shop.thechronicleherald.ca

Issued by GeoTrust Extended Validation SSL CA - G2

About this certificate


This digital certificate with serial number 6b:c1:85:87:40:33:fc:30:04:e6:64:1e:dd:29:7f:55 was issued on by GeoTrust Inc. .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • WARNING: Using depricated TeletexString for '[NOVA SCOTIA]'
  • WARNING: Using depricated TeletexString for '[Nova Scotia]'
  • WARNING: Using depricated TeletexString for '[Halifax]'
  • WARNING: Using depricated TeletexString for '[THE CHRONICLE HERALD & MAIL STAR]'
  • WARNING: Using depricated TeletexString for '[shop.thechronicleherald.ca]'

THE CHRONICLE HERALD & MAIL STAR

Company registration number: 1448201
Organization: THE CHRONICLE HERALD & MAIL STAR
State / Province: Nova Scotia
Locality: Halifax
Country: CA

GeoTrust Inc.

Organization: GeoTrust Inc.
State / Province: Nova Scotia
Locality: Halifax
Country: CA

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 6b:c1:85:87:40:33:fc:30:04:e6:64:1e:dd:29:7f:55
Serial Number (int): 143232217118832331998382610233856458581
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 6f:26:56:d9:5c:e7:f7:c9:04:20:f8:1e:ba:7c:91:27:2f:8c:fa:07

Fingerprint (sha1): 82:1c:ac:ef:98:ea:c0:b7:fe:14:38:e9:92:b7:06:33:29:41:41:dd
Fingerprint (sha256): 2a:0c:7a:39:dd:bb:76:35:bc:27:2a:d4:c1:46:e7:2e:d0:ea:a5:50:ac:2b:b2:30:cd:82:91:97:8d:2a:f6:92

Issuing Certificate URL: http://gtextval2-aia.geotrust.com/gtextval2.cer

Revocation information

OCSP Server: http://gtextval2-ocsp.geotrust.com
CRL Distribution Point: http://gtextval2-crl.geotrust.com/gtextval2.crl

Check the revocation status for the current certificate on shop.thechronicleherald.ca
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: shop.thechronicleherald.ca

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIQa8GFh0Az/DAE5mQe3Sl/VTANBgkqhkiG9w0BAQsFADBY MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjExMC8GA1UEAxMo R2VvVHJ1c3QgRXh0ZW5kZWQgVmFsaWRhdGlvbiBTU0wgQ0EgLSBHMjAeFw0xNDA0 MDcwMDAwMDBaFw0xNTA0MDcyMzU5NTlaMIHpMRMwEQYLKwYBBAGCNzwCAQMTAkNB MRwwGgYLKwYBBAGCNzwCAQIUC05PVkEgU0NPVElBMR0wGwYDVQQPExRQcml2YXRl IE9yZ2FuaXphdGlvbjEQMA4GA1UEBRMHMTQ0ODIwMTELMAkGA1UEBhMCQ0ExFDAS BgNVBAgUC05vdmEgU2NvdGlhMRAwDgYDVQQHFAdIYWxpZmF4MSkwJwYDVQQKFCBU SEUgQ0hST05JQ0xFIEhFUkFMRCAmIE1BSUwgU1RBUjEjMCEGA1UEAxQac2hvcC50 aGVjaHJvbmljbGVoZXJhbGQuY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDvoCNkfi1zIIBQzLwMc+pHGBSivSwKMwv248649UzlEshbno/k4xxLheVI o/5wjZa5YJd20uWv4iU9BTN9UeIcMjXSSseOvcYOVNhu2Dte2XboLAzL5LyIrPCP Ua+SvtmFWW9VUEEkU5RajlvZoKjahHlxnMiFuBORhMlGvEIdtNyqexnhryG/wlps UkL7SAp8jQZraNFBE8RLgQuiT++0FYhZHhC+ptLQuja55lw9k8X2OxMYCpWgxxUp JpVIKy4+zlYuv51N2lZdAGvlkggM98wLoM4d4CipWsgJYTrejbE17P2ZD0nNr6TB PpLLB0+/nK9rIA/ew0/OpMZhdTVfAgMBAAGjggGSMIIBjjAlBgNVHREEHjAcghpz aG9wLnRoZWNocm9uaWNsZWhlcmFsZC5jYTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQE AwIFoDBABgNVHR8EOTA3MDWgM6Axhi9odHRwOi8vZ3RleHR2YWwyLWNybC5nZW90 cnVzdC5jb20vZ3RleHR2YWwyLmNybDBLBgNVHSAERDBCMEAGCSsGAQQB8CIBBjAz MDEGCCsGAQUFBwIBFiVodHRwOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMv Y3BzMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBRv JlbZXOf3yQQg+B66fJEnL4z6BzB7BggrBgEFBQcBAQRvMG0wLgYIKwYBBQUHMAGG Imh0dHA6Ly9ndGV4dHZhbDItb2NzcC5nZW90cnVzdC5jb20wOwYIKwYBBQUHMAKG L2h0dHA6Ly9ndGV4dHZhbDItYWlhLmdlb3RydXN0LmNvbS9ndGV4dHZhbDIuY2Vy MA0GCSqGSIb3DQEBCwUAA4IBAQBnk3NO7/mlFT7TBdrPCGyHeUTDYv8c1URGjGVR 3MtLIc54VJXShiNns/Y9xj1w3spqUBE/7TAmvY51IqrrAIflPvKsz0rBZth+brcG 1+dwfNw0+q3/A7IN2vZ4hW2FBMSHCJLxjsALvcTA3u8GfuwxhBrTsjzn+z9PzKH5 Pt18IZ/0Ahmq4ErK9oG9+MX7+l/hmBtUcDNbw2733VtvJ1tSQWFHigSFgSAAKDKW yXlVFqu2jQ0QomWOqg5gETEh4Ss6FTg1S35wEqOAxiwSi/2MTtv914X5Z/Qwgpnd KXQgsVHv43WmkZ1v+bQRKqilJLUfftbN3OuhMy8O4W4k4+mn -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76AjZH4tcyCAUMy8DHPq RxgUor0sCjML9uPOuPVM5RLIW56P5OMcS4XlSKP+cI2WuWCXdtLlr+IlPQUzfVHi HDI10krHjr3GDlTYbtg7Xtl26CwMy+S8iKzwj1Gvkr7ZhVlvVVBBJFOUWo5b2aCo 2oR5cZzIhbgTkYTJRrxCHbTcqnsZ4a8hv8JabFJC+0gKfI0Ga2jRQRPES4ELok/v tBWIWR4QvqbS0Lo2ueZcPZPF9jsTGAqVoMcVKSaVSCsuPs5WLr+dTdpWXQBr5ZII DPfMC6DOHeAoqVrICWE63o2xNez9mQ9Jza+kwT6SywdPv5yvayAP3sNPzqTGYXU1 XwIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 143232217118832331998382610233856458581 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'NOVA SCOTIA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1448201' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Nova Scotia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Halifax' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'THE CHRONICLE HERALD & MAIL STAR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'shop.thechronicleherald.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30249922002167706370148987010049205537493750132956124048483584799380457414831860121484792399860511773675277764929593350414150691458822050706495704173892396287034615759072874912301910314204476145095774574775518614446028935469716618454902886167588894065867214337521734194717307556787493468097843246383790440521258192524666189603305419712848701744854047270546748698094751913940535768145230693986142392123578284312573618729070055315519809307085705059944708924406693697011694745583999324480106589999172154745695711377015661831557520462627965542549610014554043325435633925893815187895368059433839187013214528536712423224671 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thechronicleherald.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-crl.geotrust.com/gtextval2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f2656d95ce7f7c90420f81eba7c91272f8cfa07 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-ocsp.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtextval2-aia.geotrust.com/gtextval2.cer' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 006793734eeff9a5153ed305dacf086c877944c362ff1cd544468c6551dccb4b21ce785495d2862367b3f63dc63d70deca6a50113fed3026bd8e7522aaeb0087e53ef2accf4ac166d87e6eb706d7e7707cdc34faadff03b20ddaf678856d8504c4870892f18ec00bbdc4c0deef067eec31841ad3b23ce7fb3f4fcca1f93edd7c219ff40219aae04acaf681bdf8c5fbfa5fe1981b5470335bc36ef7dd5b6f275b524161478a0485812000283296c9795516abb68d0d10a2658eaa0e60113121e12b3a1538354b7e7012a380c62c128bfd8c4edbfdd785f967f4308299dd297420b151efe375a6919d6ff9b4112aa8a524b51f7ed6cddceba1332f0ee16e24e3e9a7