curlupanddye.ca
Issued by R3
About this certificate
This digital certificate with serial number 04:a4:a2:51:66:1d:17:4d:ab:2c:55:69:cb:0a:a9:b6:51:9f was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=curlupanddye.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:a4:a2:51:66:1d:17:4d:ab:2c:55:69:cb:0a:a9:b6:51:9fSerial Number (int): 404471209484548200623177891622333233648031
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: d3:6e:82:6f:a1:67:db:25:e2:04:0b:50:16:f3:cb:cf:a7:d5:fa:d2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 7a:18:3d:5d:0f:97:8c:ea:08:95:4b:dd:4b:56:50:e1:21:2a:29:ce
Fingerprint (sha256): 62:a8:72:9d:94:bf:08:a8:1b:01:15:58:62:7e:28:22:78:d4:96:49:12:b1:f4:6c:b9:d8:55:d5:6c:a3:1d:61
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate curlupanddye.ca
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for curlupanddye.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
8bitaudio.com.pdsmauritius.com
curlupanddye.ca
edollarcard.com.inwilmingtonde.com.madeforwinners.com
forexhelponline.com
houstonprivateschoolguide.com
jonesingpictures.com
registry.bible
shroombuds.com
silverarbitrage.com.magblocklimiters.com
simulativerse.com
templatedesigngallery.com
txtv.co.in
curlupanddye.ca
edollarcard.com.inwilmingtonde.com.madeforwinners.com
forexhelponline.com
houstonprivateschoolguide.com
jonesingpictures.com
registry.bible
shroombuds.com
silverarbitrage.com.magblocklimiters.com
simulativerse.com
templatedesigngallery.com
txtv.co.in
Other certificates including the domain name curlupanddye.ca
(limited to 100 certificates)
Certificate
The complete raw certificate details for curlupanddye.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgISBKSiUWYdF02rLFVpywqptlGfMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA1MDMwMzIwMTNaFw0yMzA4MDEwMzIwMTJaMBoxGDAWBgNVBAMT D2N1cmx1cGFuZGR5ZS5jYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ANpnV5oDvfTM5c/JDXWU0vIUO3YDH/693CAcU7Ji5VrpFnNpNQ33GvxTYWtNOcv+ T2oDNOM6PeqfQJqzc1nn9UzfYw0+bH3660wfGWAk0rcs3nC1zfQXewrIdE1SX//Z nRw7HBmAy5oN+s3+J5zRthK7kBL28ysndUdNIpNFJ9iAQxY4bLTk+eOe6m6tDpEO 6W4jw13B8yuiDi0v2B7irgW0qBArNLwSJTs4Gh2s4oZ42D85STdJUMWHVYRyu17U P2n6/Js/9A6nauOGGZwula9SetO4sy8WJnMbYqGUqz7DeQdhp6I2C9CNL3HF95fz GfT/q/Atmc+Xpbq6OibgjbUCAwEAAaOCA3YwggNyMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQU026Cb6Fn2yXiBAtQFvPLz6fV+tIwHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wggFDBgNVHREEggE6MIIBNoIeOGJpdGF1ZGlvLmNvbS5wZHNtYXVyaXRpdXMu Y29tgg9jdXJsdXBhbmRkeWUuY2GCNWVkb2xsYXJjYXJkLmNvbS5pbndpbG1pbmd0 b25kZS5jb20ubWFkZWZvcndpbm5lcnMuY29tghNmb3JleGhlbHBvbmxpbmUuY29t gh1ob3VzdG9ucHJpdmF0ZXNjaG9vbGd1aWRlLmNvbYIUam9uZXNpbmdwaWN0dXJl cy5jb22CDnJlZ2lzdHJ5LmJpYmxlgg5zaHJvb21idWRzLmNvbYIoc2lsdmVyYXJi aXRyYWdlLmNvbS5tYWdibG9ja2xpbWl0ZXJzLmNvbYIRc2ltdWxhdGl2ZXJzZS5j b22CGXRlbXBsYXRlZGVzaWduZ2FsbGVyeS5jb22CCnR4dHYuY28uaW4wTAYDVR0g BEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0 cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEA dwC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYff1t+EAAAEAwBI MEYCIQDwsCrj+NT4As1/b98qgHG2lGWhwQJ+12+PS5QInvwzqgIhAJ7S7keNgPQi 67zBj7wYUHEJ/3gBS+Gd7m63yewkZv3iAHYA6D7Q2j71BjUy51covIlryQPTy9ER a+zraeF3fW0GvW4AAAGH39bfjgAABAMARzBFAiAyTtFt/duq/XPJv6jlLNSRzhzU YePcUZU4FaBz5OphvAIhAP5ne/9ZEfa/dI99ZifCHb6/hkSDosvqYevLE4oKrw8L MA0GCSqGSIb3DQEBCwUAA4IBAQCXoyOCwvgYwtBS7TTa+E2QA/ruROKZS5Dv1cT+ XMimz0CvGIUpgbkGf+eN3hvTAQvfD+wYZqyPDhT5kIpbfwxvMTJtRfIDKbD0q1fV lVxO7jl/s2INwEl2xFK8fudND2T8xNBUmi/ODe2mJNNayWMQA3ySTjeI7hUvE46B llb1RvNDIeOrMhveWE09c6mpsP/fPT/2VrAeFIB3dFFWe+A/fzMSCRkTHCn74q2x 66xDgWXa9Vhrzn/LZ4X34XSx96ztFRD9RdjIFh5QSArzw9ycHnoJKuoNZdro8XMA xTUVWTfNxfhb8CwXmA7CRmwm5nfas2Ai6vnBog+vg/5x7fWc -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mdXmgO99Mzlz8kNdZTS 8hQ7dgMf/r3cIBxTsmLlWukWc2k1Dfca/FNha005y/5PagM04zo96p9AmrNzWef1 TN9jDT5sffrrTB8ZYCTStyzecLXN9Bd7Csh0TVJf/9mdHDscGYDLmg36zf4nnNG2 EruQEvbzKyd1R00ik0Un2IBDFjhstOT5457qbq0OkQ7pbiPDXcHzK6IOLS/YHuKu BbSoECs0vBIlOzgaHazihnjYPzlJN0lQxYdVhHK7XtQ/afr8mz/0Dqdq44YZnC6V r1J607izLxYmcxtioZSrPsN5B2GnojYL0I0vccX3l/MZ9P+r8C2Zz5eluro6JuCN tQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 404471209484548200623177891622333233648031 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-03 03:20:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-01 03:20:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'curlupanddye.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27570910417679445544847863123115835242075474306899776100263382100445588005294899127772183171164347753792191173316122488425872357366385322278885993850504604157706297025824885850636341148914036157839818655918816512970957368892763461923444425525402680285929334659566982852670176370612524182423849988589251921912644450218206281031544250362502689463946788816614346777395906921015509971353016965512443800284626483091674146624168152200742728612121623435644297534085042842957561199570264838227523359708835560071849140208199092618799624754362863058575936522106445548760286531740343394431730326595246357779968575533406836788661 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d36e826fa167db25e2040b5016f3cbcfa7d5fad2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (314 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8bitaudio.com.pdsmauritius.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curlupanddye.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edollarcard.com.inwilmingtonde.com.madeforwinners.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forexhelponline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstonprivateschoolguide.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonesingpictures.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registry.bible' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shroombuds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverarbitrage.com.magblocklimiters.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulativerse.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'templatedesigngallery.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'txtv.co.in' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187dfd6df840000040300483046022100f0b02ae3f8d4f802cd7f6fdf2a8071b69465a1c1027ed76f8f4b94089efc33aa0221009ed2ee478d80f422ebbcc18fbc18507109ff78014be19dee6eb7c9ec2466fde2007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187dfd6df8e00000403004730450220324ed16dfddbaafd73c9bfa8e52cd491ce1cd461e3dc51953815a073e4ea61bc022100fe677bff5911f6bf748f7d6627c21dbebf864483a2cbea61ebcb138a0aaf0f0b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0097a32382c2f818c2d052ed34daf84d9003faee44e2994b90efd5c4fe5cc8a6cf40af18852981b9067fe78dde1bd3010bdf0fec1866ac8f0e14f9908a5b7f0c6f31326d45f20329b0f4ab57d5955c4eee397fb3620dc04976c452bc7ee74d0f64fcc4d0549a2fce0deda624d35ac96310037c924e3788ee152f138e819656f546f34321e3ab321bde584d3d73a9a9b0ffdf3d3ff656b01e1480777451567be03f7f33120919131c29fbe2adb1ebac438165daf5586bce7fcb6785f7e174b1f7aced1510fd45d8c8161e50480af3c3dc9c1e7a092aea0d65dae8f17300c535155937cdc5f85bf02c17980ec2466c26e677dab36022eaf9c1a20faf83fe71edf59c