acquia-sites.com

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate


This digital certificate with serial number 04:e6:d6:f5:26:96:40:27:03:29:48:f5:6c:cc:39:d6 was issued on by DigiCert Inc .

With 105 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Acquia Inc

Organization: Acquia Inc
Organization unit: Acquia Hosting
State / Province: Massachusetts
Locality: Burlington
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
State / Province: Massachusetts
Locality: Burlington
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e6:d6:f5:26:96:40:27:03:29:48:f5:6c:cc:39:d6
Serial Number (int): 6515500119099743495669700521687267798
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e8:e9:79:2d:d9:41:2a:72:fb:fc:f6:b4:81:da:12:a5:d5:99:6b:e0
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): e4:ab:ec:c0:ad:6f:c7:9f:79:40:22:91:0b:1b:57:0b:e4:b0:f9:8c
Fingerprint (sha256): af:38:a3:95:4b:56:9f:e7:e2:94:85:a1:0a:d4:07:ec:6d:78:08:80:b8:f5:3e:3f:0f:8d:52:9e:3b:78:9f:52

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g3.crl

Check the revocation status for the current certificate on acquia-sites.com
105
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

acquia-sites.com
acquia.com
jaspan.com
www.historytoday.com
insider.vancouversun.com
insider.ottawacitizen.com
insider.calgaryherald.com
insider.edmontonjournal.com
insider.leaderpost.com
insider.montrealgazette.com
insider.theprovince.com
insider.thestarphoenix.com
insider.timescolonist.com
insider.windsorstar.com
trainlikeanastronaut.org
www2.wwt.com
www2-test.wwt.com
www.pega.com
staging.pega.com
www.sanduskyregister.com
www.norwalkreflector.com
www.rifftrax.com
www.grandhaventribune.com
www.ise.gov
houseandhome.com
ussecstg.prod.acquia-sites.com
auth.rcmusic.ca
performance.rcmusic.ca
www.nebrwesleyan.edu
dev.nebrwesleyan.edu
store.nebrwesleyan.edu
www.novusbio.com
www.uarts.edu
uarts.edu
sites.sfsu.edu
devonbrc.com
bell.babson.edu
www.extension.harvard.edu
www.stfx.ca
novusstg.prod.acquia-sites.com
origin.novusbio.com
www.cramersportsmed.com
newgov.us
www.summer.harvard.edu
stage.rita.dot.gov
www.timex.com
pega.com
ifcj.prod.acquia-sites.com
www.theblessedlife.com
preparecenter.org
stg.preparecenter.org
hpdev.hunterindustries.com
pdn-stg.pega.com
staff.aljazeera.com.tr
mycurebate.com
www.mycurebate.com
dev.carilionclinic.org
staging.carilionclinic.org
timex.co.uk
timex.ca
www.unavidadebendicion.com
radash.acquia.com
carilionclinic.org
www.carilionclinic.org
insidecarilion.org
carilion.com
www.carilion.com
www.lketest.com
www.lkedev.com
nebrwesleyan.edu
intralinks.com
wwwstage.intralinks.com
www.offers.neutrogena.com
offers.neutrogena.com
www.zyrtec.com
zyrtec.com
m.zyrtec.com
www.visine.com
visine.com
www.my-coach.com
my-coach.com
www.californiaclosets.com
www.ncg.coop
ncg.coop
partners.ncga.coop
ncga.coop
www.ncga.coop
www.powerbar.com
www.powerbar.ca
staging.autismspeaks.org
powerbar.com
powerbar.ca
cambridgecollege.edu
www.generalcatalyst.com
johnsonsbaby.com.br
www.johnsonsbaby.com.br
manhattan.edu
www.manhattan.edu
stage.showcasecinemas.com
dev.showcasecinemas.com
fsg.org
www.fsg.org
lancope.com
buytaert.net
www.buytaert.net

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIObDCCDVSgAwIBAgIQBObW9SaWQCcDKUj1bMw51jANBgkqhkiG9w0BAQsFADBw MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz dXJhbmNlIFNlcnZlciBDQTAeFw0xNTAxMzAwMDAwMDBaFw0xNjA1MzAxMjAwMDBa MIGDMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVzZXR0czETMBEGA1UE BxMKQnVybGluZ3RvbjETMBEGA1UEChMKQWNxdWlhIEluYzEXMBUGA1UECxMOQWNx dWlhIEhvc3RpbmcxGTAXBgNVBAMTEGFjcXVpYS1zaXRlcy5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDCj8ObOhrfZQ2iWiEZ5U4/cBUaWK5DE5Wa qfP8aWVa9s++7Gg1piTE7ENWCBhzyhru2mWNfyMcEdsJReeqhhnB2Ba+cVqvhhT4 dL0DAZ6G+roOmzqvXpft9ToGNKCUchldOoA89Fbf+GfMd8NGGGC7pZNGuQZhPn3t b+HlNz6wc6emH65D8FXEkdwXKVOZsIAUTC5qe+LsjqCbeRyYL9gm3U1Ah4GLxEUb sDfzMEmDBPkDbjoCbb36hegxxcy/44bhczf1xQ+B+VhPoAqAlpgLOp2k02p/Oy13 QU4ozJdp4JtQAreVsrf6bhAXkMbEj6crRDYwhpyNnPso1PELo73/39uQka73zTwu pQmafZlHr6A8iVrWauANiBYmRWHnrHp2P84sCyMzmXabfKMavU0O32afewIpbnp2 tID/qDko//5UTMqa+rDUSYgsOn/kMQVmT72+gsGuYcvhNuq279QEMfKSsrusxETn 7V4zPRupXpQnISbfcgUxRALW5rqCro9EOxh6/yHdcHGM58nXTqUq3zJJpir/TI/l 88jwkrvZhjC7o1w4LZXl6vye7MwX+DgY5Gz/uIRedZHC3BYmFvUCW/mUhlIZkl+H OfFV1kUdmBYAXVJOg87pABE2t9138MRh+QNr9pnXSBUCvSlwxT3IobojHQtEcwpi DU8tWL6zbQIDAQABo4IJ7DCCCegwHwYDVR0jBBgwFoAUUWj/kK8CB3U8zNllZGKi ErhZcjswHQYDVR0OBBYEFOjpeS3ZQSpy+/z2tIHaEqXVmWvgMIIIJgYDVR0RBIII HTCCCBmCEGFjcXVpYS1zaXRlcy5jb22CCmFjcXVpYS5jb22CCmphc3Bhbi5jb22C FHd3dy5oaXN0b3J5dG9kYXkuY29tghhpbnNpZGVyLnZhbmNvdXZlcnN1bi5jb22C GWluc2lkZXIub3R0YXdhY2l0aXplbi5jb22CGWluc2lkZXIuY2FsZ2FyeWhlcmFs ZC5jb22CG2luc2lkZXIuZWRtb250b25qb3VybmFsLmNvbYIWaW5zaWRlci5sZWFk ZXJwb3N0LmNvbYIbaW5zaWRlci5tb250cmVhbGdhemV0dGUuY29tghdpbnNpZGVy LnRoZXByb3ZpbmNlLmNvbYIaaW5zaWRlci50aGVzdGFycGhvZW5peC5jb22CGWlu c2lkZXIudGltZXNjb2xvbmlzdC5jb22CF2luc2lkZXIud2luZHNvcnN0YXIuY29t ghh0cmFpbmxpa2VhbmFzdHJvbmF1dC5vcmeCDHd3dzIud3d0LmNvbYIRd3d3Mi10 ZXN0Lnd3dC5jb22CDHd3dy5wZWdhLmNvbYIQc3RhZ2luZy5wZWdhLmNvbYIYd3d3 LnNhbmR1c2t5cmVnaXN0ZXIuY29tghh3d3cubm9yd2Fsa3JlZmxlY3Rvci5jb22C EHd3dy5yaWZmdHJheC5jb22CGXd3dy5ncmFuZGhhdmVudHJpYnVuZS5jb22CC3d3 dy5pc2UuZ292ghBob3VzZWFuZGhvbWUuY29tgh51c3NlY3N0Zy5wcm9kLmFjcXVp YS1zaXRlcy5jb22CD2F1dGgucmNtdXNpYy5jYYIWcGVyZm9ybWFuY2UucmNtdXNp Yy5jYYIUd3d3Lm5lYnJ3ZXNsZXlhbi5lZHWCFGRldi5uZWJyd2VzbGV5YW4uZWR1 ghZzdG9yZS5uZWJyd2VzbGV5YW4uZWR1ghB3d3cubm92dXNiaW8uY29tgg13d3cu dWFydHMuZWR1ggl1YXJ0cy5lZHWCDnNpdGVzLnNmc3UuZWR1ggxkZXZvbmJyYy5j b22CD2JlbGwuYmFic29uLmVkdYIZd3d3LmV4dGVuc2lvbi5oYXJ2YXJkLmVkdYIL d3d3LnN0ZnguY2GCHm5vdnVzc3RnLnByb2QuYWNxdWlhLXNpdGVzLmNvbYITb3Jp Z2luLm5vdnVzYmlvLmNvbYIXd3d3LmNyYW1lcnNwb3J0c21lZC5jb22CCW5ld2dv di51c4IWd3d3LnN1bW1lci5oYXJ2YXJkLmVkdYISc3RhZ2Uucml0YS5kb3QuZ292 gg13d3cudGltZXguY29tgghwZWdhLmNvbYIaaWZjai5wcm9kLmFjcXVpYS1zaXRl cy5jb22CFnd3dy50aGVibGVzc2VkbGlmZS5jb22CEXByZXBhcmVjZW50ZXIub3Jn ghVzdGcucHJlcGFyZWNlbnRlci5vcmeCGmhwZGV2Lmh1bnRlcmluZHVzdHJpZXMu Y29tghBwZG4tc3RnLnBlZ2EuY29tghZzdGFmZi5hbGphemVlcmEuY29tLnRygg5t eWN1cmViYXRlLmNvbYISd3d3Lm15Y3VyZWJhdGUuY29tghZkZXYuY2FyaWxpb25j bGluaWMub3JnghpzdGFnaW5nLmNhcmlsaW9uY2xpbmljLm9yZ4ILdGltZXguY28u dWuCCHRpbWV4LmNhghp3d3cudW5hdmlkYWRlYmVuZGljaW9uLmNvbYIRcmFkYXNo LmFjcXVpYS5jb22CEmNhcmlsaW9uY2xpbmljLm9yZ4IWd3d3LmNhcmlsaW9uY2xp bmljLm9yZ4ISaW5zaWRlY2FyaWxpb24ub3JnggxjYXJpbGlvbi5jb22CEHd3dy5j YXJpbGlvbi5jb22CD3d3dy5sa2V0ZXN0LmNvbYIOd3d3LmxrZWRldi5jb22CEG5l YnJ3ZXNsZXlhbi5lZHWCDmludHJhbGlua3MuY29tghd3d3dzdGFnZS5pbnRyYWxp bmtzLmNvbYIZd3d3Lm9mZmVycy5uZXV0cm9nZW5hLmNvbYIVb2ZmZXJzLm5ldXRy b2dlbmEuY29tgg53d3cuenlydGVjLmNvbYIKenlydGVjLmNvbYIMbS56eXJ0ZWMu Y29tgg53d3cudmlzaW5lLmNvbYIKdmlzaW5lLmNvbYIQd3d3Lm15LWNvYWNoLmNv bYIMbXktY29hY2guY29tghl3d3cuY2FsaWZvcm5pYWNsb3NldHMuY29tggx3d3cu bmNnLmNvb3CCCG5jZy5jb29wghJwYXJ0bmVycy5uY2dhLmNvb3CCCW5jZ2EuY29v cIINd3d3Lm5jZ2EuY29vcIIQd3d3LnBvd2VyYmFyLmNvbYIPd3d3LnBvd2VyYmFy LmNhghhzdGFnaW5nLmF1dGlzbXNwZWFrcy5vcmeCDHBvd2VyYmFyLmNvbYILcG93 ZXJiYXIuY2GCFGNhbWJyaWRnZWNvbGxlZ2UuZWR1ghd3d3cuZ2VuZXJhbGNhdGFs eXN0LmNvbYITam9obnNvbnNiYWJ5LmNvbS5icoIXd3d3LmpvaG5zb25zYmFieS5j b20uYnKCDW1hbmhhdHRhbi5lZHWCEXd3dy5tYW5oYXR0YW4uZWR1ghlzdGFnZS5z aG93Y2FzZWNpbmVtYXMuY29tghdkZXYuc2hvd2Nhc2VjaW5lbWFzLmNvbYIHZnNn Lm9yZ4ILd3d3LmZzZy5vcmeCC2xhbmNvcGUuY29tggxidXl0YWVydC5uZXSCEHd3 dy5idXl0YWVydC5uZXQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjB1BgNVHR8EbjBsMDSgMqAwhi5odHRwOi8vY3JsMy5kaWdp Y2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzMuY3JsMDSgMqAwhi5odHRwOi8vY3Js NC5kaWdpY2VydC5jb20vc2hhMi1oYS1zZXJ2ZXItZzMuY3JsMEIGA1UdIAQ7MDkw NwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0 LmNvbS9DUFMwgYMGCCsGAQUFBwEBBHcwdTAkBggrBgEFBQcwAYYYaHR0cDovL29j c3AuZGlnaWNlcnQuY29tME0GCCsGAQUFBzAChkFodHRwOi8vY2FjZXJ0cy5kaWdp Y2VydC5jb20vRGlnaUNlcnRTSEEySGlnaEFzc3VyYW5jZVNlcnZlckNBLmNydDAM BgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQBFf9st9D2JPQmAoWXfvLXR 4FSt18T++g13aWm4xfKTL40VzWRM/yYSOd1eO+vc+k8Z6vsBFgAa1OuNbwI3uBra INTabTUFEh1wo+8agv09ON7FW0Sva+JWdOAtSpnesCShPykOyejQR3Akci473X2J fZKxEwHTMKNyafrmT59s+utf/7YUZ8t7+eGktFAw7eVah8sjHhu+u+Nmc0TvA+02 Gy1dXJMzt6ItV37w36a8AQ4NHvEaiKZwEloMy8rXXDG5CeT1fK7zOxPza6S2rZQe U3Jjjkxu99iLzUu6PTGVf/zG+KrNMebvU49WKfhnIMbmEQ2+6Ff9ChlISH3lrsvL -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwo/Dmzoa32UNolohGeVO P3AVGliuQxOVmqnz/GllWvbPvuxoNaYkxOxDVggYc8oa7tpljX8jHBHbCUXnqoYZ wdgWvnFar4YU+HS9AwGehvq6Dps6r16X7fU6BjSglHIZXTqAPPRW3/hnzHfDRhhg u6WTRrkGYT597W/h5Tc+sHOnph+uQ/BVxJHcFylTmbCAFEwuanvi7I6gm3kcmC/Y Jt1NQIeBi8RFG7A38zBJgwT5A246Am29+oXoMcXMv+OG4XM39cUPgflYT6AKgJaY CzqdpNNqfzstd0FOKMyXaeCbUAK3lbK3+m4QF5DGxI+nK0Q2MIacjZz7KNTxC6O9 /9/bkJGu9808LqUJmn2ZR6+gPIla1mrgDYgWJkVh56x6dj/OLAsjM5l2m3yjGr1N Dt9mn3sCKW56drSA/6g5KP/+VEzKmvqw1EmILDp/5DEFZk+9voLBrmHL4Tbqtu/U BDHykrK7rMRE5+1eMz0bqV6UJyEm33IFMUQC1ua6gq6PRDsYev8h3XBxjOfJ106l Kt8ySaYq/0yP5fPI8JK72YYwu6NcOC2V5er8nuzMF/g4GORs/7iEXnWRwtwWJhb1 Alv5lIZSGZJfhznxVdZFHZgWAF1SToPO6QARNrfdd/DEYfkDa/aZ10gVAr0pcMU9 yKG6Ix0LRHMKYg1PLVi+s20CAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6515500119099743495669700521687267798 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-30 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Burlington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acquia Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Acquia Hosting' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acquia-sites.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 793741989453921577137981195430090410740164696260924385358058574856072487236598580713365886541062181880762248451248741665024425428628646959062741439430773671064066762075127577938089522953063548074856671704360674057158373171196980668742824034650341151851563923672268518625292957029467616256123775424568094293092913976524838880170129418931248247093044454118018230110534531906957573381232418023756449168658986105241473657282226889302903013721980726142226917278060322384194404757390178538081748090252416236752618579075540816325686258984078286748377822561862046133486937816321640100388888952333865357852633138459317392001748452499505474273033603063212884116555209396132210154925319751183911877017653168834355386652178574870740836185827289097542785749729573296093451806221994692929277305019332994575972991660110078955331683744577060076280149221358774723628922823973269070913338688852442711374284537871452401348502800202417480087222964545418634913878846411780904049364836928252979453335581855627351739324735845769844004247223543641342549567902700412348116354070489709154054400109110916533916840016172115618021204486571941860496686161475812142258129298585746470851914707456500234060242986800573727604477646521866027241285699876955712135279469 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e8e9792dd9412a72fbfcf6b481da12a5d5996be0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2077 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquia-sites.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaspan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.historytoday.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.vancouversun.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.ottawacitizen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.calgaryherald.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.edmontonjournal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.leaderpost.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.montrealgazette.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.theprovince.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.thestarphoenix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.timescolonist.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insider.windsorstar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trainlikeanastronaut.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.wwt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2-test.wwt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pega.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.pega.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanduskyregister.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norwalkreflector.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rifftrax.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandhaventribune.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ise.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseandhome.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ussecstg.prod.acquia-sites.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.rcmusic.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performance.rcmusic.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nebrwesleyan.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.nebrwesleyan.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.nebrwesleyan.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novusbio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uarts.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uarts.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites.sfsu.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devonbrc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bell.babson.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extension.harvard.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stfx.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novusstg.prod.acquia-sites.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.novusbio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cramersportsmed.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newgov.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summer.harvard.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.rita.dot.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timex.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pega.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifcj.prod.acquia-sites.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theblessedlife.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preparecenter.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.preparecenter.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpdev.hunterindustries.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdn-stg.pega.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staff.aljazeera.com.tr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycurebate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycurebate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.carilionclinic.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.carilionclinic.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timex.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timex.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unavidadebendicion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radash.acquia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carilionclinic.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carilionclinic.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidecarilion.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carilion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carilion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lketest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lkedev.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nebrwesleyan.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intralinks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwstage.intralinks.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offers.neutrogena.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.neutrogena.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zyrtec.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zyrtec.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.zyrtec.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visine.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-coach.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-coach.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.californiaclosets.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncg.coop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncg.coop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.ncga.coop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncga.coop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncga.coop' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.powerbar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.powerbar.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.autismspeaks.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerbar.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerbar.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgecollege.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generalcatalyst.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsonsbaby.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnsonsbaby.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manhattan.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manhattan.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.showcasecinemas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.showcasecinemas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsg.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsg.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lancope.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buytaert.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buytaert.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00457fdb2df43d893d0980a165dfbcb5d1e054add7c4fefa0d776969b8c5f2932f8d15cd644cff261239dd5e3bebdcfa4f19eafb0116001ad4eb8d6f0237b81ada20d4da6d3505121d70a3ef1a82fd3d38dec55b44af6be25674e02d4a99deb024a13f290ec9e8d0477024722e3bdd7d897d92b11301d330a37269fae64f9f6cfaeb5fffb61467cb7bf9e1a4b45030ede55a87cb231e1bbebbe3667344ef03ed361b2d5d5c9333b7a22d577ef0dfa6bc010e0d1ef11a88a670125a0ccbcad75c31b909e4f57caef33b13f36ba4b6ad941e5372638e4c6ef7d88bcd4bba3d31957ffcc6f8aacd31e6ef538f5629f86720c6e6110dbee857fd0a1948487de5aecbcb