jpp5JRE2zRCR21EV6uATk67WTTuLz2ArxSM6ADbw1Yyy 7JsKkJESRA7azaS5OkHEhMkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 321501436733474703887958639675797438462620 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 09:02:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 09:02:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'castelbolognese.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786106924249259155557637511452327256805433499871686941468135444860247209635719881361581397444684364417425099251270148168549575293454795796024264425303477534604100239396274745190894137964239348679614175948479765885308327922730973052451962994090460243423839992392032080453896987819124523722025878166325294532173544051638692231506026168983239503003578644321086003557880549644196638323282149343921689990360198762848671760586196286047677756134956488022112411997334858160116630853465711861318584975377514787336488580999050333118958915065873173300411548163432419313705997119425509025793037939736186896944067346338072104195509503346690855487417550918777502302635191162210731652640048151943923458181695943748870743881223514151100745660213221519423984346210216836019841555500100823803737147109093250143521532003021108012337408734954037623071117397298472619495262367045309998879621804060686181831989371656503302525628604687845047607820305330769436335651952692648966409132493685827670387303050802855114368961345316503726923557760234249313674936355933069814662990124993711596714533510335995946613295092039639068425373306614331896947583561568373798304764290906387987660698282742610622023005302980945038648477555312390024926671790806668463455896777 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4ef6db302223929d11bdaad5b96b45cfe5b5b33b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'castelbolognese.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ec60fddbb0000040300473045022100b0190162699980a6b230a048d606cfde1423b72ac397134be470aaabf2ce3e3802205670a76d9fa2b0d847ff108352d590436c7bbb331f06c5eec78780d673403a72007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ec60fddbc00000403004830460221009efd5d00710a21bd855564666c5c09a3be26af39b37ed9848c975de29bdc364f02210090b6af59b03afaa403aec95b68b2925477469ed2296a94c15fb58512bf7d88e6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00684a6b74b0d33c1e93ae596a58e575a842c86f29fbf492b3db67e27b009fa9015dd12d0f681348266f9e0e0061c2c7d2a47de2bd86f3f1f1c7e2af9472f14d7b8247eae1331edfbbfa51c489aacd07ac10f2f62bd5cb84c4e84d1188c225542ebe25b1ae8790aee379f98b40569cb5c7aeb354a32d289f5139038c441d16f3504e4a5de7857c87be3876a963ca1138faea6a49b608e90d93e3f7f08f68adece85cab3869d924f094f01b0308afaa2c97db477fae968d25372424525c99af53744dc8bd867d3cbaa608f09e3d4131d4e3d01d836428c9bfa4eb79e20a127e2ddbfa85eac4e2dc4834798b6165d3b74b16cf1a0e6d1f98dcb0244fbb8d2a479281