www.planair.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:bc:f0:58:10:6f:08:3a:8d:30:e2:d1:c9:b9:42:ab:c6:dd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.planair.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bc:f0:58:10:6f:08:3a:8d:30:e2:d1:c9:b9:42:ab:c6:dd
Serial Number (int): 412741700682604774953979887117006919157469
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e6:02:c0:fc:74:84:e7:77:a8:24:fe:66:8d:5e:11:f3:16:6f:d9:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a6:d5:57:52:a4:0c:c3:bb:a8:70:05:ea:19:e8:13:77:67:69:d2:44
Fingerprint (sha256): 7b:dc:80:03:ca:cb:6c:13:9b:cf:5e:0c:52:49:f6:f6:5b:34:58:16:bd:69:8e:7c:4e:27:b0:3d:3d:d8:24:17

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.planair.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.planair.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.planair.ch

Other certificates including the domain name planair.ch

(limited to 100 certificates)
www.planair.ch
www.planair.ch
planair.ch
owncloud.planair.ch
www.planair.ch
www.planair.ch
www.planair.ch
www.planair.ch
*.planair.ch
www.planair.ch
www.planair.ch
www.planair.ch
planair.ch
www.planair.ch
www.planair.ch
planair.ch
www.planair.ch
www.planair.ch
www.planair.ch
www.planair.ch
www.planair.ch
www.planair.ch
www.planair.ch
www.planair.ch
www.planair.ch
www.planair.ch
www.planair.ch
www.planair.ch
planair.ch

Certificate

The complete raw certificate details for www.planair.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHBzCCBe+gAwIBAgISBLzwWBBvCDqNMOLRyblCq8bdMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MDUwMjI1MTNaFw0x
ODEyMDQwMjI1MTNaMBkxFzAVBgNVBAMTDnd3dy5wbGFuYWlyLmNoMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvUmI1cTh0t65SwuUBrybaMzMGEofEKqw
qVdKGBSDLnvcj6fObKzibEUv1peGOdoCy0e9e8YAmnlZhAWMrEE68H1PZ6yt8x97
0Vb3sfJt0KV9pyknmEveiWKuAR0+P9TDtEHgtKfAP9ff1kW79SG6EH9X2JoF3lvq
2WE9tZu60EJMy8sfLe+SqdA3FuEClR0GBkewhHPr4ByE5gqjs6B/YIyRNqqazR5X
xay3ssdMARS7Gr8/1SjO8uxVpn/90rL/StI4d0aOfcX/AorXMG6xv8TRpjtkzQWT
99BmO/71YBUkaC0WwpboZ05A8N8tMn+8aZ6BzLkH6nVOVafFDUvcvAv/1nYDwBJ1
gvEJNRPuKSKh9/eDkAGz/wwLcO6iIaKSta2yFvyaM5Fvx7ZwOMSw3/qr04dCxH2Z
cEIsaXGEOVS53J3cWcZNQZJXrGgNMUT8+wBmMeZG3JQ7gjkr9HFNc3KaYqw0j7kx
8I9wrXmkH4/WgNe8/RDUaefnFRwu+fV7WyQ35l61yFgKqhucLwkGw0AbKd2uUZfB
4Ep0jGkRqrQLKUwIioDyZpEfBcUZbJjINXU5eO/sUm3Kc+KtBaWNLbFkFcKV4mfw
PZ0/jYVjaVvlZD4m0VLiss14hABNaFycXaC3L6mMZkGdH4eR9lMwevvQDrkFyi5E
fbH+HYTkvGsCAwEAAaOCAxYwggMSMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU5gLA
/HSE53eoJP5mjV4R8xZv2bgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg53d3cucGxhbmFpci5jaDCB
/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYB
BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCB
ngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkg
UmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUg
Q2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQu
b3JnL3JlcG9zaXRvcnkvMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAwRZK4Kdy
0tQ5LcgKwQdw1PDEm96ZGkhAwfoHUWT2M2AAAAFlp8M5FgAABAMARzBFAiEA2e33
1OUzIaIKXupn4Te5vEezSeLeB2f2uuVxEb3pEpkCIFOnAb+YcqRVnQOG7X/rAqc9
aWddsTqFU6k5HrHv7S/SAHYApFASaQVaFVReYhGrN7wQP2KuVXakXksXFEU+GyIQ
aiUAAAFlp8M5CgAABAMARzBFAiEA19Vtr5AxcnML6woBIQz+JOqk28fgsmp9EFIT
6rZkm2ACIECFzwUsIKk6tsqob3Z7HownskGNFBowXSj1MejDOo5aMA0GCSqGSIb3
DQEBCwUAA4IBAQA8aov8//oXuSdcMpqJ99MDhmCcwkuRFklvV3JKLcm6mwukFwte
hH8Cp6oMc4NEDAVrtoFMdjzFvXRwI/sWEiELtjClUSvm1QBN3gQHIkL6lajTUQix
yuF8YkOv7WsQ/eoEK9LM5g03DlqGgXGoDIR5hCnsjA03t0x0uscAxwEv7YukLLnj
Ah+XUmsgm6g7PFXcfwnQlMZj2grzgJ3VRsdVGKY/n3uDHFa+SRSVG5uONiePv9zW
PLMGwSDgWUpRKZjiyWm59kKp/mWnIwoPqI37EokhSGfW+V2dHb2lEE3A4Yz02mTy
qmUST8qxlQ+g/EcrfQxeGoR7hd0BK0pY57gs
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 412741700682604774953979887117006919157469
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-05 02:25:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-04 02:25:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.planair.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 772224582899135311223456695767502512265654093816862326411848387052461056346979852383294825354143003988721955195149323019526528873157124420426748228352931203253195174458428796117164907441836965421780727109621215683299157049422108256250708210000307411958420337657493612906725806406782389041944618932051175581739524031178676381734708561870432860717826624087123674363919809995688304499424249111537622135428347567436993147437670232695263542504689171278782941068169380738829839123735332476937261929387992952207306444941043869803029440655901602547681370627541757068165995787685601845665136772142031329735686791620219728252422468525524594434767901059019346020842438826136700591610338602430651238398298640489431273559874825679216711790462567236273390840345198222673845376651517392858971213237037930031301940630497259884818102866246588482321369577816157942552710403407413606504855023694279918284280530471016145537389994920741857133864267138266176889858161276882299819015324768123837921933297000421991526312767663560620916636389760005375367479827323685950904497005084815010628937897618946804554312605828662477456381256209739844759302852108823024195702015240381484711025447134363198164157351980001171534521159194177657970177181241585362933169259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e602c0fc7484e777a824fe668d5e11f3166fd9b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planair.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000165a7c339160000040300473045022100d9edf7d4e53321a20a5eea67e137b9bc47b349e2de0767f6bae57111bde91299022053a701bf9872a4559d0386ed7feb02a73d69675db13a8553a9391eb1efed2fd2007600a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a2500000165a7c3390a0000040300473045022100d7d56daf903172730beb0a01210cfe24eaa4dbc7e0b26a7d105213eab6649b6002204085cf052c20a93ab6caa86f767b1e8c27b2418d141a305d28f531e8c33a8e5a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003c6a8bfcfffa17b9275c329a89f7d30386609cc24b9116496f57724a2dc9ba9b0ba4170b5e847f02a7aa0c7383440c056bb6814c763cc5bd747023fb1612210bb630a5512be6d5004dde04072242fa95a8d35108b1cae17c6243afed6b10fdea042bd2cce60d370e5a868171a80c84798429ec8c0d37b74c74bac700c7012fed8ba42cb9e3021f97526b209ba83b3c55dc7f09d094c663da0af3809dd546c75518a63f9f7b831c56be4914951b9b8e36278fbfdcd63cb306c120e0594a512998e2c969b9f642a9fe65a7230a0fa88dfb1289214867d6f95d9d1dbda5104dc0e18cf4da64f2aa65124fcab1950fa0fc472b7d0c5e1a847b85dd012b4a58e7b82c