assisi.co
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ff:f6:6d:80:4e:40:e2:2d:52:63:a3:e9:b4:69:16:06:c8 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=assisi.co
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ff:f6:6d:80:4e:40:e2:2d:52:63:a3:e9:b4:69:16:06:c8Serial Number (int): 348436420009789024139394605934134435382984
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 03:73:7a:21:e2:27:c6:05:ce:2e:50:94:4a:67:f4:26:16:8e:bc:22
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 0d:3a:ae:d4:4b:f9:5e:63:43:70:e9:a0:c9:50:c6:50:c0:92:56:dd
Fingerprint (sha256): 80:42:f4:54:cf:46:e1:f4:35:85:cd:f5:d4:a6:39:5d:fb:a2:4a:fc:7b:d1:28:c3:df:48:b5:3f:71:ca:a6:82
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate assisi.co
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for assisi.co
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
assisi.co
Other certificates including the domain name assisi.co
(limited to 100 certificates)
www.assisi.co
leggingsvalentinesday.com
www.coderi.co
www.refurbishedvacuum.com
www.guitar-strings.net
apponclick.co
www.stauntonrealty.com
www.thecryptobank.co
colonialmexico.com
assisi.co
www.careclinic.co
xrforyou.com
assisi.co
apponclick.co
www.assisi.co
assisi.co
wwwpez.com
autogrill.co
324.me
www.distilled.info
www.assisi.co
gianmario.co
www.scicli.co
www.bii8.com
leggingsvalentinesday.com
www.coderi.co
www.refurbishedvacuum.com
www.guitar-strings.net
apponclick.co
www.stauntonrealty.com
www.thecryptobank.co
colonialmexico.com
assisi.co
www.careclinic.co
xrforyou.com
assisi.co
apponclick.co
www.assisi.co
assisi.co
wwwpez.com
autogrill.co
324.me
www.distilled.info
www.assisi.co
gianmario.co
www.scicli.co
www.bii8.com
Certificate
The complete raw certificate details for assisi.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgISA//2bYBOQOItUmOj6bRpFgbIMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjkwMTAyMDNaFw0x OTEwMjcwMTAyMDNaMBQxEjAQBgNVBAMTCWFzc2lzaS5jbzCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAK1COkB7Zgutft7FqciudD3/Fc6CtMao8UZiukK+ Yd+BvOe6qIXbOG7WeYSnYgolgGO/ti/T4Uo/ScH5onXOmxs+YCH37khGd/BV9dQv 1nvTcuyVk2UZLcyQ3RSwy1gz4Ou1lkj1RwFGLYJP5QP5qjSXg/LYpxZQBcFsOSCa XM3h5mcy7xRdnHXXOC5KrQ9F9DPeDjj1f6bJDo5+fvLX/M3HW/YBQcego9/O2IfK EfQFWkOb7eWBtLZ3mNhzdYYN4D1N4lV7lAEphZQf6PEIzWzCcHFatzENyPT7dahh oMdQ+8T7CaVB35AnYfR9AMCqCAjWpCEvnyLDitGthAYcs7gGMtHd2lOaU2CmjKFg VSKNfOF/Af+Uey5NiUCGCogMJqzHZBS/jFeOtHS/WX3j+EZbojjYwQ0FAeyaBwyo 9hq7Ykvel8kqf7kWUY28IsDzH5JDmVORRX9TcH07CxgMTXSbQn/cbtHxsMKqmF/n N/6wYnxhzSJqJj7wpEGNapq0iligyJGPm21kKg8PDHsC0Rrb/oYTpqmqkyu/mxZg TmpiZxYrMlY5XSlOElg9UBtnZmEVD7OdxGDX70YZpZlDWMjxv7SNJensQL3beco/ 4SHdVp6YJCXVdfWKRc6G0GLzNzr+Aapl6S284FZbU+s+eqwnInYJ2ECr+EEQn6OP fJtXAgMBAAGjggJfMIICWzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFANzeiHiJ8YF zi5QlEpn9CYWjrwiMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJYXNzaXNpLmNvMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAY/Lb zeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL2I0AAAFsO3aYpgAABAMASDBGAiEA gQIxoHwmj1EGzg/PIc0cXzgzBFTCWZPZNvZZqmxHiN0CIQCeAw4311KKLoJQES4e juksZMOkAdKse1g6jfpCjATNUQB2AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1 eeYQe8xWAAABbDt2mn4AAAQDAEcwRQIhAL+5bulpPA3PvX2XQit2ZLZN11eDFs68 meAq5xcbpCcpAiA7+9voeOmWF404R7dPM3jBJpwqlipzzXMgQt5kaN/HijANBgkq hkiG9w0BAQsFAAOCAQEATNJKsDiN2BWWQ6myaKILsz0QFduD8MI/dzIcFPkT2eQh +11zl1eDNdVAd5e0fg4a9sYGCMd3KEwOhW4tMrsq1kyppqMgLlkOQ7LyBOQ6XmtA xN2LWxdX1QfaJFlYV2sfd5xbWO7Ay8PnTH+aPvxIHk2vaQu7xooMUKMXx2PekC0y eU0ord+QsoCiC5ebDY5ZaHBPUFtLg3I8L5gxQ6AuI9ttVvCWgTbNI2wtWMayS4wK qoPdxQFpv86eC6HIQG+J+IZHNi4rHLu8LsmEutDE1mYuXHfl+dLp26bm9oq6Sve7 sdtrDlz4VjArb4cEVlB2gKnTwoj+bdNGu4yuDreLwQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArUI6QHtmC61+3sWpyK50 Pf8VzoK0xqjxRmK6Qr5h34G857qohds4btZ5hKdiCiWAY7+2L9PhSj9Jwfmidc6b Gz5gIffuSEZ38FX11C/We9Ny7JWTZRktzJDdFLDLWDPg67WWSPVHAUYtgk/lA/mq NJeD8tinFlAFwWw5IJpczeHmZzLvFF2cddc4LkqtD0X0M94OOPV/pskOjn5+8tf8 zcdb9gFBx6Cj387Yh8oR9AVaQ5vt5YG0tneY2HN1hg3gPU3iVXuUASmFlB/o8QjN bMJwcVq3MQ3I9Pt1qGGgx1D7xPsJpUHfkCdh9H0AwKoICNakIS+fIsOK0a2EBhyz uAYy0d3aU5pTYKaMoWBVIo184X8B/5R7Lk2JQIYKiAwmrMdkFL+MV460dL9ZfeP4 RluiONjBDQUB7JoHDKj2GrtiS96XySp/uRZRjbwiwPMfkkOZU5FFf1NwfTsLGAxN dJtCf9xu0fGwwqqYX+c3/rBifGHNImomPvCkQY1qmrSKWKDIkY+bbWQqDw8MewLR Gtv+hhOmqaqTK7+bFmBOamJnFisyVjldKU4SWD1QG2dmYRUPs53EYNfvRhmlmUNY yPG/tI0l6exAvdt5yj/hId1WnpgkJdV19YpFzobQYvM3Ov4BqmXpLbzgVltT6z56 rCcidgnYQKv4QRCfo498m1cCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 348436420009789024139394605934134435382984 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-29 01:02:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-27 01:02:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assisi.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 706833833208428117834808828483759100330405876062148803929075149307907346475620114410184336655481442426861056341250804830805376199710285624786806668628818742196744537980837089826142988152192140805311994909553724647775239537864569600957357402176211777441177557607951259433264561285994568651244396483642753552792782296432751946310924024085492852871992589280032471142146884599833152327411033077905558212231346509201458120484217454974928998803696514545687770300090622012534601320360236841470456362077212341690118239886152212763428739471075865089820414096306775588817233566091849930600195473964604365283057955473021114064987854655768114298320500838231427352154932073732539510309585290348601939426677002480427003372444559926885348643120167309994770098431120512652557254188611062385837956317591134067589492338740295145731733426108991729551993707292217628159912371526370017201831990363546803081570860850564027757673779418508503966169715893539049529639586995922527300843103237487093463862405181568415937781286619095250056442608335855163877885624640893244681329839826259938834183053662896051916527364048619279998643148438387240304262274042008287552155421540001758464763977744637429833212418036381210681421239486355857674904798042606197291129687 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 03737a21e227c605ce2e50944a67f426168ebc22 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assisi.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3b7698a60000040300483046022100810231a07c268f5106ce0fcf21cd1c5f38330454c25993d936f659aa6c4788dd0221009e030e37d7528a2e8250112e1e8ee92c64c3a401d2ac7b583a8dfa428c04cd51007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3b769a7e0000040300473045022100bfb96ee9693c0dcfbd7d97422b7664b64dd7578316cebc99e02ae7171ba4272902203bfbdbe878e996178d3847b74f3378c1269c2a962a73cd732042de6468dfc78a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004cd24ab0388dd8159643a9b268a20bb33d1015db83f0c23f77321c14f913d9e421fb5d7397578335d5407797b47e0e1af6c60608c777284c0e856e2d32bb2ad64ca9a6a3202e590e43b2f204e43a5e6b40c4dd8b5b1757d507da245958576b1f779c5b58eec0cbc3e74c7f9a3efc481e4daf690bbbc68a0c50a317c763de902d32794d28addf90b280a20b979b0d8e5968704f505b4b83723c2f983143a02e23db6d56f0968136cd236c2d58c6b24b8c0aaa83ddc50169bfce9e0ba1c8406f89f88647362e2b1cbbbc2ec984bad0c4d6662e5c77e5f9d2e9dba6e6f68aba4af7bbb1db6b0e5cf856302b6f870456507680a9d3c288fe6dd346bb8cae0eb78bc1