*.overtureshops.com

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 0a:79:c8:25:a3:66:68:74:ac:61:9e:08:01:52:2b:a3 was issued on by DigiCert Inc.

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.overtureshops.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:79:c8:25:a3:66:68:74:ac:61:9e:08:01:52:2b:a3
Serial Number (int): 13924607341664476546793393445875624867
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 10:f7:f6:e7:7b:f4:ef:c2:f4:4f:ec:a3:95:87:0d:14:39:72:b1:ba
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 5b:a2:39:2e:8f:c4:d0:36:a9:09:fd:a4:d9:ba:a5:ec:f0:e7:e1:43
Fingerprint (sha256): 5c:f6:e1:ac:98:5d:7a:3d:97:48:89:33:36:9f:c5:c9:1a:95:bb:1d:fe:0a:28:ca:3a:bc:21:56:52:7a:48:c5

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate *.overtureshops.com

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.overtureshops.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.overtureshops.com
thefrontierstore.com
www.thefrontierstore.com
wowmarketplace.wowinc.com
sso.thefrontierstore.com
mywackerneuson.com
www.mywackerneuson.com
shop.sunnyd.com
shop.funfetti.com
shopdevrystore.com
www.shopdevrystore.com
shop.delivery.com
na.osf.store
*.doordashstore.com
*.doordashstore.ca
*.doordashaustraliastore.com
overtureshops.com
doordashstore.com
doordashstore.ca
doordashaustraliastore.com
invoices.bluesodapromo.com
*.tiktokswagshop.com
tiktokswagshop.com
arcoswag.com
amspeccustom.com
www.amspeccustom.com
www.arcoswag.com
ca-popup.byte-mall.com
us-popup.byte-mall.com
popup.byte-mall.com
spectrummerch.charter.com
doordashnzstore.com
*.doordashnzstore.com

Other certificates including the domain name overtureshops.com

(limited to 100 certificates)
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com

Certificate

The complete raw certificate details for *.overtureshops.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR8MflRiBmMUJPQr2K0w
ffuSFi9Y1g1O1Jqeg5sFuGu1qOY+7hMmTqS2KXSsgmgyghaPbUJbNWY/E44FAqtk
QqeFpU6pmluzE7rRcOFxenZJAWSnzbk8KilP9yolvZY8pztsnvwfiwYA5vaCh7KM
YHcdzCekEBEST+iWODF/l5ZujLcy7uiOI2698888Py8MeEFk31l6XO5ph46JXwfX
Alp/WDvH988HNaO/zbiQsfTxPoaHATrrDrPxdWUbYeac5q5D06Sz3EYW2TuCZb9/
rsIBeNsZczLpc5ItV36gPSvJ3jc+RHvvjB2gETSpzQgEoLx6xP6A2edHxrQZUeo1
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13924607341664476546793393445875624867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.overtureshops.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23369397153940083482222632336250195466384816614331163732826811146829215935673158863859197341426523113677895744617183975246359672019173552239263429483451163652751127429881879486014876172022188852047017916150866205886989262882872693234429896521684539938630717237122659714639156767816780723381982516933234479866631968820713099350623815134461859550430204931129090724788899139371757361995622218111071400378584529175282008944732502580858676795128811407647370686533440077755800455358264631548095860757787570106096845323560719792699999249218215529906303772490395463482750571767931899091475319063367750248381745010660032001457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10f7f6e77bf4efc2f44feca395870d143972b1ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (720 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.overtureshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefrontierstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefrontierstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowmarketplace.wowinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.thefrontierstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywackerneuson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mywackerneuson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sunnyd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.funfetti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopdevrystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopdevrystore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.delivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na.osf.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doordashstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doordashstore.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doordashaustraliastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'overtureshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doordashstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doordashstore.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doordashaustraliastore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invoices.bluesodapromo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiktokswagshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiktokswagshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcoswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amspeccustom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amspeccustom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arcoswag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca-popup.byte-mall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-popup.byte-mall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'popup.byte-mall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spectrummerch.charter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doordashnzstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.doordashnzstore.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0014bdd4aef3c4dba9de909cb3d58f133d8a835a1267ffce88c76c5ca395f8a603eb6b41522411ab9ac69d37c06b3786b7c9a2dac2bd5c466ea31c96b93ce7518c49c444dc88660aa04ce34a737fdd9269225c646dfcbb12cd6cd11f3a5581ee214250e03f19b9a85356084c819fa8b472bcc0f7e38a220fac0f008fbab6f3e9af3f5fc0d6ac1256252a060919e39360954dda066a1daa00867188cd0c1c19d958580e2bafe791ab8f31ed7ea273ed0351d9b7531545404497a0546a8c5eac548c669a4b9142243bfc9514c19fdd4afb964bc78e1bfa32bcb1d68acc1e7edae0418c70ef0aacea9814ff4d1fbfbbeeb956ff669e982480bb65db14c720b674fd1e