navike21.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:78:02:52:52:55:d3:bb:93:1c:a1:6e:c5:c5:a3:67:90:d0 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=navike21.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:78:02:52:52:55:d3:bb:93:1c:a1:6e:c5:c5:a3:67:90:d0
Serial Number (int): 302173827720084834657154027986754067730640
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 56:ce:28:92:65:1c:e2:10:44:a6:5a:98:c4:ab:32:94:84:86:e9:16
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 78:1e:2b:26:a7:84:9c:c1:f3:3a:d3:c6:e7:0f:05:84:df:17:c7:f5
Fingerprint (sha256): 66:c2:32:39:90:fb:97:69:78:ee:be:d1:73:71:20:38:fb:af:67:93:61:bb:56:b8:75:63:03:a0:89:d9:25:3b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate navike21.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for navike21.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agrovet.navike21.com
mail.navike21.com
navike21.com
www.agrovet.navike21.com
www.navike21.com

Other certificates including the domain name navike21.com

(limited to 100 certificates)
fundslist.app
agrovet.navike21.com
beats.navike21.com
www.ferreteria.navike21.com
beats.navike21.com
giogana.navike21.com
beats.navike21.com
*.navike21.com
navike21.com
www.gatelion.com
www.navike21.com
giogana.com
navike21.com
www.lukasgeiger.com
bastemp.navike21.com
navike21.com
bastemp.com
bastemp.navike21.com
bastemp.com
pruebas.navike21.com
navike21.com
beats.navike21.com
pruebas.navike21.com
firestore.navike21.com
lvntr.dev
barncatsgame.com
navike21.com
vpsvirtual.navike21.com
agrovet.navike21.com
fundslist.app
navike21.com
giogana.com
experts.gobubble.app
crossmente.turnosweb.app
bastemp.com
agrovet.navike21.com
applink.chefvpn.com
navike21.com
beats.navike21.com
applink.chefvpn.com
beats.navike21.com
www.gagarinspace.ml
firestore.navike21.com
navike21.com
barncatsgame.com
navike21.com
navike21.com
bastemp.navike21.com
navike21.com
mail.navike21.com
bastemp.com
navike21.com
giogana.com
bastemp.com
beats.navike21.com
bastemp.com
estilos.navike21.com
beats.navike21.com
navike21.com
pruebas.navike21.com
navike21.com
bastemp.com
navike21.com
agrovet.navike21.com
navike21.com
navike21.com
navike21.com
bastemp.navike21.com

Certificate

The complete raw certificate details for navike21.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISA3gCUlJV07uTHKFuxcWjZ5DQMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMjcwNzMxNTVaFw0x
OTA0MjcwNzMxNTVaMBcxFTATBgNVBAMTDG5hdmlrZTIxLmNvbTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAMeDRf3fp/OqVd+niLWV6vhMp6EEvkacXRUE
B+Vog/knNF6xtlKyAhqXBbP9FCiZMo7DLCaD/kvWBSQLq2jgWBhR1IwiE68va+oC
tElUdB+ft4LRDHOW6xPQX/iZtt9xIzKpOJda6mO/e5dufpJdgVY6jOOTE05+KyaK
AC9IFSP51BakJ+E5wjAqBHSk+AjKE6bcighroAPT4NYq7qyu8h2ViqdPlszjNxCG
V5KT2hoYQ4IeuDFRDH494Z2rHEVQUHgvnAA4T/auCyagF7z9puDdvmMwbNVnl84f
eGdkHuZQNvqub6f2mZkDXOEFy5nv6gTL7Kl1M6PJwXHcc02gIC8CAwEAAaOCArUw
ggKxMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUVs4okmUc4hBEplqYxKsylISG6RYw
HwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBh
MC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
MC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3Jn
LzBsBgNVHREEZTBjghRhZ3JvdmV0Lm5hdmlrZTIxLmNvbYIRbWFpbC5uYXZpa2Uy
MS5jb22CDG5hdmlrZTIxLmNvbYIYd3d3LmFncm92ZXQubmF2aWtlMjEuY29tghB3
d3cubmF2aWtlMjEuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T
AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB
AwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjG
NzV55hB7zFYAAAFojm/EbAAABAMARjBEAiAWMiwhW40KVPTkvsFdBUxyLblDJwi0
hOAm2h91s8pJBAIgRIw8yd3yk669aWIV5P7u+QG23y6nKkbw0ju55y2d6xMAdgAp
PFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWiOb8atAAAEAwBHMEUC
IDIo0fthyF8AmnnOsYAkTZtwOsm8/aKZ3lqENMJEwmEyAiEAhX6S9o4Rtj/CvQHs
X+HeeuJ8xYIeCuLV4FXNrGLOBNIwDQYJKoZIhvcNAQELBQADggEBAB/kF1w3wlv4
nsa13cqgtcbcAGS0+ISFHxUU3er6CXFy3c0h5SazrtiLarJ8zi0wjIdQEgP/mAYL
VYl1aostFfEcvq37cpYJiKlbQ5tThmFSibit4N7o18865UN9UQqRker9In/Z8D+Q
jnYGYxaH2gMIcgx7hoZ7tGJ+mwI+NA3drSs9aao9Rx0gSQlkRVgG61COkvqNUw0z
5iBsJ0471QsMxRuwWp8j0TyaDaPS9WH4wwlz+uFLkGhGUk2dkZV45is0+JZ18VqR
98siLy/Gxt0PRSV+x1C097LrlTX7Yt35nEqmTzDsbgatFPm6y1y4OGXHsDRCKDAu
5E2pU9wcUtI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4NF/d+n86pV36eItZXq
+EynoQS+RpxdFQQH5WiD+Sc0XrG2UrICGpcFs/0UKJkyjsMsJoP+S9YFJAuraOBY
GFHUjCITry9r6gK0SVR0H5+3gtEMc5brE9Bf+Jm233EjMqk4l1rqY797l25+kl2B
VjqM45MTTn4rJooAL0gVI/nUFqQn4TnCMCoEdKT4CMoTptyKCGugA9Pg1irurK7y
HZWKp0+WzOM3EIZXkpPaGhhDgh64MVEMfj3hnascRVBQeC+cADhP9q4LJqAXvP2m
4N2+YzBs1WeXzh94Z2Qe5lA2+q5vp/aZmQNc4QXLme/qBMvsqXUzo8nBcdxzTaAg
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302173827720084834657154027986754067730640
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-27 07:31:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-27 07:31:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'navike21.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25186156016922275669735859012422029162192754973619766082794239911221782607055288323185955412849785268221396050343571493618989907917442342185746284682235820623312947696064106502434940083777838391508514386452019907359037164860449110121547492019763244195680675571866023109100931866486975816874008765792312082131490808988594273953943402982971633260288633159931109936873316482365375923189142926765672741085508267399031157918421068654393993145550173030391995823001888424551120123453176770892913788117955734775485900322321188054895567251138473028958125124509224147846710432127470042638996714353571643686992066124856900460591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56ce2892651ce21044a65a98c4ab32948486e916
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrovet.navike21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.navike21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navike21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agrovet.navike21.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.navike21.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001688e6fc46c0000040300463044022016322c215b8d0a54f4e4bec15d054c722db9432708b484e026da1f75b3ca49040220448c3cc9ddf293aebd696215e4feeef901b6df2ea72a46f0d23bb9e72d9deb13007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001688e6fc6ad000004030047304502203228d1fb61c85f009a79ceb180244d9b703ac9bcfda299de5a8434c244c26132022100857e92f68e11b63fc2bd01ec5fe1de7ae27cc5821e0ae2d5e055cdac62ce04d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001fe4175c37c25bf89ec6b5ddcaa0b5c6dc0064b4f884851f1514ddeafa097172ddcd21e526b3aed88b6ab27cce2d308c87501203ff98060b5589756a8b2d15f11cbeadfb72960988a95b439b5386615289b8ade0dee8d7cf3ae5437d510a9191eafd227fd9f03f908e7606631687da0308720c7b86867bb4627e9b023e340dddad2b3d69aa3d471d20490964455806eb508e92fa8d530d33e6206c274e3bd50b0cc51bb05a9f23d13c9a0da3d2f561f8c30973fae14b906846524d9d919578e62b34f89675f15a91f7cb222f2fc6c6dd0f45257ec750b4f7b2eb9535fb62ddf99c4aa64f30ec6e06ad14f9bacb5cb83865c7b0344228302ee44da953dc1c52d2