www.sanarica.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:2b:43:b9:a5:02:2b:ec:9c:3e:cb:45:b9:bd:55:9d:95:9c was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.sanarica.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:2b:43:b9:a5:02:2b:ec:9c:3e:cb:45:b9:bd:55:9d:95:9cSerial Number (int): 363171307702047393649333951639300891055516
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 6b:24:41:92:4f:c6:9e:f7:46:53:54:85:26:0c:29:d8:ad:0a:b8:84
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 5b:82:8d:83:f6:60:3d:e4:1f:e5:49:09:9b:9c:d5:b6:04:70:c8:55
Fingerprint (sha256): 5d:b0:f0:58:9d:ff:83:ac:c6:90:cd:25:6d:42:1f:f5:78:da:30:14:1a:bc:4b:b0:0c:7c:30:1e:0b:2f:f6:ab
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.sanarica.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.sanarica.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.sanarica.org
Other certificates including the domain name sanarica.org
(limited to 100 certificates)
sanarica.org
www.sanarica.org
sanarica.org
coinsnipers.com
dogfood.organic
www.sanarica.org
sanarica.org
www.tipkissersofgab.com
www.sanarica.org
www.sanarica.org
curacarpignano.org
makeup.organic
sanarica.org
sanarica.org
soglianocavour.org
sanarica.org
teketege.bible
sanarica.org
www.sanarica.org
www.sanarica.org
montesanosalentino.org
sanarica.org
www.sanarica.org
sanarica.org
coinsnipers.com
dogfood.organic
www.sanarica.org
sanarica.org
www.tipkissersofgab.com
www.sanarica.org
www.sanarica.org
curacarpignano.org
makeup.organic
sanarica.org
sanarica.org
soglianocavour.org
sanarica.org
teketege.bible
sanarica.org
www.sanarica.org
www.sanarica.org
montesanosalentino.org
sanarica.org
Certificate
The complete raw certificate details for www.sanarica.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgISBCtDuaUCK+ycPstFub1VnZWcMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDQxNjMzNDZaFw0y MDAzMDMxNjMzNDZaMBsxGTAXBgNVBAMTEHd3dy5zYW5hcmljYS5vcmcwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDQ7KfewvgLGP6sse4eAU23mUcZnAoi fw2rhzM65n3Tm/GdVyjsrP3KxOiw2FJPYhVAVUXzHB16wZ1fsgzffjgWO8tMYqwt PaaJ5HKypKUjoFb+hu6iTTdZfY0O/ZAVhcdSMR7eTqQvnGFKnuSouNqD11oHQf+s zxtnchRG/0OAWDu1CmpbcFQcBj/UxE7GE+w/WdHHtSey9a4OGPvAfLVZtkaZLJwp djc9JoI2dXLa4HeyB8octwr+W5PlVT/kdTAEyhpz5apLQeS4qX8uTaH4Fi2L8s2h UO43Ezt/GuVb0OuD1fc+EvankSX1j0DJFs+kUMTMsOScxvlGEGGfPErycFOKHuJN 9AbCQwMGQJs5YYnc7XLxG2sbmvgWXsPv3amxNxo+lkzYUHMkKFYA4rcyhUE3keDv To0MCQ3yV5ruW9TeBiv74+4RJR0c+mQBGVX3OzR/pqeT8tFyqwpwrkp3iFF6OzS9 ADuT1TMpGCXXnJCpG9SiDwyxvChrC1EYXAJEuRFN1HQgq0Gni3Mrp5HN5j5jBG0D ihLD0/rfofwTqNtHkNIMQcVVghSe2I17V9NER7tcy2euI6/kNs1O6FR4VB+jsUcC zdPpleWj/Lciq3VWR79NIwYdJmoayJXdfiYgwxPF97f5elzYb6rYOlvRqcmZClgU G5A18qIWVutfowIDAQABo4ICZTCCAmEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRr JEGST8ae90ZTVIUmDCnYrQq4hDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHd3dy5zYW5hcmljYS5v cmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC BIH1BIHyAPAAdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAW7R +ZpVAAAEAwBHMEUCIQDslOguBrM+MpyXKioAG8SAosO1xk985GgPinBPYPBDKAIg Nb7YmqkZKAIIFSr992XxR2ndDJUUgcRj5SsQmf8EVNEAdgAHt1wb5X1o//Gwxh0j Fce65ld8V5S3au68YToaadOiHAAAAW7R+ZpnAAAEAwBHMEUCID9nX+ARJFvJN3N3 e0PivLiUg1kPssxbWFJ1ZIq3uwn8AiEA+TX1HGJKmML8bFdXcqSrfnOZWxAnoRAG 3Mc/eY6ncXMwDQYJKoZIhvcNAQELBQADggEBAHG7ve4wxtw9/rGlj94NtLLDmAIq GGDOtiqZSSVM3RMGeBDNAL8oHiMfeWm47bKQCYkkoCTU3VBN4GdWjbqxjw2jD6Y+ Qu9TqPPeGkXyPi9yPG4TtybyqSNyXZeKK2fwq7dDWiTMuII9IPxz4glgyam9ES7d C+IbwjvANAYLy55GYyRiHaaMs786EiVPf823xM02yjtX1wcTFv1GmMTaCgGaKGLh m0RRVWVU8+8KQ6u2WVC8l9YUxPkDGbn+580HxXK+QWN8OZhNH0sJvxQGKSAJPKZU VnUh3F9ZL44GQS58Tgf0coXI8b7VakyXdZw2aY/JLJZEPDlrFN5/vj4KBFY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0Oyn3sL4Cxj+rLHuHgFN t5lHGZwKIn8Nq4czOuZ905vxnVco7Kz9ysTosNhST2IVQFVF8xwdesGdX7IM3344 FjvLTGKsLT2mieRysqSlI6BW/obuok03WX2NDv2QFYXHUjEe3k6kL5xhSp7kqLja g9daB0H/rM8bZ3IURv9DgFg7tQpqW3BUHAY/1MROxhPsP1nRx7UnsvWuDhj7wHy1 WbZGmSycKXY3PSaCNnVy2uB3sgfKHLcK/luT5VU/5HUwBMoac+WqS0HkuKl/Lk2h +BYti/LNoVDuNxM7fxrlW9Drg9X3PhL2p5El9Y9AyRbPpFDEzLDknMb5RhBhnzxK 8nBTih7iTfQGwkMDBkCbOWGJ3O1y8RtrG5r4Fl7D792psTcaPpZM2FBzJChWAOK3 MoVBN5Hg706NDAkN8lea7lvU3gYr++PuESUdHPpkARlV9zs0f6ank/LRcqsKcK5K d4hRejs0vQA7k9UzKRgl15yQqRvUog8MsbwoawtRGFwCRLkRTdR0IKtBp4tzK6eR zeY+YwRtA4oSw9P636H8E6jbR5DSDEHFVYIUntiNe1fTREe7XMtnriOv5DbNTuhU eFQfo7FHAs3T6ZXlo/y3Iqt1Vke/TSMGHSZqGsiV3X4mIMMTxfe3+Xpc2G+q2Dpb 0anJmQpYFBuQNfKiFlbrX6MCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 363171307702047393649333951639300891055516 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 16:33:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 16:33:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sanarica.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 852337338012903549134457296068026638335888521940156984234262057943432546551854971988781199043189281239652239874252459141074513048970987765485928008468605825192600470511622470708267469534118404071213773434267392267629544388466088349142872308299633777617277009545903816650540048823533936863843728387497193948002327531150544913671826561111701068663807755634436417098865457547693882663336143212555977999993731013559207221832225780181531230253557836495756239068416290350773624212665530893358350072602261635409476130321477236307603973277337821467217852520127461208913745044303864489408675169857571668041672185548263767615878561593457178116232283343826865139547723613621507967301407410486633880430109553552422396636876523520037026729239881918628641609786608405523350191529054612695623073619592823215142114098191626744764827507449873821434864884563412099180664621305524659116834154226743589995670962445054882753444552267650847136419009301128939282181132090940197477721032215046311318757823779475686403249049030502249631366599837499074958541032653270505051229038682639205149211793650640494527541731979554048712926899754243058955499137466811601266921834131576689337465667579225321453830063123651074235812699153697727244401170232557639595417507 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6b2441924fc69ef746535485260c29d8ad0ab884 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanarica.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ed1f99a550000040300473045022100ec94e82e06b33e329c972a2a001bc480a2c3b5c64f7ce4680f8a704f60f04328022035bed89aa919280208152afdf765f14769dd0c951481c463e52b1099ff0454d100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ed1f99a67000004030047304502203f675fe011245bc93773777b43e2bcb89483590fb2cc5b585275648ab7bb09fc022100f935f51c624a98c2fc6c575772a4ab7e73995b1027a11006dcc73f798ea77173 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0071bbbdee30c6dc3dfeb1a58fde0db4b2c398022a1860ceb62a9949254cdd13067810cd00bf281e231f7969b8edb290098924a024d4dd504de067568dbab18f0da30fa63e42ef53a8f3de1a45f23e2f723c6e13b726f2a923725d978a2b67f0abb7435a24ccb8823d20fc73e20960c9a9bd112edd0be21bc23bc034060bcb9e466324621da68cb3bf3a12254f7fcdb7c4cd36ca3b57d7071316fd4698c4da0a019a2862e19b4451556554f3ef0a43abb65950bc97d614c4f90319b9fee7cd07c572be41637c39984d1f4b09bf14062920093ca654567521dc5f592f8e06412e7c4e07f47285c8f1bed56a4c97759c36698fc92c96443c396b14de7fbe3e0a0456