borgia.io
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:7f:23:4f:d4:dc:e5:cb:b6:94:fe:ea:d2:96:ca:23:6a:a1 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=borgia.io
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:7f:23:4f:d4:dc:e5:cb:b6:94:fe:ea:d2:96:ca:23:6a:a1Serial Number (int): 304599655882916371175356501476369456392865
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f0:5d:2c:d6:00:85:60:98:46:5f:ef:dd:dd:33:1d:61:25:d7:ea:d5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 1a:9a:e5:e2:eb:75:7e:1d:70:4e:37:fb:69:cb:9d:0e:5a:69:c6:f5
Fingerprint (sha256): 73:c3:ec:d9:bb:a4:80:08:d6:2c:ed:64:74:88:55:19:28:47:e9:99:d7:92:79:3a:4e:5f:81:6c:c1:e0:f5:95
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate borgia.io
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for borgia.io
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
borgia.io
www.borgia.io
www.borgia.io
Other certificates including the domain name borgia.io
(limited to 100 certificates)
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
borgia.io
Certificate
The complete raw certificate details for borgia.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgISA38jT9Tc5cu2lP7q0pbKI2qhMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzA4MTMxMTMyMDBaFw0x NzExMTExMTMyMDBaMBQxEjAQBgNVBAMTCWJvcmdpYS5pbzCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAKQk1wBVdwOGa4sVlJSYO6PW4prjgxbZxSXagjmC f+vz4vVX0P/fkWHw1nbzhzAhaoDjo+h/DNH5NYMAymovKr6XAaw0IOrCHXqWuaO0 hrJYZfOqQi63SADbw+oexdMPS45gdFet7MYkAe2wiWtj9S5kw73jor7z/dCW0yWK XYxdM3GSqQ0csDVZm8QMCDx12kFtcssNrs6fzefjmxG1BpZjzB1pbp2WhTVzQ90f bd8sBU8TzDo3BK1XWWibXV9vjRWFV+N2LvJP5oYRcIF+ew0fgINQlEIfAkvTyAGv 9tTX5n6QlohTAlc3RpV58D/MkRtI1f/4Xidd0tlEbqUinOcEWO+2gbrOOHDKLPcK NzkeGPWEg/Q62rZCjpzbtQHK/869zLzqT6TGMQILnUSjoHgax4mKpay/bKX68JxN Ngd8JfFs434VbqpioMCuW9rB5pbvJaTvC1uZVauV32nOr0m6gJu67nUyyfU5oT4P 73XGDImdsJ2X8HuYtRVXYabGh4DLmsII0A7h+oKZ61pwPvj6QXn1I/51V1UXrXwg 5ZMj7gLXAhAsmYYcdwWp3koZk0WEB5dzBXSxVMm5BHrCWFNUyf9iI99YD5jL3LTi i4Pp2Aaoh9iFfK6MT0+I8lojPaEMt3OMO9EjuG/ShkipkjZYnQrgG6R9jLNbEaYz nva3AgMBAAGjggIYMIICFDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPBdLNYAhWCY Rl/v3d0zHWEl1+rVMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIJYm9yZ2lhLmlvgg13d3cuYm9yZ2lh LmlvMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUF BwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBv biBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRo IHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5j cnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAINgZSBGABxW Tx/XNcRP2N1tkIH/6IMDcWoT2yaoUAn6TrBYpkysjMepd7x7J8fX8EIOozI5l8Wu qRsnR7pjk3kW1q/bNv6KysJhvFGITs83IuELCtuvnhlXJnuFPcxCEWjDSE+l93dx w1WhQi/UFQstTRXkiJ5BR5wt4Y4XC6RBE2ZA5m++/ho8tdDg0cjUybQZ3RHA57Wb 3wVqFQqOZxLKwFr/Qn3n9mo64rvyYKYFcfIJ/co779OnGpoNblE1rPrs583RJnZL B11pxZ9n8nNo/jcdrU2G9fhdAbgzVR2oa/uWmUzdGnrPCkFd2k5y4R1ZCoHxCzLu zz6NXUd6m0E= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApCTXAFV3A4ZrixWUlJg7 o9bimuODFtnFJdqCOYJ/6/Pi9VfQ/9+RYfDWdvOHMCFqgOOj6H8M0fk1gwDKai8q vpcBrDQg6sIdepa5o7SGslhl86pCLrdIANvD6h7F0w9LjmB0V63sxiQB7bCJa2P1 LmTDveOivvP90JbTJYpdjF0zcZKpDRywNVmbxAwIPHXaQW1yyw2uzp/N5+ObEbUG lmPMHWlunZaFNXND3R9t3ywFTxPMOjcErVdZaJtdX2+NFYVX43Yu8k/mhhFwgX57 DR+Ag1CUQh8CS9PIAa/21NfmfpCWiFMCVzdGlXnwP8yRG0jV//heJ13S2URupSKc 5wRY77aBus44cMos9wo3OR4Y9YSD9DratkKOnNu1Acr/zr3MvOpPpMYxAgudRKOg eBrHiYqlrL9spfrwnE02B3wl8WzjfhVuqmKgwK5b2sHmlu8lpO8LW5lVq5Xfac6v SbqAm7rudTLJ9TmhPg/vdcYMiZ2wnZfwe5i1FVdhpsaHgMuawgjQDuH6gpnrWnA+ +PpBefUj/nVXVRetfCDlkyPuAtcCECyZhhx3BaneShmTRYQHl3MFdLFUybkEesJY U1TJ/2Ij31gPmMvctOKLg+nYBqiH2IV8roxPT4jyWiM9oQy3c4w70SO4b9KGSKmS NlidCuAbpH2Ms1sRpjOe9rcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 304599655882916371175356501476369456392865 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-13 11:32:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-11 11:32:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'borgia.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 669648711025627428184558785386613185587637430958957112629452206748627686262825360833528125103516368838300798268620870850046978316820958104257003249143732040621087428105577936984640537464161681638835632677817548598604377119744382966393410405023132751623443896412277448490471178260112022528237180790034680351783298435325171067714682791933800766525183394145831193656871230170280233673658923976429805085809394962785011166741670189801940128704323972266626530223103452786107924645306916231554965680256131738123391362045161659135983658369953217049152763134834035213551416343783440309594848653684201622555434470366484036385992838187380827733990953581654239095692129890496288017292548129748629235800836927337582463718030521761316376907680818368266099035472856035488691279872517660359047163076933323003298953106256605777731005695105056805809573590345201348479111462943082890809200873556123419519007451419516282685210261376341446768040254868144190540800022346967850519265897400924279633316766528954109086504118031345293422579128864883458632155413313800390148076409951785437628653292433580862795428188255964094354029054882395154469590551433469021787851261047005706614649693014693593472823137920483278089544208547446379265231190519489709580678839 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f05d2cd600856098465fefdddd331d6125d7ead5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borgia.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borgia.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008360652046001c564f1fd735c44fd8dd6d9081ffe88303716a13db26a85009fa4eb058a64cac8cc7a977bc7b27c7d7f0420ea3323997c5aea91b2747ba63937916d6afdb36fe8acac261bc51884ecf3722e10b0adbaf9e1957267b853dcc421168c3484fa5f77771c355a1422fd4150b2d4d15e4889e41479c2de18e170ba441136640e66fbefe1a3cb5d0e0d1c8d4c9b419dd11c0e7b59bdf056a150a8e6712cac05aff427de7f66a3ae2bbf260a60571f209fdca3befd3a71a9a0d6e5135acfaece7cdd126764b075d69c59f67f27368fe371dad4d86f5f85d01b833551da86bfb96994cdd1a7acf0a415dda4e72e11d590a81f10b32eecf3e8d5d477a9b41