www.abako.se

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:87:4e:0b:8a:84:d8:35:9a:5e:38:c3:68:94:1e:27:0c:4e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.abako.se

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:87:4e:0b:8a:84:d8:35:9a:5e:38:c3:68:94:1e:27:0c:4e
Serial Number (int): 307378717038041656148603465007033487920206
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ce:fc:9d:24:6e:68:d8:14:71:7c:29:fa:83:82:a2:29:02:e6:39:20
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4e:d0:d5:8c:58:b4:cd:b7:7c:3d:d2:2d:a2:b1:d6:66:49:fd:1c:65
Fingerprint (sha256): 7e:7f:0f:ba:9c:da:78:88:c0:31:93:a3:f6:a4:e5:e4:59:45:d2:b4:af:4d:6a:88:f9:48:d7:4c:11:36:27:a9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.abako.se

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.abako.se

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abako.se
www.abako.se

Other certificates including the domain name abako.se

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.abako.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgISA4dOC4qE2DWaXjjDaJQeJwxOMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjYwODU3MjdaFw0y
MDAxMjQwODU3MjdaMBcxFTATBgNVBAMTDHd3dy5hYmFrby5zZTCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBAK+/5hEop/sVcKK/jhTrin42gCoKGrBUjYQ/
sP+hQqj87IYIUEkKgGmwXWPLSuaa1r+vJQ7qDmJeAJh2K8W7b87HYM1gYJ6wKQo1
VkOxKRw4YJUrsz0TgKt8FXw9StHVxtvYBkRElvC/LYyNBRBn423POHqiQUTa5cM8
Ggf9X4Iy/p7mTPeWW6HIaLLUnj/V0IZXY/SsT8HAF8VCyc1juK0L7t5EBBfGjcUk
I7eEMvBsN4PAOJVLGPU9wkw9M5GPlmc1zRTZ3eT5peyMUUBmWvZ0NJmS0JGQyD/k
GjAZrvBhTVQ+lAyhtrDzXrF1gtmE7UFWPJaEzo7QUvYgV4BMcVHY2lazE6H3Tk3W
W2srFJew74DWxQxF0HSZ5HHT7qSlRvebSLSBPduFq2Jw929c5SbN/DO+1ripYe1H
9Q+rex8xlY6n8cLvmKt9Pq6CsXAJ5GOA0ZbpXJbQMPuNP84bw9a339sXH0PX9TD4
reWMwqzLBCnzfyXUEsUX+DQRMRh7mmcBpAfa2Vv8wQT8cjFTQsVEsm2setcVDKTX
668WK9zR9AVjtQzpenD68p1uzFZ5M4fq4wg/6at8aB4ARaaKVDOhBLNY+5QUyNjg
0DVFsYZGBlxxxe4qhB28bBdsiojQu9GHmJrC9Kg1h+wGp8dvJCkacLC7axPgIRxV
4wIzRrZfAgMBAAGjggJrMIICZzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFM78nSRu
aNgUcXwp+oOCoikC5jkgMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wIQYDVR0RBBowGIIIYWJha28uc2WCDHd3dy5hYmFr
by5zZTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkC
BAIEgfUEgfIA8AB2APCVpFnyANGCQBAtL5OIjq1L/h1H45nh0DSmsKiqjrJzAAAB
bgd/0KgAAAQDAEcwRQIgJvgLnHsY6huPmHRIOcHuSe6RutlZSCkVsysP6ELUBpgC
IQCXfDhkCtsPd7Vf/RORjnMrkIj07Y5oJX/NslEFrigpPAB2ALIeBcyLos2KIE6H
ZvkruYolIGdr2vpw57JJUy3vi5BeAAABbgd/0JgAAAQDAEcwRQIhAML5J9x6tuLH
SXnHvcwt03X0iga7ga6hVFCUqgbVCtaTAiArDBQMCtx34tO1Ie1pcUUjuFIU9/4v
oztIdclyCKWKvDANBgkqhkiG9w0BAQsFAAOCAQEAnAJCFjOZBXZRa+uxwrtVkZZL
HmPKl9QbWPlbQVKgIbeg+rIhmTBtYFPIbQriifjhkKHk0OSfAnnQHvbP4YmNDMb6
+l++y6nk/VDwRPyOWtETgrrOlycw7nLGNiBsHVzGB9gKD6D8pCoDy9Z4hfyRW110
ql+x62or79v6z5eCjKtQlD3RXWYe/u8K/D0N9YVcsgBCJLp3Mj5VHZ0dPSsWXHx9
j/9ObxaUDIt8yAeqq2IZlho73v2vItnsvK032F/MDdb3xwN8o5/OKc7DWx81AVvJ
ivjpx6sglOr2NGY33GrYjYpref1PiqXNCKX3BzAEkpb8zPD4tT6r1l5uj0LGhA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr7/mESin+xVwor+OFOuK
fjaAKgoasFSNhD+w/6FCqPzshghQSQqAabBdY8tK5prWv68lDuoOYl4AmHYrxbtv
zsdgzWBgnrApCjVWQ7EpHDhglSuzPROAq3wVfD1K0dXG29gGRESW8L8tjI0FEGfj
bc84eqJBRNrlwzwaB/1fgjL+nuZM95ZbochostSeP9XQhldj9KxPwcAXxULJzWO4
rQvu3kQEF8aNxSQjt4Qy8Gw3g8A4lUsY9T3CTD0zkY+WZzXNFNnd5Pml7IxRQGZa
9nQ0mZLQkZDIP+QaMBmu8GFNVD6UDKG2sPNesXWC2YTtQVY8loTOjtBS9iBXgExx
UdjaVrMTofdOTdZbaysUl7DvgNbFDEXQdJnkcdPupKVG95tItIE924WrYnD3b1zl
Js38M77WuKlh7Uf1D6t7HzGVjqfxwu+Yq30+roKxcAnkY4DRlulcltAw+40/zhvD
1rff2xcfQ9f1MPit5YzCrMsEKfN/JdQSxRf4NBExGHuaZwGkB9rZW/zBBPxyMVNC
xUSybax61xUMpNfrrxYr3NH0BWO1DOl6cPrynW7MVnkzh+rjCD/pq3xoHgBFpopU
M6EEs1j7lBTI2ODQNUWxhkYGXHHF7iqEHbxsF2yKiNC70YeYmsL0qDWH7Aanx28k
KRpwsLtrE+AhHFXjAjNGtl8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307378717038041656148603465007033487920206
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 08:57:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-24 08:57:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.abako.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 716995830615837360456500343868635550751053632140939931031052098046332508869441551636905607261489798812717400384387170039957771951573582591224983451366285216482815281914087820951790498928423814020530956384791167665653941684280958350192662257449025786822516532250609710024327574323809371485683644238155661794907061122487806677326539863577109330870033349268403333634200621515851710665404555970627051318688851252242223005244245231468444370793225197670780607197039425441960740435269002617885016092180138403646163433968314183495191479664943358991331366792796793626668394306680919611893709365104408829421407990989474341252800754750433968934609925309750302542809607570729466518196417286028246817636186344964777785958249774350073687878523629531734986974964933343889711414770486268965125846511044713458560385437004470749322210233380687545222019319545797837667658691526827901897297934315302365251905503317498446984225109510113762987238539417848456429590773872996908202888634892456133448558851739387327840638533919308003252085967248388773259443053200921245239441855212862180600434207764784834404619071352681365512545301845367824860466261130721554841127902806454600624234892124426602246130079235446628034194109593191923026336827215603740541630047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cefc9d246e68d814717c29fa8382a22902e63920
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abako.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abako.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e077fd0a80000040300473045022026f80b9c7b18ea1b8f98744839c1ee49ee91bad959482915b32b0fe842d40698022100977c38640adb0f77b55ffd13918e732b9088f4ed8e68257fcdb25105ae28293c007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e077fd0980000040300473045022100c2f927dc7ab6e2c74979c7bdcc2dd375f48a06bb81aea1545094aa06d50ad69302202b0c140c0adc77e2d3b521ed69714523b85214f7fe2fa33b4875c97208a58abc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009c02421633990576516bebb1c2bb5591964b1e63ca97d41b58f95b4152a021b7a0fab22199306d6053c86d0ae289f8e190a1e4d0e49f0279d01ef6cfe1898d0cc6fafa5fbecba9e4fd50f044fc8e5ad11382bace972730ee72c636206c1d5cc607d80a0fa0fca42a03cbd67885fc915b5d74aa5fb1eb6a2befdbfacf97828cab50943dd15d661efeef0afc3d0df5855cb2004224ba77323e551d9d1d3d2b165c7c7d8fff4e6f16940c8b7cc807aaab6219961a3bdefdaf22d9ecbcad37d85fcc0dd6f7c7037ca39fce29cec35b1f35015bc98af8e9c7ab2094eaf6346637dc6ad88d8a6b79fd4f8aa5cd08a5f70730049296fcccf0f8b53eabd65e6e8f42c684