mtcap.com.br
Issued by R3
About this certificate
This digital certificate with serial number 03:86:bd:fb:00:9c:b9:93:ba:b1:96:95:33:ab:c4:f5:20:72 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=mtcap.com.br
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:86:bd:fb:00:9c:b9:93:ba:b1:96:95:33:ab:c4:f5:20:72Serial Number (int): 307187222332818362058451235595712824942706
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e3:2c:83:2a:48:83:1c:19:0a:66:40:ba:1f:4b:74:61:73:7a:ac:0c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ea:d7:35:a4:94:b2:4c:cf:f1:04:ed:e6:8e:73:a4:17:da:11:fe:a0
Fingerprint (sha256): 6a:65:fe:7d:73:1f:c3:cd:a5:6e:b4:47:e6:35:94:27:15:6b:38:5a:92:cb:89:dd:35:5f:6e:27:95:36:f1:a1
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate mtcap.com.br
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mtcap.com.br
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mtcap.com.br
www.mtcap.com.br
www.mtcap.com.br
Other certificates including the domain name mtcap.com.br
(limited to 100 certificates)
rempleo.fr
*.mtcap.com.br
download.mtcap.com.br
grayagent.com.au
*.mtcap.com.br
mtcap.com.br
*.mtcap.com.br
mtcap.com.br
itisthere.com
www.fitbody360.com
app.mtcap.com.br
musica.tw
www.fcrbpeter.com
mtcap.com.br
totalpoker.io
download.mtcap.com.br
app.fuselo.com
www.hartmood-music.com
www.mtcap.com.br
www.vaptsolutions.com
www.andrevargas.com.br
mtcap.com.br
app.mtcap.com.br
kubbwinkel.eu
mtcap.com.br
*.mtcap.com.br
www.mtcap.com.br
table-designed.com
harrycameron.com
mtcap.com.br
austinalice.com
sni.cloudflaressl.com
lyceudegoiania.com.br
www.roguebot.software
www.hartmood-music.com
www.mtcap.com.br
sni.cloudflaressl.com
*.mtcap.com.br
download.mtcap.com.br
grayagent.com.au
*.mtcap.com.br
mtcap.com.br
*.mtcap.com.br
mtcap.com.br
itisthere.com
www.fitbody360.com
app.mtcap.com.br
musica.tw
www.fcrbpeter.com
mtcap.com.br
totalpoker.io
download.mtcap.com.br
app.fuselo.com
www.hartmood-music.com
www.mtcap.com.br
www.vaptsolutions.com
www.andrevargas.com.br
mtcap.com.br
app.mtcap.com.br
kubbwinkel.eu
mtcap.com.br
*.mtcap.com.br
www.mtcap.com.br
table-designed.com
harrycameron.com
mtcap.com.br
austinalice.com
sni.cloudflaressl.com
lyceudegoiania.com.br
www.roguebot.software
www.hartmood-music.com
www.mtcap.com.br
sni.cloudflaressl.com
Certificate
The complete raw certificate details for mtcap.com.br in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgISA4a9+wCcuZO6sZaVM6vE9SByMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MjUwMjQ4MTlaFw0yNDA3MjQwMjQ4MThaMBcxFTATBgNVBAMT DG10Y2FwLmNvbS5icjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAPEg YdS5XK1qlNZ2jhEjXADUFEGoE78jzA6h7Oci1tTOM4syFO8yBDxdnDLnbhlWqyAn /ss29Ab/POU86yCTEq3XJZDUgeBT55eGvMcfdPbrvP0CcRi6esyOMeOBUNqcZ7fM 6VkihV4tx+ejXkuTbFSjeL5zlWKfe4BZjdjUmSuU6lvVFeRsLxXq0yEC0Oe8gCSM 6j5xQDSHZVC1yJs3t9vWdI7vGCpWo2sppxnoNYJ72+EeSHqDX2BnkKzERb0nwW2i o6FJ5aRMrWo2pUWTFkrORxlcXuY2f+D0616kAkpLIt0+Vyze9Y7EIZyGX6tMOrYC JDAlR6cPnvwg8hUbpyoy2tZGQPhnSS2hqex2UWSu/GLBN/zafWIcew9VB8GeygtB OeE5AAlXuJ/kgOpkolYV8h4n23QyU3BRJDqYxBsJNOzIvYbUUYbnoxljVjHLD9Yt a52ORnXqYtrbpl2YVxGUA4ozzRz24aJZ0P8cRXYKApCeYHJUngEBC6ExeNL2PBgF jbM59rhJ/P9L+GpB+DXIkTNokdnfmN2rV9SwyXU8m7z0jQMNxKnbReGw52WAsjgZ shoRdhJEQwZ/HvsSyiWDJW64CE/8OUbhbxPMQaaNKM4D4MLyGPPwO5kOOA3YE30w wG32X8YUyg67X7GblugS+hnjRC7NUgxuOWypFrCTAgMBAAGjggIgMIICHDAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFOMsgypIgxwZCmZAuh9LdGFzeqwMMB8GA1UdIwQY MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v cjMuaS5sZW5jci5vcmcvMCkGA1UdEQQiMCCCDG10Y2FwLmNvbS5icoIQd3d3Lm10 Y2FwLmNvbS5icjATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIE gfUEgfIA8AB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjxNe UgIAAAQDAEcwRQIhAMAFJN35sAig8A3JHyHry9R4qgz9td2vI451WIXO+znFAiAL vnxRZqR4dnSRXSWo9cxIT4xEpjIwxhTW5CN1QGQzwQB2ABmYEHEJ8NZSLjCA0p4/ ZLuDbijM+Q9Sju7fzko/FrTKAAABjxNeUggAAAQDAEcwRQIgAyT5O4MbgrxqDyrX hGvPsCYD00XyULAM0k/foLKy9AMCIQCC40gbeqpl3KiSOoIZutKQppN78CIDa15p Uf1V4yK73DANBgkqhkiG9w0BAQsFAAOCAQEAhYYtEWPk5vWbgrtLA3dEopBlZKLP CRmCEGjmJ7PMc95dQceTBoZmGMnBwLLv2yTNw5xz0XErb9JsXIVJQCZjZwmkspPh EEfR9RAoAiawChOv9OgP8ogKtMFFX551ZJ3l5MCA0ntFz3W6LPe3XrTNQRF/Psed h79klEZMOolIscsQXmsjjaLVUstO+PqNQuHzAnJH1w8g6+op9ZkfpU/rGKyHZgwB ZUpEfP4p29fne7qz6rNEIQYinls377cWAPAugVSznQnai9WWdAd0RB4E/ctSLLjb f0AA5S6SmU8fX+8QCmzZLExEpB1bEJ3+Ybk971zEJK/JGfMO0W9jiv4cfA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8SBh1LlcrWqU1naOESNc ANQUQagTvyPMDqHs5yLW1M4zizIU7zIEPF2cMuduGVarICf+yzb0Bv885TzrIJMS rdclkNSB4FPnl4a8xx909uu8/QJxGLp6zI4x44FQ2pxnt8zpWSKFXi3H56NeS5Ns VKN4vnOVYp97gFmN2NSZK5TqW9UV5GwvFerTIQLQ57yAJIzqPnFANIdlULXImze3 29Z0ju8YKlajaymnGeg1gnvb4R5IeoNfYGeQrMRFvSfBbaKjoUnlpEytajalRZMW Ss5HGVxe5jZ/4PTrXqQCSksi3T5XLN71jsQhnIZfq0w6tgIkMCVHpw+e/CDyFRun KjLa1kZA+GdJLaGp7HZRZK78YsE3/Np9Yhx7D1UHwZ7KC0E54TkACVe4n+SA6mSi VhXyHifbdDJTcFEkOpjEGwk07Mi9htRRhuejGWNWMcsP1i1rnY5Gdepi2tumXZhX EZQDijPNHPbholnQ/xxFdgoCkJ5gclSeAQELoTF40vY8GAWNszn2uEn8/0v4akH4 NciRM2iR2d+Y3atX1LDJdTybvPSNAw3EqdtF4bDnZYCyOBmyGhF2EkRDBn8e+xLK JYMlbrgIT/w5RuFvE8xBpo0ozgPgwvIY8/A7mQ44DdgTfTDAbfZfxhTKDrtfsZuW 6BL6GeNELs1SDG45bKkWsJMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 307187222332818362058451235595712824942706 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 02:48:19 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-24 02:48:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mtcap.com.br' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 983710265920101698563588038517790461582243036959926153603336733111009419087146516144976256268453912109046422679039659126346394189651747453367591829957046522754487396186033261573911455057393722166310261175483184499868141536322792259403864626861316928698027224626015781040261877423736890556493425360963078592855257468766439257526397677228306157186703614458469032710143230386854211472357938880972721859514489209844217243147724363209407315104003506249412705573736492829542456547135960130471793038264672203960395763568819014858516345003666158832688400543827039769702539049338068003151324375437248013346821669781043961819284796521264183478929561327191039406155158314126506168527403465357075293271678908579029628554767947496427909862230203277929171421380912061140037812745822117242094838683509355067282078647304915401162560147948365368677001803947790092686370740226316363483320556589512537122728560957183347726248378333310562564874658940061904896041807145467754091935170628379308847258742035425435186869581077111073129366371510887889373451594284909887614014730093217304376914647461341703058907376202787058341495741290159397285880299833775395435084968983124987561452335184120233424478108420861693975340303175846014988697055505483724876066963 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e32c832a48831c190a6640ba1f4b7461737aac0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtcap.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtcap.com.br' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f135e52020000040300473045022100c00524ddf9b008a0f00dc91f21ebcbd478aa0cfdb5ddaf238e755885cefb39c502200bbe7c5166a4787674915d25a8f5cc484f8c44a63230c614d6e42375406433c10076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f135e5208000004030047304502200324f93b831b82bc6a0f2ad7846bcfb02603d345f250b00cd24fdfa0b2b2f40302210082e3481b7aaa65dca8923a8219bad290a6937bf022036b5e6951fd55e322bbdc . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0085862d1163e4e6f59b82bb4b037744a2906564a2cf0919821068e627b3cc73de5d41c79306866618c9c1c0b2efdb24cdc39c73d1712b6fd26c5c85494026636709a4b293e11047d1f510280226b00a13aff4e80ff2880ab4c1455f9e75649de5e4c080d27b45cf75ba2cf7b75eb4cd41117f3ec79d87bf6494464c3a8948b1cb105e6b238da2d552cb4ef8fa8d42e1f3027247d70f20ebea29f5991fa54feb18ac87660c01654a447cfe29dbd7e77bbab3eab3442106229e5b37efb71600f02e8154b39d09da8bd596740774441e04fdcb522cb8db7f4000e52e92994f1f5fef100a6cd92c4c44a41d5b109dfe61b93def5cc424afc919f30ed16f638afe1c7c