www.schoolfeeplan.com

- Premium Credit Limited -

Issued by thawte EV SSL CA - G3

About this certificate

This digital certificate with serial number 19:0d:ff:03:8d:36:4d:45:58:9d:55:69:7b:92:e2:9b was issued on by thawte, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Premium Credit Limited

Company registration number: 02015200
Organization: Premium Credit Limited
Organization unit: Datacentre
State / Province: Surrey
Locality: Epsom
Country: GB

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 19:0d:ff:03:8d:36:4d:45:58:9d:55:69:7b:92:e2:9b
Serial Number (int): 33303372049620301581015912761481421467
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: f0:70:51:da:d3:2a:91:4f:52:77:d7:86:77:74:0f:ce:71:1a:6c:22

Fingerprint (sha1): 52:d7:75:a9:74:9e:27:22:9b:75:19:70:bd:7b:7c:16:07:87:a1:35
Fingerprint (sha256): 87:af:96:b8:31:ed:60:e5:b0:39:b2:b0:99:27:21:c8:b1:8d:c9:42:53:29:43:81:84:12:ec:40:ba:f9:2a:7f

Issuing Certificate URL: http://ti.symcb.com/ti.crt

Revocation information

OCSP Server: http://ti.symcd.com
CRL Distribution Point: http://ti.symcb.com/ti.crl

Check the revocation status for certificate www.schoolfeeplan.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.schoolfeeplan.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.schoolfeeplan.com
schoolfeeplan.com

Other certificates including the domain name schoolfeeplan.com

(limited to 100 certificates)
www.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
www.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
www.preprod.schoolfeeplan.com
www.preprod.renewal.schoolfeeplan.com
www.preprod.renewal.schoolfeeplan.com
test.premiumcredit.com
www.uat.renewal.schoolfeeplan.com
digital.premiumcredit.com
www.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
www.schoolfeeplan.com
digital.premiumcredit.com
www.uat.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
www.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
www.ssd.schoolfeeplan.com
digital.premiumcredit.com
www.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
www.uat.schoolfeeplan.com
www.uat.schoolfeeplan.com
digital.premiumcredit.com
www.renewal.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
digital.premiumcredit.com
www.preprod.schoolfeeplan.com
www.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
www.ssd.schoolfeeplan.com
www.uat.renewal.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
www.renewal.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
www.renewal.schoolfeeplan.com
digital.premiumcredit.com
www.preprod.renewal.schoolfeeplan.com
digital.premiumcredit.com
www.schoolfeeplan.com
digital.premiumcredit.com
www.schoolfeeplan.com
digital.premiumcredit.com
www.schoolfeeplan.com
www.preprod.schoolfeeplan.com

Certificate

The complete raw certificate details for www.schoolfeeplan.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lwNe71fhJJEGXKVMLJY
1j8oPHCpVt0vmJiblw9hVyxmgrsjiaL8uNG4zM20bKsOQ3PTgAJeU+dzxsifBzJ0
42dd7uqLmgeysNoB6OK4f0X6gMvuPcsGkLmq2YoZ5a7Bltf3s7bUYQpJ4S5Zmigs
ysTK4/AYVlIc1tXzRMvfZ2dttWylm8Bqha01Lmh1/m+xAYeNu9EkDpE41MxGxx8o
eyg6ldScodIL45kIefPZf+kQQA/wEG1P5q9rvMcIFZy/wQUJ0r9nV+MlzdXZTRZ+
O6Uf9Yp0O8McqYk+f0curVibS2zIrhY45JncbqD2rc66FpaS+2IXJ+xfheLKZ8vG
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 33303372049620301581015912761481421467
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte EV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Premium Credit Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Surrey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Epsom'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '02015200'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Datacentre'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.schoolfeeplan.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27060390125817363756994954074233651826756679967585264241184277960711623364424845776162723446457176444210628294316080208857584897973796480308602881029841942480313407131376313569656747623027104759913627361069858881421478069160763560370252646787441809970516535326584209432373539524585762244651663220914103969992533115375718798828696820577736797418143497991607025734110962999156524950633324415835575925071724377937185068018468389445741774789288394366637775788930271101008493138725908599705529047773871241282304578718455518473216192845359553141402601795537130226832492382762696934920012719895203748459401288524155794998873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolfeeplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolfeeplan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcb.com/ti.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.48.1 (Thawte EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f07051dad32a914f5277d78677740fce711a6c22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcb.com/ti.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001d0ff4f0bce6036c3997366fdde922de2dd496a1bab3f028e54278d34e13d088662703a3b265b07749aac93275453ad199da6615ca5bb2990e9aad0b6e32f772a64db6afb88821eaa3f208877a22c268a03e9c9dc016ef7e5ccf4376f60e6eab4e458c166792fb9eae3ba95f36ff7a7b7968cbada6a6021e05b360fb027e571726976c3db96d816a1c69ef14379e685ed876172851d5cf859088616858b16f443661229ea51c8f4c8190becb25f5450cf59b17df47fa7a07eb38f2b72fff4118d38e0271b5ae924aff6599e068bf4173c69578f4f18b6179198a354c47367e00223cd045c8b0a96e81213eb8271394f221f8acd8b3bd43f64137019f048b3f0b