ess.ldcsb.ca

- London District Catholic School Board -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number f0:ec:29:b9:2a:4f:5f:d9:00:00:00:00:50:ec:3f:e4 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

London District Catholic School Board

Organization: London District Catholic School Board
State / Province: Ontario
Locality: London
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f0:ec:29:b9:2a:4f:5f:d9:00:00:00:00:50:ec:3f:e4
Serial Number (int): 320240947296092171854642113447780433892
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3a:af:22:fb:db:ef:ff:05:36:d8:87:ee:a2:04:c9:7e:dc:0e:7d:cc
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): ab:19:fd:38:79:9b:f2:d7:9a:16:4e:f2:5b:02:55:ff:e8:fb:85:d5
Fingerprint (sha256): 80:b0:07:e5:e4:77:fd:51:ce:69:61:31:0f:bc:1a:1b:0e:81:cf:bf:69:e8:23:f7:65:d7:cf:99:44:00:c2:b0

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ess.ldcsb.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ess.ldcsb.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ess.ldcsb.ca
www.ess.ldcsb.ca

Other certificates including the domain name ldcsb.ca

(limited to 100 certificates)
manage.ldcsb.ca
dam.ldcsb.ca
ecm.ldcsb.ca
admin.athletics.godleyisd.net
ldcsb.ca
dam.ldcsb.ca
*.ldcsb.ca
admin.blandfordschool.org
dam.ldcsb.ca
smh.ldcsb.ca
fhclergue.adsb.on.ca
mil.ldcsb.ca
3rcs.org
admin.athletics.godleyisd.net
ldcsb.ca
admin.ccscyclones.com
rmc.ldcsb.ca
rmc.ldcsb.ca
sprp.ldcsb.ca
one.ldcsb.ca
www.ldcsb.ca
mrk.ldcsb.ca
occomets.org
admin.ahs.ausd.net
admin.highschool.bfcsd.org
admin.ahs.ausd.net
3rcs.org
ros.ldcsb.ca
www.everettpublicschools.org
pal.ldcsb.ca
asu.ldcsb.ca
cfll.ldcsb.ca
rmc.ldcsb.ca
sjh.ldcsb.ca
pll.ldcsb.ca
ldcsb.ca
sip.mt07.connector.think365.com
ess.ldcsb.ca
ann.ldcsb.ca
admin.ahs.ausd.net
pll.ldcsb.ca
sip.mt07.connector.think365.com
piu.ldcsb.ca
ldcsb.ca
geo.ldcsb.ca
imm.ldcsb.ca
admin.athletics.godleyisd.net
geo.ldcsb.ca
www.asd.k12.pa.us
admin.blandfordschool.org
cfll.ldcsb.ca
jp2.ldcsb.ca
ps25.jcboe.org
ros.ldcsb.ca
mrg.ldcsb.ca
admin.nyos.org
ecm.ldcsb.ca
fa.ausd.net
ldcsb.ca
mor.ldcsb.ca
jti.ldcsb.ca
sip.mt07.connector.think365.com
nic.ldcsb.ca
sab.ldcsb.ca
admin.ahs.ausd.net
mts.ldcsb.ca
*.ldcsb.ca
ess.ldcsb.ca
admin.athletics.godleyisd.net
mwl.ldcsb.ca
ann.ldcsb.ca
ps26.jcboe.org
ldcsb.ca
cfll.ldcsb.ca
ldcsb.ca
mwl.ldcsb.ca
sprp.ldcsb.ca
auroraweb.ldcsb.ca
fal.ldcsb.ca
admin.ahs.ausd.net
mts.ldcsb.ca
geo.ldcsb.ca
vin.ldcsb.ca
sta.ldcsb.ca
sip.mt07.connector.think365.com
van.ldcsb.ca
admin.adams.everettpublicschools.org
admin.ccscyclones.com
smh.ldcsb.ca
ant.ldcsb.ca
sunsystems.ldcsb.ca
nic.ldcsb.ca
pac.ldcsb.ca
mrt.ldcsb.ca
seb.ldcsb.ca
asu.ldcsb.ca
manage.ldcsb.ca
miw.ldcsb.ca
ess.ldcsb.ca
paw.ldcsb.ca

Certificate

The complete raw certificate details for ess.ldcsb.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXZ/5jVrMbAg9q2ewdPo
8pjHkMjR3TxY9jaVSAgpEXUM/w2aABFq3iywhLY+J/8QBSeIDhP8dJZNfNBhDvdG
MQ2M18SZcVp+P95jEVPPFNGUqQfwBrOUcsDKEjGcO2/uK+M5cxGD+DGiiPzlKzH2
QQ18bywY0Dq0bljFd5ZXwMG272HWG9MaW6Pl5//I10WJGbYe7anqPDlJJNzrL87x
W7X9cjrW17xHx/cXGt4daIOk7p3zwmXkVbL+xiVonZiBrGgK/J5Jm5ulrM5BWaVx
+W81ob6Fm4lgUwf/8iRsv0Q1cJHPHDTeyhRjms9CTpGFezWW+kPnBNOb4eMjdrMH
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320240947296092171854642113447780433892
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-16 19:38:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-15 20:08:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London District Catholic School Board'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ess.ldcsb.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25937286851862665616478930963729150434411662104682724466094097023890474282888462919053095197114330213731014257017509064313999654812237374255509218924890328540535409924439918030370305957208988099843194106676994160802700156280526780507488775252403900210101219481503212722129960734889384941729461192813426600199061267912452075686009362017888638725614073701277955831696357222376658467861475963942395832099588128035389319120608503959196519568912458577830733923247912580953816768657435385434212648015453769440900747031463741922785354457270141729109132111587532725901052808469210745221393179241715811883171792025669877303087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ess.ldcsb.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ess.ldcsb.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3aaf22fbdbefff0536d887eea204c97edc0e7dcc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0055dc0baefdb7d1ea5889276fef9bdbf89fb77b5b089ff89ea1a1720d028fc4b4e4c598d1e04537e96fae8cf5ffd976abec8f588edf8eee0e0cf93708b30ae0d33c300e477af630075eb5c932a3b75191ef398f235e08aa59572bb6fed049255dbb666b925a78b7d6ff95d1b8b85110f80063983cada7ac5a29322fdfcfe7b9edaff15eaf118b465a78329afb7db4a4402505d8d345a5f07e916eede92995fd4885e8c6534e5de891194bdb7a663caf4c0a7093c04e4e8471f7c9480cc2f21f67de30ac5d68f9ac74664435088f744a8e640678dea44206fc9d4be7e1bcffc7adb5922e8fde98d9417689555012d680a00253d5ebe20634eced5a7d7aacf6365b