easy.handychuck.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:56:3a:28:07:71:15:41:a2:ce:75:93:b4:ee:7f:7a:93:5b was issued on by Let's Encrypt.
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=easy.handychuck.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:56:3a:28:07:71:15:41:a2:ce:75:93:b4:ee:7f:7a:93:5bSerial Number (int): 290678444417047542435345434907447423308635
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 74:c3:11:31:a6:f2:d6:da:72:42:26:fd:46:a2:4b:b1:6e:fd:b2:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6a:01:c8:7d:65:c2:2c:75:a3:66:bc:b0:ac:ef:83:ba:a8:46:ee:e3
Fingerprint (sha256): 65:c9:70:cc:0a:34:c4:8f:75:a8:0f:52:a6:08:ca:fa:42:88:75:4b:6d:8f:28:dc:32:02:d1:02:20:3d:81:d1
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate easy.handychuck.com
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for easy.handychuck.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
acq.handychuck.com
dav.handychuck.com
easy-dav.handychuck.com
easy.handychuck.com
mail.handychuck.com
redmine.akarni.com
redmine.handychuck.com
dav.handychuck.com
easy-dav.handychuck.com
easy.handychuck.com
mail.handychuck.com
redmine.akarni.com
redmine.handychuck.com
Other certificates including the domain name handychuck.com
(limited to 100 certificates)
easy.handychuck.com
mail.handychuck.com
mail.handychuck.com
stg2.handychuck.com
handychuck.com
easy.handychuck.com
easy.handychuck.com
easy.handychuck.com
*.handychuck.com
easy.handychuck.com
handychuck.com
*.handychuck.com
handychuck.com
easy.handychuck.com
stg.handychuck.com
easy.handychuck.com
mail.handychuck.com
handychuck.com
handychuck.com
handychuck.com
handychuck.com
handychuck.com
handychuck.com
handychuck.com
easy.handychuck.com
handychuck.com
*.handychuck.com
*.handychuck.com
easy.handychuck.com
easy.handychuck.com
stg2.handychuck.com
mail.handychuck.com
mail.handychuck.com
stg2.handychuck.com
handychuck.com
easy.handychuck.com
easy.handychuck.com
easy.handychuck.com
*.handychuck.com
easy.handychuck.com
handychuck.com
*.handychuck.com
handychuck.com
easy.handychuck.com
stg.handychuck.com
easy.handychuck.com
mail.handychuck.com
handychuck.com
handychuck.com
handychuck.com
handychuck.com
handychuck.com
handychuck.com
handychuck.com
easy.handychuck.com
handychuck.com
*.handychuck.com
*.handychuck.com
easy.handychuck.com
easy.handychuck.com
stg2.handychuck.com
Certificate
The complete raw certificate details for easy.handychuck.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgISA1Y6KAdxFUGiznWTtO5/epNbMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMjcyMjIxNTZaFw0y MDA0MjYyMjIxNTZaMB4xHDAaBgNVBAMTE2Vhc3kuaGFuZHljaHVjay5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDaiK3ORsJuHi+zLpDIIsrFhmm 8MAAU8jevU8ANv0lmhYPQt7EvdVTwSQm6tj1Mp4G+Ufc5QAmqznB9EN5qSW5/APU q3ZMfM/m785v41LUI81KO10O9ofkMuYTouWrDWT1OXIwBh4hd+c7KHhvy+Gt3gPQ v3VTbAJkmYi6U8HGwZIu2lgZYhOB1TCj8b53uAQlA/mUirpTFpQ26UBQFaYN2BdO A9zyB99P1ZN5bYUFBtv77uRnzjBLmWh9hy8CFfjIXa8iN609wkaDHRsgsZJpH3xi KQkeQ+HcsAItk8WZWv0+FiBTvHXAWy1COAE5ybusPbBEh22+jDhQO/gzz5vZAgMB AAGjggLsMIIC6DAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHTDETGm8tbackIm/Uai S7Fu/bK4MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wgaIGA1UdEQSBmjCBl4ISYWNxLmhhbmR5Y2h1Y2suY29tghJkYXYu aGFuZHljaHVjay5jb22CF2Vhc3ktZGF2LmhhbmR5Y2h1Y2suY29tghNlYXN5Lmhh bmR5Y2h1Y2suY29tghNtYWlsLmhhbmR5Y2h1Y2suY29tghJyZWRtaW5lLmFrYXJu aS5jb22CFnJlZG1pbmUuaGFuZHljaHVjay5jb20wTAYDVR0gBEUwQzAIBgZngQwB AgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRz ZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQDwlaRZ8gDRgkAQ LS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAW/pT8XOAAAEAwBGMEQCIBewSQrbGKDZ N+8nXS38GUOr1hGL5j/jZslftJGiR6i3AiAh8V5bcwbktPBeAivC4u0pPSMtJJqk Y5LLteA2vkpfRQB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAAB b+lPxcMAAAQDAEcwRQIgO5oxQGRoaRpqWdzDJBOqcDfs739iZHDfRVqVY5lHZtIC IQDJVSr7eGvdXRY2JWxHk1ZEw3lwD9Jua3ooUiqXAix4hDANBgkqhkiG9w0BAQsF AAOCAQEAcSy5+v9mgwohcI7n0ksa1iGN0xzFO5buHr94krrfeMm4vuNfupi3MUw0 8cyVECOHS8ceCuKLbXdQ5iHwIXMRVeRMRBHzw4SihxVidj0rEVcLBmLuI2S+bg2x qw7cVmJtSTvcBhQBz9Fr4TryOujAIKS9MfFA33pno2OEWzQwNOD5wH0S4AYohxd7 T2voS3O9DKN4KgmIxX4eZszJcKLbSUdxEkdIw5eE73Ya2BZZXS0mzhKgIRHfeL97 xXEKi35KNYS5SrUV42ZOn6ziY0xyMVV0f9cVB/qgYgOQEGMMcnP8taAkCX7ni8IG de77gJJxbAp7PYquXvvN8/QlUTrF2w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2oitzkbCbh4vsy6QyCL KxYZpvDAAFPI3r1PADb9JZoWD0LexL3VU8EkJurY9TKeBvlH3OUAJqs5wfRDeakl ufwD1Kt2THzP5u/Ob+NS1CPNSjtdDvaH5DLmE6Llqw1k9TlyMAYeIXfnOyh4b8vh rd4D0L91U2wCZJmIulPBxsGSLtpYGWITgdUwo/G+d7gEJQP5lIq6UxaUNulAUBWm DdgXTgPc8gffT9WTeW2FBQbb++7kZ84wS5lofYcvAhX4yF2vIjetPcJGgx0bILGS aR98YikJHkPh3LACLZPFmVr9PhYgU7x1wFstQjgBOcm7rD2wRIdtvow4UDv4M8+b 2QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 290678444417047542435345434907447423308635 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 22:21:56 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-26 22:21:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'easy.handychuck.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24668806887457823883733286995243071270646128942041670583344739113446677944771481278418711313609957950951169536077943992820137819811637496482457129360396997566309820957457145466934111963430916521655573309955939032715073818790183521455840634791559284752989992559960294714214729029405879421946977629002040434721161213539011450544596376595600781913316241622997614619318833643440126124920537394865496744991681621146948948082352097446651690262821890593257936735810540687650066567840179430650443632893758512181907989436159723567383510698447542591752778379410280549481505175487074449680347357479598372133454554498063563463641 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 74c31131a6f2d6da724226fd46a24bb16efdb2b8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (154 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acq.handychuck.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dav.handychuck.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy-dav.handychuck.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.handychuck.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.handychuck.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redmine.akarni.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redmine.handychuck.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fe94fc5ce0000040300463044022017b0490adb18a0d937ef275d2dfc1943abd6118be63fe366c95fb491a247a8b7022021f15e5b7306e4b4f05e022bc2e2ed293d232d249aa46392cbb5e036be4a5f45007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fe94fc5c3000004030047304502203b9a31406468691a6a59dcc32413aa7037ecef7f626470df455a9563994766d2022100c9552afb786bdd5d1636256c47935644c379700fd26e6b7a28522a97022c7884 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00712cb9faff66830a21708ee7d24b1ad6218dd31cc53b96ee1ebf7892badf78c9b8bee35fba98b7314c34f1cc951023874bc71e0ae28b6d7750e621f021731155e44c4411f3c384a2871562763d2b11570b0662ee2364be6e0db1ab0edc56626d493bdc061401cfd16be13af23ae8c020a4bd31f140df7a67a363845b343034e0f9c07d12e0062887177b4f6be84b73bd0ca3782a0988c57e1e66ccc970a2db494771124748c39784ef761ad816595d2d26ce12a02111df78bf7bc5710a8b7e4a3584b94ab515e3664e9face2634c723155747fd71507faa062039010630c7273fcb5a024097ee78bc20675eefb8092716c0a7b3d8aae5efbcdf3f425513ac5db