www.ebf.com

- EBF-EDV Beratung Foellmer GmbH -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 23:74:16:36:a5:ad:8c:b4:e9:2f:97:78:8e:aa:a5:bd:51:80:29:4c was issued on by SwissSign AG.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

EBF-EDV Beratung Foellmer GmbH

Organization: EBF-EDV Beratung Foellmer GmbH
State / Province: NRW
Locality: Koeln
Country: DE

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 23:74:16:36:a5:ad:8c:b4:e9:2f:97:78:8e:aa:a5:bd:51:80:29:4c
Serial Number (int): 202403498487625988620300381904002148404251601228
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 16:83:da:14:08:8d:93:8e:91:9a:51:a0:f5:c7:f8:b3:a9:27:37:24
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): a1:2a:63:bb:90:10:9b:70:53:65:61:60:12:3d:09:82:b6:ef:a2:62
Fingerprint (sha256): 71:e9:7b:f0:26:e5:1b:cc:18:86:f7:72:11:97:3a:35:56:8f:b1:b9:7a:b5:6e:49:ef:a1:48:5b:8a:6e:5a:2b

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate www.ebf.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ebf.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ebf.us
ebf.us
www.ebf.com
ebf.de
www.ebf.de
ebf.com

Other certificates including the domain name ebf.com

(limited to 100 certificates)
*.ebf.com
support.ebf.com
adfs.cloud.ebf.com
emm-cloud-sentry.ebf.com
emm-cloud-sentry.ebf.com
www.ebf.com
adfs.cloud.ebf.com
www.ebf.com
ebf.com
support.ebf.com
*.test4.ebf.com
m.ebf.com
support.ebf.com
*.vodafone.ebf.com
www.ebf.com
*.cdn.ebf.com
www.ebf.com
zm.ebf.com
*.unite-staging.ebf.com
*.unite-staging.ebf.com
www.ebf.com
support.ebf.com
www.partner.ebf.com
ebf.com
www.ebf.com
support.ebf.com
*.vodafone.ebf.com
www.ebf.com
www.ebf.com

Certificate

The complete raw certificate details for www.ebf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyzLVpTGfNgJgV9nquN17
Scx+UxZSdUwlSaNefnG/K2eSJ7FQxPf3UFI76KKpa7h5p+cW8E/9DdD+iaYJv7ba
dKfKtMY7dvvRA2+sWrUjOd0IjWsVQdx0r5PxeyUmWv3+YLuXxOpw3Fll6/f8q7BT
5p0ElMopyARjmW54d2mw3zgOibx940nc30TmhxJM1yVeUKfWS1fOpaK/e3XLlNKs
6GfhFCFss3bO2rJyTTiHDQVD8/AeQwxP3wc0YAQu9xslxEErFYJc84jCvMLnWU+P
vYFgDbSivaBVrPbrFeZWp76R4MdmcHC1+QVJMsygxRLQfjP2jbYcHVOwFTuEVGMr
sjDivSR1MxejOVTPerSsoNLV1AaJxIDPJC5jcD4OEA1xiOVeGEkxUmrxGM12DANn
pAsxT1g6LLSgWe2OYMD7BtG/3DHVR60vi3yLzl7aKSIZUYQV/STAGrN6sLXoozfu
+IwjTICckUiIdIkP8A1TW77uXUIm1tlvh5muKgn+VfC9vuhGdUCYpk9Pua9LTceH
ad5mVzA4F9rKwnyC0yPvnC4kxsl640F+kU9ZQYkNmxWP3uj2FMLW+NiRH6nhZJnN
mGr8AKYZXOCbbpIDZIJmc9KE80Rp6us3s8ty8ywL776hOaB7lNAr5CnKHN3N7d8u
9gk3Na0YqKiCayBnb6NLpTECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 202403498487625988620300381904002148404251601228
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 15:20:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-16 15:20:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NRW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Koeln'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'EBF-EDV Beratung Foellmer GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ebf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 828977850800825984736375771101931487588004880401175903007206442058456306057672229904421660952221258217318122533647185528152330873473406598111105154676467644014854827964757042793914981650234606362270558883031772424346168526855660410950232132336675628517046940871586440527582562063222568464607486323612728505122559878852356394741275888096105884433858669175824831088222249447780577265225308236930592485185212133495366774091175227828118052204235276685181540634031247701496289870039994077404030105915468012144903158157409094008758143680041111395817745680394062641889257211995643603305341581715589233512087508903404486667296619934768731567566754866899137766598317947887762907776929355265711332258102846234936650220237403585456765499575281673061932772515928388814367565382889112948618830579244315768567055214035347678010406896292742332399610795099250396560410864009374631316359325920771015060009677606098474789205542498638784039209527077235645641936466361098253314552524997906275316738123424638963239257876632852608593358289938719863651635134837677440426707916614340409218608840136256793714688999506294750790618101991253281430099360899175470777396495182705087307927842513472675895691204900927443095108939263334939167568848685178601096324401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1683da14088d938e919a51a0f5c7f8b3a9273724
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0022bd565f20cdb41bf5e031f2545c8bceaa5f8203a72a8281bab55fc5658cefe005394c9d76dcf373a2fcada7121bcab620c4640f8f0b48d99ed773955d3aef65aae956a175e764b0d55444f366201c731c6da33e0efa2b7494283b286cb5a5232f90d3aeb3e9743d729aa44ff8adc289216bb827d2289f507438531f5fa5208b5e45e42c531130fa4e396fa02297603588c0cbc4d9850ca0fbbf93757fe07e8bc41d0cdc848e3969db977ed001e263b1d4808261e562bda29096603e0bd51e48f11d135d1790f1aacae836913cc3011a951bf46cc0ab6b0827128649ac73a23f454b63a7b11d406d8fbd1e97f79194cc2d921cc3defd58d820eff4325b6817f1995cf7e0f1735bcb881c9efed9b9a06a96cbd5de01a8577b73783c7864aadda7431f10c80b6279fc0a43749f5fbf4b55105e6d84aae2bfb561f83572d05e0fc363cd1159fae3a99608d3ec1feaff2b3bdc333bc9fb56342d1f6185d3cae06da0e4777199df13a2086c4ef01dbff384c39b804a7b1ef9ddedd227252840f2cb6259413c8598cfbd3b5d423542490924ace4d961a88dbc2bcb80f4d4c2fd420c17051b22b7519aa4440d75bf3dfedac515c05d0efc46310615d084f9ddf7aba9392189960df53eba2790f3235029620565c38dc7dbd7f90b32dc7c6bb4da69144d41759f4c29ba27fa480e7acd0e65fb407bc57699529822a5922fb6ddfd545cee