wizzbang.org
Issued by R3
About this certificate
This digital certificate with serial number 04:a1:4e:5b:99:c9:f9:c1:67:18:c7:02:fa:9b:4a:8b:dd:2c was issued on by Let's Encrypt.
With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=wizzbang.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:a1:4e:5b:99:c9:f9:c1:67:18:c7:02:fa:9b:4a:8b:dd:2cSerial Number (int): 403338760203208254912561820191338990918956
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 2a:8b:b5:d5:d9:5d:15:8f:73:48:1e:0a:0b:a4:7b:1f:3a:bf:cf:aa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 2e:f7:9c:3f:cb:3d:4b:31:c6:c6:f9:6f:12:2d:6b:77:ee:20:9b:43
Fingerprint (sha256): 55:77:35:fe:af:e6:6b:54:a7:72:38:d3:59:f4:23:bf:82:d9:4d:b1:ba:97:e3:9f:d2:3a:9a:b0:17:9f:31:a4
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate wizzbang.org
9
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for wizzbang.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
canibuild.builders
faithfulshepherds.net.ultimatefatlossdiet.com
noblescounty.com.bostonairportcarrental.com
numismologo.com.joeandmax.com
nutritionpollution.com
orallaw.com
satexashomes.com.hempresource.com
symigreecefestival.com
wizzbang.org
faithfulshepherds.net.ultimatefatlossdiet.com
noblescounty.com.bostonairportcarrental.com
numismologo.com.joeandmax.com
nutritionpollution.com
orallaw.com
satexashomes.com.hempresource.com
symigreecefestival.com
wizzbang.org
Other certificates including the domain name wizzbang.org
(limited to 100 certificates)
starband.ca
starband.ca
cng.world
starband.ca
vegas.limited
photo-studio.co.za
dumptruck.ca
dumptruck.ca
starband.ca
wizzbang.org
zinnia.marketing
starband.ca
cng.world
wizzbang.org
real.college
wizzbang.org
vegas.limited
dumptruck.ca
peaksign.info.wizzbang.org
starband.ca
p-p.co.za
rplayer.co.za
cng.world
alumnicruise.org
lease.club
tvone.co.za
coal.world
wizzbang.org
disasterrelief.bible
starband.ca
starband.ca
vegas.limited
starband.ca
starband.ca
starband.ca
cng.world
starband.ca
vegas.limited
niv.bible
wizzbang.org
lease.club
zinnia.marketing
starband.ca
starband.ca
makeyourvotecount.com.au.wizzbang.org
starband.ca
cng.world
starband.ca
vegas.limited
photo-studio.co.za
dumptruck.ca
dumptruck.ca
starband.ca
wizzbang.org
zinnia.marketing
starband.ca
cng.world
wizzbang.org
real.college
wizzbang.org
vegas.limited
dumptruck.ca
peaksign.info.wizzbang.org
starband.ca
p-p.co.za
rplayer.co.za
cng.world
alumnicruise.org
lease.club
tvone.co.za
coal.world
wizzbang.org
disasterrelief.bible
starband.ca
starband.ca
vegas.limited
starband.ca
starband.ca
starband.ca
cng.world
starband.ca
vegas.limited
niv.bible
wizzbang.org
lease.club
zinnia.marketing
starband.ca
starband.ca
makeyourvotecount.com.au.wizzbang.org
Certificate
The complete raw certificate details for wizzbang.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgISBKFOW5nJ+cFnGMcC+ptKi90sMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDgxNjI1NTVaFw0yNDAzMDcxNjI1NTRaMBcxFTATBgNVBAMT DHdpenpiYW5nLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM2j KgtuMo7xthtbRGAm5ge+DuBUYyB2XkGtjEpNelkPrrHtbPWCS3tGgJuP5arIzYNN vdow25EgNf0QkkJVf/Ju4QioIkZfjOZvBrb4pwBLgUXqP270UEz8w51/UIJng5x0 EUROUqlSNxJPyR3mONb8NKkLzhpfuEmv2PKBnANzCxf+O8oqFDViTr3Z90HwuT2y YAcXwktb8ytBfXkAfoGTl4AIDCursyKvPGeEYlTnRLh+ZIKD09X/hv/M/B/UXq7v VK2jhtIOk5p+3uGchsf/n2CfZWq50clklqV2Db7rxj8Avc4OclJN3gb5zYOb2p2i PVJuVHRBW9X/zlQ+U8ECAwEAAaOCAwIwggL+MA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUKou11dldFY9zSB4KC6R7Hzq/z6owHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w ggEJBgNVHREEggEAMIH9ghJjYW5pYnVpbGQuYnVpbGRlcnOCLWZhaXRoZnVsc2hl cGhlcmRzLm5ldC51bHRpbWF0ZWZhdGxvc3NkaWV0LmNvbYIrbm9ibGVzY291bnR5 LmNvbS5ib3N0b25haXJwb3J0Y2FycmVudGFsLmNvbYIdbnVtaXNtb2xvZ28uY29t LmpvZWFuZG1heC5jb22CFm51dHJpdGlvbnBvbGx1dGlvbi5jb22CC29yYWxsYXcu Y29tgiFzYXRleGFzaG9tZXMuY29tLmhlbXByZXNvdXJjZS5jb22CFnN5bWlncmVl Y2VmZXN0aXZhbC5jb22CDHdpenpiYW5nLm9yZzATBgNVHSAEDDAKMAgGBmeBDAEC ATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1AEiw42vapkc0D+VqAvqdMOscUgHL Vt0sgdm7v6s52IRzAAABjEp26PYAAAQDAEYwRAIgZuNkiRhffcHL9o/q7v4mvk6p SL+0UqFJiGHUJI68mk8CIG7If6vF279LpCEDkr1/DPTvpCaAYOHmeYrydnUN6GwM AHcAKdA6G7Z0qnEc0wNbZVfBT4qni0/oOJRJ7KRT+US9JGgAAAGMSnbpuAAABAMA SDBGAiEA1xmNiNEjsSmLpb7xDn8Ods6Xg75G0AbdL3hcpeVrzJkCIQCeNi3T3dXW kLx3pLjhSYtHDiqEcO50piyNEGkgNX03QjANBgkqhkiG9w0BAQsFAAOCAQEAdAVo NVluRHZ9GAknEV9fBjgpB7jLzomuzvj25AkrG6ZIbVsjkP3iiNRyPkCF8FKXeC6G XTdwFiv+U0N3R8+79Ffv2wqdVvjLPGfsxOHP907SSEGCYz/0O4SO+IXN9WbuuEH8 TOdCCNSZ2aPxr1D23dUplNxjIHrFRXzQwwayW+gc3nAEPc+OBEEc/6GO5zqaoxta wv4cHNI9f1izo/v8+DgSmAtPSsKqtvtIR/ZhR7WXtjL//EJm2yWCMbGmHX5d+Mg1 3RvDStKPGUtt7iLh3ZDfqAjgztTO7Kp2JCu8LsoxQbjZmRVkdNiH8PU9I1Xe6HID Sr/mKqpUBwkrAykEoA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaMqC24yjvG2G1tEYCbm B74O4FRjIHZeQa2MSk16WQ+use1s9YJLe0aAm4/lqsjNg0292jDbkSA1/RCSQlV/ 8m7hCKgiRl+M5m8GtvinAEuBReo/bvRQTPzDnX9QgmeDnHQRRE5SqVI3Ek/JHeY4 1vw0qQvOGl+4Sa/Y8oGcA3MLF/47yioUNWJOvdn3QfC5PbJgBxfCS1vzK0F9eQB+ gZOXgAgMK6uzIq88Z4RiVOdEuH5kgoPT1f+G/8z8H9Reru9UraOG0g6Tmn7e4ZyG x/+fYJ9larnRyWSWpXYNvuvGPwC9zg5yUk3eBvnNg5vanaI9Um5UdEFb1f/OVD5T wQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 403338760203208254912561820191338990918956 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 16:25:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 16:25:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wizzbang.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25959311802023366128324330161854869289144032523533279360265908945936451769943998493856691757958906629967164171196973796105744560074959847850711802148513618061309995301892847454276208694230378071973906475164193745075807381736464981311762142932814831584146626219735271144720559600580619588388974856539396332402005921818100818789516482605367692848735477233519024929191605775660775396907648471189996532201066876013557053948613440323234459906270947798693833329596188964264990118467176397530687377715141559542591786615515591795549498700362530736037139291517272347007713609904005077621613829622091597449694108131001397826497 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2a8bb5d5d95d158f73481e0a0ba47b1f3abfcfaa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (256 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canibuild.builders' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithfulshepherds.net.ultimatefatlossdiet.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noblescounty.com.bostonairportcarrental.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'numismologo.com.joeandmax.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutritionpollution.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orallaw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'satexashomes.com.hempresource.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'symigreecefestival.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wizzbang.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c4a76e8f60000040300463044022066e36489185f7dc1cbf68feaeefe26be4ea948bfb452a1498861d4248ebc9a4f02206ec87fabc5dbbf4ba4210392bd7f0cf4efa4268060e1e6798af276750de86c0c00770029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c4a76e9b80000040300483046022100d7198d88d123b1298ba5bef10e7f0e76ce9783be46d006dd2f785ca5e56bcc990221009e362dd3ddd5d690bc77a4b8e1498b470e2a8470ee74a62c8d106920357d3742 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0074056835596e44767d180927115f5f06382907b8cbce89aecef8f6e4092b1ba6486d5b2390fde288d4723e4085f05297782e865d3770162bfe53437747cfbbf457efdb0a9d56f8cb3c67ecc4e1cff74ed2484182633ff43b848ef885cdf566eeb841fc4ce74208d499d9a3f1af50f6ddd52994dc63207ac5457cd0c306b25be81cde70043dcf8e04411cffa18ee73a9aa31b5ac2fe1c1cd23d7f58b3a3fbfcf83812980b4f4ac2aab6fb4847f66147b597b632fffc4266db258231b1a61d7e5df8c835dd1bc34ad28f194b6dee22e1dd90dfa808e0ced4ceecaa76242bbc2eca3141b8d999156474d887f0f53d2355dee872034abfe62aaa5407092b032904a0