santarcangelodiromagna.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:57:c4:10:d3:7a:93:cd:88:ef:a3:f9:37:0c:0b:62:d6:69 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=santarcangelodiromagna.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:57:c4:10:d3:7a:93:cd:88:ef:a3:f9:37:0c:0b:62:d6:69Serial Number (int): 378314325702386217946282287931327024125545
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: fa:d4:32:6e:7f:83:4d:98:6e:84:be:49:08:f2:d8:7d:e1:d7:a1:95
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 72:04:37:b1:de:e5:ab:79:14:ba:bb:56:19:f3:18:ab:68:fd:3c:e8
Fingerprint (sha256): 5f:03:00:6a:1e:21:4a:ae:bf:57:d6:70:04:12:1b:f5:90:57:7a:29:76:25:e5:c5:a5:91:a7:74:93:8a:d9:7e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate santarcangelodiromagna.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for santarcangelodiromagna.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
santarcangelodiromagna.org
Other certificates including the domain name santarcangelodiromagna.org
(limited to 100 certificates)
www.santarcangelodiromagna.org
sanpietroinlama.org
www.santarcangelodiromagna.org
santarcangelodiromagna.org
santarcangelodiromagna.org
livingroomagent.casa
www.santarcangelodiromagna.org
buyamazon.world
santarcangelodiromagna.org
www.settimomilanese.org
www.santarcangelodiromagna.org
santarcangelodiromagna.org
santarcangelodiromagna.org
www.santarcangelodiromagna.org
santarcangelodiromagna.org
santarcangelodiromagna.org
sanpietroinlama.org
www.santarcangelodiromagna.org
santarcangelodiromagna.org
santarcangelodiromagna.org
livingroomagent.casa
www.santarcangelodiromagna.org
buyamazon.world
santarcangelodiromagna.org
www.settimomilanese.org
www.santarcangelodiromagna.org
santarcangelodiromagna.org
santarcangelodiromagna.org
www.santarcangelodiromagna.org
santarcangelodiromagna.org
santarcangelodiromagna.org
Certificate
The complete raw certificate details for santarcangelodiromagna.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbDCCBVSgAwIBAgISBFfEENN6k82I76P5NwwLYtZpMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDIyMzA1MzhaFw0y MDAzMDEyMzA1MzhaMCUxIzAhBgNVBAMTGnNhbnRhcmNhbmdlbG9kaXJvbWFnbmEu b3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArDq4+6CECXOyNbML VTIjg6jLsKqWIxBDeMTdwldOiZEWV1HK5BXVImYj1a2Mpt1vkiNTkYfquWzNpS61 3ktCGgpMaAMmKsMyWq39+QBiSMZXcA315Di3Kp31ZatAa6aCyyALwwoFA9qP19/v ZJNKbhHsECfTQOlK5F8yAo7ajY3818ye9UnIKR46Oduhd2o4QiCmfqG45nDikuXk jhtANd8rMVYcVuuQo/Yapk0mf2sJY50MTNLlKf7xE7jK8Y/7L9P3qYBiLvrZSGx9 efpPi8vosLAOw234KVdqxFfoAq/lEdh3HT3i/C54womHNk13McHRvb+jMh/opOWa ekF14UKUeIiGmjJmNNtUM8syeQrUh6KlOG7ggAcgYRcosy4bWczmByhsHvYuyLH7 4WheQ9yY4HrVbOsGICX1i3CbRVDpSA6T2aiDEdVzQMl2H79RqDHa1jb+Fga+gG8P NgSG7Sbz7apCy7vAfqqZfDaSTob1dEqN0AerWC+O0PZtEdHzvvuGZve04LZpqeiH JssOzar9U9OLCKZDdQdm5z49+wkcjfQPOrb5lgWOLUzv0Jlw+rp6vXlqTRRDwIZq dES0C71C/g1tyF1Mxg+6OZIEqL5gMGijKzNj/oI5aIFSFyK4TmFOelJviAt0h9lT cCTkoIupbYZLYi2h86JwaxNtSDsCAwEAAaOCAm8wggJrMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQU+tQybn+DTZhuhL5JCPLYfeHXoZUwHwYDVR0jBBgwFoAUqEpqYwR9 3brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRw Oi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRw Oi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzAlBgNVHREEHjAcghpzYW50 YXJjYW5nZWxvZGlyb21hZ25hLm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0 Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AF6nc/nfVsDntTZIfdBJ4DJ6 kZoMhKESEoQYdZaBcUVYAAABbskTpwEAAAQDAEcwRQIhAI/SFR6GksgUiceEvE7y lLaqklcqIQ83neaIbjJmJ09gAiBX5Y+6inyiZ0Wb2v7q8cDjyYToi1fDinII78er k03o6AB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABbskTpyoA AAQDAEcwRQIgMeo5jprfN6FLEutAHchedcytNAqM4P7KvK/stjNjWhoCIQDJjbMz IdDY8GedqG2X7utpk1ONoci//ut1p7orXJHONzANBgkqhkiG9w0BAQsFAAOCAQEA ipcPXu0E3aMc8bNLdFI+u9bnzbHhj5gAc8P6i2RtA4tuYlqsPGTp74yvp9B466US j1SqN128rp2ddJcpFxvUTeUVDt5fanXr/Pid6iSQtsvqIU5GmM/aoKo39Yocmqaa rN+Q3MNebjhumVJt5K0VC2BFWlZp6NLiRsqYoyxe9VGuXZ2C3hhrsSbGlr5P+Sob 1vmRA2pGCdxAkO3W05YiOOGmuWOQuTTeMKiBwtZgzHJb41R0LCHzjAgWJLGJ1w8k v5ekf0XGBqsZvfC6O35IBTxdBSr6eKGgR4+hRFblLcRSPKOuEsjl3W2YJrofcrtG 7yG0lW1GvABBU4kQ3QXPhg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArDq4+6CECXOyNbMLVTIj g6jLsKqWIxBDeMTdwldOiZEWV1HK5BXVImYj1a2Mpt1vkiNTkYfquWzNpS613ktC GgpMaAMmKsMyWq39+QBiSMZXcA315Di3Kp31ZatAa6aCyyALwwoFA9qP19/vZJNK bhHsECfTQOlK5F8yAo7ajY3818ye9UnIKR46Oduhd2o4QiCmfqG45nDikuXkjhtA Nd8rMVYcVuuQo/Yapk0mf2sJY50MTNLlKf7xE7jK8Y/7L9P3qYBiLvrZSGx9efpP i8vosLAOw234KVdqxFfoAq/lEdh3HT3i/C54womHNk13McHRvb+jMh/opOWaekF1 4UKUeIiGmjJmNNtUM8syeQrUh6KlOG7ggAcgYRcosy4bWczmByhsHvYuyLH74Whe Q9yY4HrVbOsGICX1i3CbRVDpSA6T2aiDEdVzQMl2H79RqDHa1jb+Fga+gG8PNgSG 7Sbz7apCy7vAfqqZfDaSTob1dEqN0AerWC+O0PZtEdHzvvuGZve04LZpqeiHJssO zar9U9OLCKZDdQdm5z49+wkcjfQPOrb5lgWOLUzv0Jlw+rp6vXlqTRRDwIZqdES0 C71C/g1tyF1Mxg+6OZIEqL5gMGijKzNj/oI5aIFSFyK4TmFOelJviAt0h9lTcCTk oIupbYZLYi2h86JwaxNtSDsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 378314325702386217946282287931327024125545 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 23:05:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 23:05:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'santarcangelodiromagna.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 702634589324495009164614079950067902122728585742890063859069513225488358089402168756640244046604278027950444381692500080065793963738612821743886527463462438896685611026394912333866227486114493105237604500759533101919932005185189675021488405394316916502875509260044503405816794777919195297563135114632846370090577833054857140212941678049682085106253219319609767842220829670674720832713966429544462965374191339262447814594720857654300889858140631952674625440308696791144983537369876199179520066601769689648169342872935517707374943438400549340222776891372423611086987833679419967440525710015698810615873012828772869206777026229403512186905071893541998140971931613838176141966523817344755590837976806431212081168437413726525888695740870365833815643398597898760894595404672103678071980538774930574390844196096975451726637370909413618990227089247556197730666612103488707506194488707356324763209470534354498408535007947247410683289971633836916546282934627427563812587622387516013993287196302474204038442859688083729080813439968154774366789877948990371809003010752003727455731227212285147643749474338721136860853116271747458759905420407020938059449303055153919879042646671926730372089124256673409252801037999594808168570697751495488257738811 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fad4326e7f834d986e84be4908f2d87de1d7a195 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santarcangelodiromagna.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ec913a70100000403004730450221008fd2151e8692c81489c784bc4ef294b6aa92572a210f379de6886e3266274f60022057e58fba8a7ca267459bdafeeaf1c0e3c984e88b57c38a7208efc7ab934de8e800760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ec913a72a0000040300473045022031ea398e9adf37a14b12eb401dc85e75ccad340a8ce0fecabcafecb633635a1a022100c98db33321d0d8f0679da86d97eeeb6993538da1c8bffeeb75a7ba2b5c91ce37 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008a970f5eed04dda31cf1b34b74523ebbd6e7cdb1e18f980073c3fa8b646d038b6e625aac3c64e9ef8cafa7d078eba5128f54aa375dbcae9d9d749729171bd44de5150ede5f6a75ebfcf89dea2490b6cbea214e4698cfdaa0aa37f58a1c9aa69aacdf90dcc35e6e386e99526de4ad150b60455a5669e8d2e246ca98a32c5ef551ae5d9d82de186bb126c696be4ff92a1bd6f991036a4609dc4090edd6d3962238e1a6b96390b934de30a881c2d660cc725be354742c21f38c081624b189d70f24bf97a47f45c606ab19bdf0ba3b7e48053c5d052afa78a1a0478fa14456e52dc4523ca3ae12c8e5dd6d9826ba1f72bb46ef21b4956d46bc0041538910dd05cf86