freedomprojectmedia.org

Issued by R3

About this certificate

This digital certificate with serial number 04:7a:64:5b:f7:e1:a7:5a:9b:06:5b:28:f5:86:7b:61:89:4a was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=freedomprojectmedia.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7a:64:5b:f7:e1:a7:5a:9b:06:5b:28:f5:86:7b:61:89:4a
Serial Number (int): 390096992817621399585351931793873311992138
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 83:6b:c2:24:49:b9:26:5d:4b:2d:29:95:ff:d4:96:68:13:f9:5c:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e6:62:9d:00:25:5d:0f:94:d3:55:00:9d:0c:cd:4a:71:5d:3f:37:f6
Fingerprint (sha256): 59:61:02:aa:0d:84:98:63:b0:ea:92:95:c4:7e:38:c7:90:a9:c8:a2:8b:6e:11:a4:56:ac:57:8f:20:5c:6c:ca

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate freedomprojectmedia.org

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for freedomprojectmedia.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chillerrentalandsales.com.frankspeech.fyi
drugfrom.com.arbitrageur.com.mx
freedomprojectmedia.org
homeschoolpla.com.tosapps.org
markrigsby.com
newbonus.com
occasion.org.logolawyers.com
petspedia.xyz
pixelportfolios.com
prepareyourmind.com
sahomeguide.com
southforkcolorado.com
theinnovativeinvestor.co
toddcole.photos

Other certificates including the domain name freedomprojectmedia.org

(limited to 100 certificates)
www.freedomprojectmedia.org
www.freedomprojectmedia.org
www.freedomprojectmedia.org
canibuild.world
freedomprojectmedia.org
freedomprojectmedia.org
freedomprojectmedia.org
resumestudy.com.freedomprojectmedia.org
freedomprojectmedia.org
vindl.ie
www.freedomprojectmedia.org
sculpit.life
www.freedomprojectmedia.org
freedomprojectmedia.org
freedomprojectmedia.org
tulp.care
freedomprojectmedia.org
dew.sc
freedomprojectmedia.org

Certificate

The complete raw certificate details for freedomprojectmedia.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGNDCCBRygAwIBAgISBHpkW/fhp1qbBlso9YZ7YYlKMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMTMwOTQxMTJaFw0yNDAxMTEwOTQxMTFaMCIxIDAeBgNVBAMT
F2ZyZWVkb21wcm9qZWN0bWVkaWEub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA8oSPuswAsALAw/Db5dDH0j+598cS03Q5G8jUe619eUBbQ2xGuxq8
R4OekGKnMiY0lvS8TXqnyM689cpoRxWrtMMFL2aP4c70vxQxTuLVD7N62l3q4c/c
3zEMB16HtajUO1Zj5snGc0/Ijmyizxb1vTf9yK/C9cxZkkUs5chjXZabo48hAGM5
2wKIc9c9ShET0b+QJC4dMJlYHOMhebinqLwoBXeG3BnnjAv0Y72t2mkeh5eMsHgi
US1fNhpNszakWcQjYPMwpq862DD55KogDsy/OGIn/qsTljASnG+4++7klR92m7X5
luFESsV4Gmqm9YZV7qIH45bP5dXiMvLUQQIDAQABo4IDUjCCA04wDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E
AjAAMB0GA1UdDgQWBBSDa8IkSbkmXUstKZX/1JZoE/lcaDAfBgNVHSMEGDAWgBQU
LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG
FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku
bGVuY3Iub3JnLzCCAVkGA1UdEQSCAVAwggFMgiljaGlsbGVycmVudGFsYW5kc2Fs
ZXMuY29tLmZyYW5rc3BlZWNoLmZ5aYIfZHJ1Z2Zyb20uY29tLmFyYml0cmFnZXVy
LmNvbS5teIIXZnJlZWRvbXByb2plY3RtZWRpYS5vcmeCHWhvbWVzY2hvb2xwbGEu
Y29tLnRvc2FwcHMub3Jngg5tYXJrcmlnc2J5LmNvbYIMbmV3Ym9udXMuY29tghxv
Y2Nhc2lvbi5vcmcubG9nb2xhd3llcnMuY29tgg1wZXRzcGVkaWEueHl6ghNwaXhl
bHBvcnRmb2xpb3MuY29tghNwcmVwYXJleW91cm1pbmQuY29tgg9zYWhvbWVndWlk
ZS5jb22CFXNvdXRoZm9ya2NvbG9yYWRvLmNvbYIYdGhlaW5ub3ZhdGl2ZWludmVz
dG9yLmNvgg90b2RkY29sZS5waG90b3MwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEE
BgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9
pD0wSNf7qwAAAYsooD4eAAAEAwBHMEUCIQDT1hvWerfcspEwbnhtc9ka8z+3s6DT
PdK16nnsOdrfIgIgeqsBxUDQJjoTAFGSosXy8Q1Wag3uPu9MChYIabWRmaIAdgDu
zdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYsooD7BAAAEAwBHMEUC
IQDqI9ZV8gmWowzrvLMap68CX5KxaftK1qr97sqtlO57+QIgLX2bHNIXjplLApHM
eb+IRuAjQQD4Igg76JQPy9pa9gswDQYJKoZIhvcNAQELBQADggEBAKNUQ/YBxkFG
F34N5RG1J7V+zvTtfHj2iNL04+SzXttSWy4x2adTjzwh5+CZfm+uBkWhmlog74jE
Pq5kCgGFkhF722OQ2vNgqw6p8NfWRSshun1Xg29ijGZJXKlXEm+roACd9cML75wJ
ZE5B/yCeryykvWOPCPXzbwgcAmDM/MxQZbQFVmb1aXYP8fXVFOJP7Lw4ZenicadI
2/CEeoAcMxgJHeQEh7ipwmXjvdU8Go/CLoRmooLcuuwlE5LnmTKpTQ0Ac9fkXHW3
VCFb+7CF/01B7GFqmP5Ng7C6HXpqJRo0kwEQP99SAMRZ1egmnnLsmgtDyi6ZKNrX
C8BAg8ucs0M=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oSPuswAsALAw/Db5dDH
0j+598cS03Q5G8jUe619eUBbQ2xGuxq8R4OekGKnMiY0lvS8TXqnyM689cpoRxWr
tMMFL2aP4c70vxQxTuLVD7N62l3q4c/c3zEMB16HtajUO1Zj5snGc0/Ijmyizxb1
vTf9yK/C9cxZkkUs5chjXZabo48hAGM52wKIc9c9ShET0b+QJC4dMJlYHOMhebin
qLwoBXeG3BnnjAv0Y72t2mkeh5eMsHgiUS1fNhpNszakWcQjYPMwpq862DD55Kog
Dsy/OGIn/qsTljASnG+4++7klR92m7X5luFESsV4Gmqm9YZV7qIH45bP5dXiMvLU
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 390096992817621399585351931793873311992138
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 09:41:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 09:41:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'freedomprojectmedia.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30615038286161194716820371338630099591651299930950871711516295585122056431465537130669783646127563100499279443516185447050822437647642102819654473376355380667071827189493566617915341233118872374116548074475687134583204829299871649038204938422361501330804351491082534134272637236337738646696116527630848115143497762419760946194652124239861640260160866934821720952240879623739617829278686914615705498837106465381015936373911017334081096545638023044867822274816405498558238782799300152647852679961175844978646901004122460799833271724848971920098523261928744862881629851242851420867151299680438443308561539970014326740033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							836bc22449b9265d4b2d2995ffd4966813f95c68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (336 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chillerrentalandsales.com.frankspeech.fyi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drugfrom.com.arbitrageur.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomprojectmedia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolpla.com.tosapps.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markrigsby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newbonus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'occasion.org.logolawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petspedia.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pixelportfolios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prepareyourmind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sahomeguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southforkcolorado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theinnovativeinvestor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toddcole.photos'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b28a03e1e0000040300473045022100d3d61bd67ab7dcb291306e786d73d91af33fb7b3a0d33dd2b5ea79ec39dadf2202207aab01c540d0263a13005192a2c5f2f10d566a0dee3eef4c0a160869b59199a2007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b28a03ec10000040300473045022100ea23d655f20996a30cebbcb31aa7af025f92b169fb4ad6aafdeecaad94ee7bf902202d7d9b1cd2178e994b0291cc79bf8846e0234100f822083be8940fcbda5af60b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a35443f601c64146177e0de511b527b57ecef4ed7c78f688d2f4e3e4b35edb525b2e31d9a7538f3c21e7e0997e6fae0645a19a5a20ef88c43eae640a018592117bdb6390daf360ab0ea9f0d7d6452b21ba7d57836f628c66495ca957126faba0009df5c30bef9c09644e41ff209eaf2ca4bd638f08f5f36f081c0260ccfccc5065b4055666f569760ff1f5d514e24fecbc3865e9e271a748dbf0847a801c3318091de40487b8a9c265e3bdd53c1a8fc22e8466a282dcbaec251392e79932a94d0d0073d7e45c75b754215bfbb085ff4d41ec616a98fe4d83b0ba1d7a6a251a349301103fdf5200c459d5e8269e72ec9a0b43ca2e9928dad70bc04083cb9cb343