www.sanmichelesalentino.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:b8:06:2d:47:0b:04:0b:88:06:cc:e5:6b:29:e3:bb:b8:bc was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.sanmichelesalentino.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b8:06:2d:47:0b:04:0b:88:06:cc:e5:6b:29:e3:bb:b8:bcSerial Number (int): 323957023770990604307129428404214548904124
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c6:32:45:80:18:9b:1e:89:01:7e:bb:31:7b:04:28:f9:62:48:d3:bf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 65:e8:20:03:03:26:9c:21:35:22:dd:75:97:31:e7:3e:59:66:86:c6
Fingerprint (sha256): 64:97:a2:16:b1:d8:fb:2e:d2:68:51:ed:13:bb:1c:ff:df:27:8f:e8:00:a6:a5:c6:3c:fa:12:43:9c:d4:d1:0d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.sanmichelesalentino.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.sanmichelesalentino.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.sanmichelesalentino.com
Other certificates including the domain name sanmichelesalentino.com
(limited to 100 certificates)
sanmichelesalentino.com
sanmichelesalentino.com
sanmichelesalentino.com
sanmichelesalentino.com
tourseurope.com
www.sanmichelesalentino.com
sanmichelesalentino.com
www.sanmichelesalentino.com
www.sanmichelesalentino.com
www.sanmichelesalentino.com
sanmichelesalentino.com
71544.com
www.sanmichelesalentino.com
sanmichelesalentino.com
www.sanmichelesalentino.com
sanmichelesalentino.com
sanmichelesalentino.com
sanmichelesalentino.com
tourseurope.com
www.sanmichelesalentino.com
sanmichelesalentino.com
www.sanmichelesalentino.com
www.sanmichelesalentino.com
www.sanmichelesalentino.com
sanmichelesalentino.com
71544.com
www.sanmichelesalentino.com
sanmichelesalentino.com
www.sanmichelesalentino.com
Certificate
The complete raw certificate details for www.sanmichelesalentino.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgISA7gGLUcLBAuIBszlaynju7i8MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjcwNzIzMjZaFw0x OTEwMjUwNzIzMjZaMCYxJDAiBgNVBAMTG3d3dy5zYW5taWNoZWxlc2FsZW50aW5v LmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK/nogVNtO5Hkg+E gzltBXdk8aNJ3SEobPtxGPwsO0cjZTo8JBskI6QfKwzf/RSbsfOM3SMmInAq8mhs ra6h/crRHCbZ9jqBkqt7UiPXTLJRMMmtUYpJaMj0xuDIRQAKvkBWXOqnUmgSaYtU k34PVEmLeSIZUpW0a6b4QaCGuUS937HAM7fmT8RNZPR3rPxcGUKwEmcOzJMlf7jB u93QTCHAdYHkVvF0g1vlNUcUUKc4vOSth2gmyRJLEK4J4PsKmKBeSqjGzA5XlsQw 6YYp/61cqHG6/xnVwYyse2yQ8/3G9CN5rWQ2Rb/4jG2Q3nqucbNKpELDKwQjXfcM Aj/AhFqRWJA/Hb/HhoTIHRKr7M+n98FaA5jNfXCJ7kymnwD0sYC7MH506dbiJlC9 Fsd6FsaQNQoxUKnjAwcMGZfvv0zehOpeIUVeJ4AotMAxsXPsrIwB6jah1xZveGRk CB5crSOa+a/I1BvzVe0oQBWe5WGQx0NO7+ftjlq+EAmG5f2bVGMHdXKr68zfuTN9 mKJotr6CYCFo96+hOZCiNhTQxJmDzAmG4RNwcmDDRZI1SnzKUJxX7y71Zt5MIP+D X123ETZGH5f8MeM6ua8ul/ZOx3TZickqU3U4yiqRWgigUFQHGrNf8vvh4DcJc5He hSrgRCveOstWMAoRhjnOl1bfRhzjAgMBAAGjggJvMIICazAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFMYyRYAYmx6JAX67MXsEKPliSNO/MB8GA1UdIwQYMBaAFKhKamME fd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0 cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0 cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wJgYDVR0RBB8wHYIbd3d3 LnNhbm1pY2hlbGVzYWxlbnRpbm8uY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5 cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAdH7agzGtMxCRIZzOJU9C cMK//V5CIAjGNzV55hB7zFYAAAFsMocKugAABAMARjBEAiBdPvL6FZamwkcpyVAj uClWX97Y+e2xoGHmsZ8b0CA9XgIgGIy95Tm5RMuG26SRTFaGvVVGP45fyMI13xmm WTFNJyYAdgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWwyhwjr AAAEAwBHMEUCIFq2SYyqbrdJFRieiiodcbQ4HiV9gjxAUhUG1SPw+WM2AiEAy2tR 61P0Epia9DrfCudUEOgI/7LWtViU3RhcWAYdUBkwDQYJKoZIhvcNAQELBQADggEB ADFuYuxZKRTqcALMYp246UqiZJMa5gghJ/fCS14TBa3XXeF8ndY2DkOOo0VveMO7 b6VIZlReWr8nZfClO8HdGbKKAGkkT0ZnbtxWO9Y/IItPSXmi7ET6cwEouNJW/3wD G20oXX3/1ow5lO9u9+LitTe/0CMcZST00D6FMWIilJYidIvKJZhOHRFiugXWQVJd 8yqdqUKpzhFF6yS8gqeQO7FEhkXpl9UJrEI9rjX5sIeswioXvEAESF4c++LXOXk8 8w4x4DePE0MfHsbgbMvjOWo8U840yDRxLo95UQzDlFTw5+aPZupHhYyr1H5VqqyE NUrNs8hfzgZJQ0NmYtfMaP8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr+eiBU207keSD4SDOW0F d2Txo0ndIShs+3EY/Cw7RyNlOjwkGyQjpB8rDN/9FJux84zdIyYicCryaGytrqH9 ytEcJtn2OoGSq3tSI9dMslEwya1RikloyPTG4MhFAAq+QFZc6qdSaBJpi1STfg9U SYt5IhlSlbRrpvhBoIa5RL3fscAzt+ZPxE1k9Hes/FwZQrASZw7MkyV/uMG73dBM IcB1geRW8XSDW+U1RxRQpzi85K2HaCbJEksQrgng+wqYoF5KqMbMDleWxDDphin/ rVyocbr/GdXBjKx7bJDz/cb0I3mtZDZFv/iMbZDeeq5xs0qkQsMrBCNd9wwCP8CE WpFYkD8dv8eGhMgdEqvsz6f3wVoDmM19cInuTKafAPSxgLswfnTp1uImUL0Wx3oW xpA1CjFQqeMDBwwZl++/TN6E6l4hRV4ngCi0wDGxc+ysjAHqNqHXFm94ZGQIHlyt I5r5r8jUG/NV7ShAFZ7lYZDHQ07v5+2OWr4QCYbl/ZtUYwd1cqvrzN+5M32Yomi2 voJgIWj3r6E5kKI2FNDEmYPMCYbhE3ByYMNFkjVKfMpQnFfvLvVm3kwg/4NfXbcR NkYfl/wx4zq5ry6X9k7HdNmJySpTdTjKKpFaCKBQVAcas1/y++HgNwlzkd6FKuBE K946y1YwChGGOc6XVt9GHOMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 323957023770990604307129428404214548904124 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 07:23:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 07:23:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sanmichelesalentino.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 717629039089546465101337562199890779873601076463413646821545514605454599029694967940241311772836957862021114249788812443033532030713738817990231393539021323141694635746749564939398663698099024387664695888537710736209650926305213281685237142310736464906663971928786679948137534163155779710936697985779707102970733967888733575480678740916810073367443227916821861292078902772780628262787532027112379277296028075241354662001311812673726687447757048286430277290927772226883427491038524971944817933586207202653529688491330946631861207613412692619294820368782955820174292239823197989623999687891962777755951460482033672001645941458281439735877024941879554544658503299104532926006004376405009703074192296746546612685798585728254139646792526588248315695079676012236217364234403597540862500159983873164498515180341519715084423594696172127068975813554993204813870346282318279601264602182304299992281371166755198820481217314476765454533642464919651273860622402013866296758569025016390969297299657972792793797293907076388784076160183425076353148169895594417446162032363465823083513384342082531261676552197086257481583127809098905763414032090127963420527743838654899245537947150852375449156025983599499922219075283151763024200335820140500369153251 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c6324580189b1e89017ebb317b0428f96248d3bf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanmichelesalentino.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c32870aba000004030046304402205d3ef2fa1596a6c24729c95023b829565fded8f9edb1a061e6b19f1bd0203d5e0220188cbde539b944cb86dba4914c5686bd55463f8e5fc8c235df19a659314d272600760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c328708eb000004030047304502205ab6498caa6eb74915189e8a2a1d71b4381e257d823c40521506d523f0f96336022100cb6b51eb53f412989af43adf0ae75410e808ffb2d6b55894dd185c58061d5019 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00316e62ec592914ea7002cc629db8e94aa264931ae6082127f7c24b5e1305add75de17c9dd6360e438ea3456f78c3bb6fa54866545e5abf2765f0a53bc1dd19b28a0069244f46676edc563bd63f208b4f4979a2ec44fa730128b8d256ff7c031b6d285d7dffd68c3994ef6ef7e2e2b537bfd0231c6524f4d03e85316222949622748bca25984e1d1162ba05d641525df32a9da942a9ce1145eb24bc82a7903bb1448645e997d509ac423dae35f9b087acc22a17bc4004485e1cfbe2d739793cf30e31e0378f13431f1ec6e06ccbe3396a3c53ce34c834712e8f79510cc39454f0e7e68f66ea47858cabd47e55aaac84354acdb3c85fce064943436662d7cc68ff