www.santangelolodigiano.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:bf:86:49:85:84:6e:1e:de:72:57:e8:ab:38:c5:75:eb:fe was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.santangelolodigiano.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:bf:86:49:85:84:6e:1e:de:72:57:e8:ab:38:c5:75:eb:feSerial Number (int): 326509288174338513637646859265742845897726
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 9f:15:43:ab:44:d0:89:b2:00:8e:57:cd:95:f3:00:7f:1a:e1:94:cc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6e:83:04:ee:c0:7f:b3:42:c1:13:23:00:89:0d:cd:42:96:1f:af:2f
Fingerprint (sha256): 86:32:f3:1d:f9:3f:77:89:2d:0d:5d:40:19:42:62:ce:97:77:40:2e:de:a1:55:6b:4c:9c:a0:3b:1d:62:d7:9a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.santangelolodigiano.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.santangelolodigiano.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.santangelolodigiano.org
Other certificates including the domain name santangelolodigiano.org
(limited to 100 certificates)
punu.bible
castelnuovorangone.org
decentralizedledger.exchange
www.santangelolodigiano.org
www.santangelolodigiano.org
santangelolodigiano.org
santangelolodigiano.org
www.santangelolodigiano.org
santangelolodigiano.org
www.santangelolodigiano.org
santangelolodigiano.org
www.santangelolodigiano.org
santangelolodigiano.org
santangelolodigiano.org
castelnuovorangone.org
decentralizedledger.exchange
www.santangelolodigiano.org
www.santangelolodigiano.org
santangelolodigiano.org
santangelolodigiano.org
www.santangelolodigiano.org
santangelolodigiano.org
www.santangelolodigiano.org
santangelolodigiano.org
www.santangelolodigiano.org
santangelolodigiano.org
santangelolodigiano.org
Certificate
The complete raw certificate details for www.santangelolodigiano.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbjCCBVagAwIBAgISA7+GSYWEbh7eclfoqzjFdev+MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjgyMzU5MDNaFw0x OTEwMjYyMzU5MDNaMCYxJDAiBgNVBAMTG3d3dy5zYW50YW5nZWxvbG9kaWdpYW5v Lm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKL6YID8UdPRr5Gz SLNPFcZGnUpVLFgKBXEUR1BMyySvK711OfhgllzW1CeWnF8ZEP11bRNxp/WpGbzb TQ8R+2x4CRkh576Y3bi9Aft0l2Ypv4W7cI35UeTArYCY74auXBqcGPPMf00ygjYC EjsMXp5kb3sPKJNsr2K7mKBlk2stStLWM0on/ci4Bg6dw77SvgeLrVsrlt//Iwms uxDfE4wgg3iM/Gvaqc+JQsSamouJC5eDZ44TI2At/F3k0qF7JrHJKMttjuTFwBQH oh0zyMTGA4IdondRqskIL5ZeP0SlJQKhebCG1JqZdvTqBrl7YM2lCm77M3eXJ7U7 fCC2J83w1xISX6jHd0D2ymFVfihgZ/7gdoBkOScQu4OoZr63dFsq1+6yG1c58LET 0CHJa0YGaqkF8dZIes0YZD5NJVm7oTClDcM/PG3+7CpBhvpYO+JJ2ShVnENwdo9Y gJjpPEBRKnoGBBVLasc05VamD9/BSJMIEJ/+MAhNepZbPk/N9wDpZ8RgHPrYR7S2 qTGC0OtfdQiKM/HY9SV+xTBVoRT89AbKLAHUL637eCLhstC3czOFRnJEXoNOvkUb rndbAqZ8+URNg5MS0NfmVe0+gOGndE0rcIxhLW0989Jl/jEQ/Zdo0xOUrpzC5eN+ GOFctxKUtRZo9j+FvRLY8BOv18GXAgMBAAGjggJwMIICbDAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw HQYDVR0OBBYEFJ8VQ6tE0ImyAI5XzZXzAH8a4ZTMMB8GA1UdIwQYMBaAFKhKamME fd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0 cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0 cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wJgYDVR0RBB8wHYIbd3d3 LnNhbnRhbmdlbG9sb2RpZ2lhbm8ub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5 cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAY/Lbzeg7zCzPC3KEJ1dr M6SNYXePvXWmOLHHaFRL2I0AAAFsOzzqyQAABAMARzBFAiEA1QabSR/Wp2lNHivU VFMRBVAVjW7ElwG9+JPs6KgZfawCIBe/l1p0vpJoocqbbV5EptichqirwUfbeYFc V5NcK3/aAHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFsOzzs vgAABAMARzBFAiA8exKoPSfoxrOwW6sFIylLwvDzQuDN3enCooBkW9TAfwIhAPug icrrPgWWv/p9olUTsroEVElonb+XvUC867YX20N+MA0GCSqGSIb3DQEBCwUAA4IB AQA8Oqsjn+3jaWp1abII5gKnowPIyD5HBXpyHRjpGwOtb45LcPIKeX/Hnz9YVGGz mPhPD6G7G92CsoapXOxirbXExGaECTpyT3Oods9AhTtqycI1tPvklrKUB+vQHRA+ CA+VwzAMMHVglRzVBx19ZsCNTpOxf7FVbL8ZUA8my6nXTJXyibAcktkuQvPtix7Q vtD2faRTHJHNGsEV3FCWZjMtCvL4RFo/6FIh9wWW7sLzoBiepUKazr3bCIFf0utk RQgrQnCW1U+c8vRaBGii0Kuh68/lXx5HIcw/hlg5ZWIWRsO6/Jn3PWsV/CixB2Hd QhULa1gqrLpWyPWOXWwxiKmf -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAovpggPxR09GvkbNIs08V xkadSlUsWAoFcRRHUEzLJK8rvXU5+GCWXNbUJ5acXxkQ/XVtE3Gn9akZvNtNDxH7 bHgJGSHnvpjduL0B+3SXZim/hbtwjflR5MCtgJjvhq5cGpwY88x/TTKCNgISOwxe nmRvew8ok2yvYruYoGWTay1K0tYzSif9yLgGDp3DvtK+B4utWyuW3/8jCay7EN8T jCCDeIz8a9qpz4lCxJqai4kLl4NnjhMjYC38XeTSoXsmsckoy22O5MXAFAeiHTPI xMYDgh2id1GqyQgvll4/RKUlAqF5sIbUmpl29OoGuXtgzaUKbvszd5cntTt8ILYn zfDXEhJfqMd3QPbKYVV+KGBn/uB2gGQ5JxC7g6hmvrd0WyrX7rIbVznwsRPQIclr RgZqqQXx1kh6zRhkPk0lWbuhMKUNwz88bf7sKkGG+lg74knZKFWcQ3B2j1iAmOk8 QFEqegYEFUtqxzTlVqYP38FIkwgQn/4wCE16lls+T833AOlnxGAc+thHtLapMYLQ 6191CIoz8dj1JX7FMFWhFPz0BsosAdQvrft4IuGy0LdzM4VGckReg06+RRuud1sC pnz5RE2DkxLQ1+ZV7T6A4ad0TStwjGEtbT3z0mX+MRD9l2jTE5SunMLl434Y4Vy3 EpS1Fmj2P4W9EtjwE6/XwZcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 326509288174338513637646859265742845897726 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 23:59:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 23:59:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.santangelolodigiano.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 664892373835435766271492622744104238272550058205916201709842277912228717955501126154822963489788721379643787335197493881694300123722214543553860706328165360534464715796022423811023647084303940766262452969675113810485138537298628575665946651437124874028970032980078586598805527048244085673263006966549496274324537564930347940675867735101896486503545288709809788691699562546151690145910682116818174926226024367462254294696186114228697484009730442339610203446858008986498250576638188205375059243955853341564219459025662139320861682276046753884527106968990546458853864787499562507154162689239636668612943405938744338153435369067784214687139303549345747322578947402895336427446670443264977074207960336151356549370637790130420136236801623735161350157519770542284792676451953871911477736669945034902805472213648892886773883917778731574754613819628912481666001779872296780780500361815710237474722983659030061223923694846581193367539857015516073069332178123340510540478042925637703624115535498452013466142411173908645018060391019309922585980604636187666174660142295477690279621685052447271149125856216949604265259927789767823373981791359720640524257937341867959672913178486886350977941636013650896871328653975247436694345041146074300987982231 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9f1543ab44d089b2008e57cd95f3007f1ae194cc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santangelolodigiano.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3b3ceac90000040300473045022100d5069b491fd6a7694d1e2bd45453110550158d6ec49701bdf893ece8a8197dac022017bf975a74be9268a1ca9b6d5e44a6d89c86a8abc147db79815c57935c2b7fda007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c3b3cecbe000004030047304502203c7b12a83d27e8c6b3b05bab0523294bc2f0f342e0cddde9c2a280645bd4c07f022100fba089caeb3e0596bffa7da25513b2ba045449689dbf97bd40bcebb617db437e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003c3aab239fede3696a7569b208e602a7a303c8c83e47057a721d18e91b03ad6f8e4b70f20a797fc79f3f585461b398f84f0fa1bb1bdd82b286a95cec62adb5c4c46684093a724f73a876cf40853b6ac9c235b4fbe496b29407ebd01d103e080f95c3300c307560951cd5071d7d66c08d4e93b17fb1556cbf19500f26cba9d74c95f289b01c92d92e42f3ed8b1ed0bed0f67da4531c91cd1ac115dc509666332d0af2f8445a3fe85221f70596eec2f3a0189ea5429acebddb08815fd2eb6445082b427096d54f9cf2f45a0468a2d0aba1ebcfe55f1e4721cc3f86583965621646c3bafc99f73d6b15fc28b10761dd42150b6b582aacba56c8f58e5d6c3188a99f