lgpdhtb.nuvemx.com.br

Issued by R3

About this certificate

This digital certificate with serial number 04:54:6c:83:c6:7d:72:1c:0e:7b:9a:86:0a:ad:30:0a:0f:4d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lgpdhtb.nuvemx.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:54:6c:83:c6:7d:72:1c:0e:7b:9a:86:0a:ad:30:0a:0f:4d
Serial Number (int): 377177103388688993540861597260237828132685
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7f:eb:1d:b9:05:20:64:a0:af:f3:61:49:9b:f1:dc:88:d6:53:ea:f6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b8:f2:b7:c2:e2:d8:e4:00:f5:ff:42:07:42:bc:51:92:14:59:d0:f6
Fingerprint (sha256): 76:ae:a0:d4:64:a9:b7:3f:fe:0a:0d:a8:0b:fa:c3:48:e9:9d:13:f8:f1:51:74:dc:86:55:c5:eb:32:e2:d2:1c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate lgpdhtb.nuvemx.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lgpdhtb.nuvemx.com.br

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lgpdhtb.nuvemx.com.br
portallgpd.htb.eng.br

Other certificates including the domain name nuvemx.com.br

(limited to 100 certificates)
lgpdavonale.nuvemx.com.br
lgpd.mmcorporatelaw.com.br
businessgenesis.nuvemx.com.br
grcdemo.nuvemx.com.br
lgpddata.nuvemx.com.br
everest.nuvemx.com.br
lgpdalbertsabin.nuvemx.com.br
lgpdtotvsux.nuvemx.com.br
lgpdconceicaorioverde.nuvemx.com.br
lgpddemoux.nuvemx.com.br
lgpdpostopresidente.com.br
lgpdpmi.nuvemx.com.br
portallgpd.lojasmm.com.br
lgpdmutua.nuvemx.com.br
lgpdteste0715.nuvemx.com.br
portallgpd.stoccheforbes.com.br
vivver.nuvemx.com.br
businessnec.nuvemx.com.br
santacruz.nuvemx.com.br
lgpdunipam.nuvemx.com.br
lgpditauna.nuvemx.com.br
lgpdcoqueiral.nuvemx.com.br
lgpdband.nuvemx.com.br
lgpdmpevazia.nuvemx.com.br
lgpdbelago.nuvemx.com.br
lgpdsinprosp.nuvemx.com.br
lgpdsonda.nuvemx.com.br
lgpdsuporteemx.nuvemx.com.br
lgpddediccar.nuvemx.com.br
businessembol.nuvemx.com.br
cedro.nuvemx.com.br
lgpdbasicdebleison.nuvemx.com.br
grcvazia.nuvemx.com.br
portallgpd.bbmlogistica.com.br
portallgpd.tppf.com.br
portallgpd.defensoria.pe.def.br
lgpdmpeparceirovazia.nuvemx.com.br
portallgpd.rfconsultores.com.br
lgpdhtb.nuvemx.com.br
lgpdabr.nuvemx.com.br
cs.minhaitatiaia.com.br
portallgpd.taua.com.br
lgpdpmi.nuvemx.com.br
precavida.nuvemx.com.br
csc.pluro.com.br
portallgpd.fibracem.com
lgpdtotvs.nuvemx.com.br
lgpdtvanhanguera.nuvemx.com.br
lgpdexcellence.nuvemx.com.br
lgpdquintera.nuvemx.com.br
portallgpd.defensoria.pe.def.br
grupocataratas.nuvemx.com.br
ouvire.nuvemx.com.br
lgpdcobasi.nuvemx.com.br
lgpdteste0823.nuvemx.com.br
lgpdpoclgpd.nuvemx.com.br
lgpd.gndconstrucoes.com.br
portallgpdraf.com.br
ingra.nuvemx.com.br
aprs.nuvemx.com.br
lgpdiosr.nuvemx.com.br
lgpdcarglass.nuvemx.com.br
portallgpd.pitchonimoveis.com.br
lgpdagricolaalvorada.nuvemx.com.br
pjus.nuvemx.com.br
nexusliga.nuvemx.com.br
faj.nuvemx.com.br
lgpdkinoplex.nuvemx.com.br
lgpdembol.nuvemx.com.br
lgpdclm.nuvemx.com.br
lgpdbreitener.nuvemx.com.br
alianca.nuvemx.com.br
grchect.nuvemx.com.br
grcnowcy.nuvemx.com.br
lgpdgloboaves.nuvemx.com.br
lgpddpmg.nuvemx.com.br
sd.nuvemx.com.br
lgpddemo.nuvemx.com.br
lgpdmatterhorn.nuvemx.com.br
portallgpd.emxtecnologia.com.br

Certificate

The complete raw certificate details for lgpdhtb.nuvemx.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgISBFRsg8Z9chwOe5qGCq0wCg9NMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MDMxMjU3MDVaFw0yNDA3MDIxMjU3MDRaMCAxHjAcBgNVBAMT
FWxncGRodGIubnV2ZW14LmNvbS5icjCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCC
AYoCggGBALNZNwQSs1eJ147zubKf6QwUbP8BTUKGeD3tT4wt/bQS8nDGtTToFgLh
6tAcgZP4/UQ4WMZtwrT7p62Ca1RGpzNrkbi/MsPwBSSqH0/DwMuEQpWHAg6F740N
LwoOxw4JmjrxtGXdbBsohAlcLQ1EGAN7PX5d/FC+3EHmgOFOUfl6E+A/QNThqS6D
2qqmOP5ZIFpnmSk8+YhrJTKoZ6Imk1XosOpL5my7wBwoRcn4Pvpha+jZySfGdX1H
H1gG0DHQJXoF6lW4DvDCsaAMKKSFJvVwmKxd+FUfomDDiR1OHfNJY/kRURyfHHmp
qvyX43YRvgiRxkRlBiuHgSaOw8turf1rdQh1NBGCsf6UHjXGOeNrGMDfGNCyqeYA
3FaQlsM7LIk/2ui+h+jfDkq7PsS9DMEUgCA7RmeqB/DKIAuQBK4JvpWDZT0guNb6
iAEo73I8H0G8F2QLSzElaPK8uV68rTq46Lr4kl+kWihzvVmCweFku77LoyiGdDys
QsuAm6YMHwIDAQABo4ICLjCCAiowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR/6x25
BSBkoK/zYUmb8dyI1lPq9jAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTC
xjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNy
Lm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzA3BgNVHREE
MDAughVsZ3BkaHRiLm51dmVteC5jb20uYnKCFXBvcnRhbGxncGQuaHRiLmVuZy5i
cjATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2
AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjqQ/xJEAAAQDAEcw
RQIgFO9VZWZD/0NG1eEXmbCP5zaawTDQncbW135doLq5z+MCIQCo3Zbg4fr1AT12
OWf7f5RqjwofSBDtRYeyOZuQ/nuaQwB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0s
gdm7v6s52IRzAAABjqQ/xIgAAAQDAEcwRQIhAKPFIIcgDAGoOZxrbOzC2tZLa2sd
t2vW/zl86TCq8dMeAiAV7C9hE6s3+ud3w+sLL0E6ou3CqFW2011XGeWGKeLsyTAN
BgkqhkiG9w0BAQsFAAOCAQEAEu2/Fs6m0I5KnpEDBah2vY/3rsDrJH2bzIanJ0t8
SwLOFLV9ooLZNU+RNUPC3QQGYq8eFjpPnZe08VUaJL62DOuGGdoKUgI91BcCIBHl
5i9gpPp27+UBlWG1OGuabpbgxX5c8NdzJmVwGLzWrdgpb1oIwxwx34i5uCr3FMoT
xBDGkqC6avSDIF4a+Aljp7JjRdmC85Twvgr25aydXtQW80YyTSeO2lOJRTC5/JJb
ib5iqYdhYBeJYcgkAcLI7ebRAySOVEOWCaKMrt7yNYorxVLJ2kWeRwKL7pxnxd01
BP6RwA992bOVAwvThRcwC3P4aeQPzAsi3s+V0giFjIh1jg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377177103388688993540861597260237828132685
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 12:57:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 12:57:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lgpdhtb.nuvemx.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4070094125122448435497722340686064704499756295513743347628314364518023541339075058213270161629737568840180605547493746338490146564601276850994564240375951918787589844743671187715229614300193791492695265197968547990241232530852083064324694745593448801177517463197933893421442198000863293591059397505060222958447952120328168930724914878565643089782897128078987875887549860304704253486267419184360329029541342150069079256000307041506944864863892615701139149026238219670594856347563997070309251271761919760194153813297305284685210339932294518554032605338504163689072281361315772151772462995041210601623621969975882589881474697526674972453286615339919518564483466582213633972637279501932449492465176709019532587061434457153843880448675310884632361915019453330377905834888037519757465739021426842713640891997608862762622301033843064233685008613673662372740429899899501952024717967585321760386926101131874958384756183790270768614431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7feb1db9052064a0aff361499bf1dc88d653eaf6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgpdhtb.nuvemx.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portallgpd.htb.eng.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ea43fc4910000040300473045022014ef55656643ff4346d5e11799b08fe7369ac130d09dc6d6d77e5da0bab9cfe3022100a8dd96e0e1faf5013d763967fb7f946a8f0a1f4810ed4587b2399b90fe7b9a4300760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ea43fc4880000040300473045022100a3c52087200c01a8399c6b6cecc2dad64b6b6b1db76bd6ff397ce930aaf1d31e022015ec2f6113ab37fae777c3eb0b2f413aa2edc2a855b6d35d5719e58629e2ecc9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0012edbf16cea6d08e4a9e910305a876bd8ff7aec0eb247d9bcc86a7274b7c4b02ce14b57da282d9354f913543c2dd040662af1e163a4f9d97b4f1551a24beb60ceb8619da0a52023dd417022011e5e62f60a4fa76efe5019561b5386b9a6e96e0c57e5cf0d77326657018bcd6add8296f5a08c31c31df88b9b82af714ca13c410c692a0ba6af483205e1af80963a7b26345d982f394f0be0af6e5ac9d5ed416f346324d278eda53894530b9fc925b89be62a9876160178961c82401c2c8ede6d103248e54439609a28caedef2358a2bc552c9da459e47028bee9c67c5dd3504fe91c00f7dd9b395030bd38517300b73f869e40fcc0b22decf95d208858c88758e