tristateelectricmc.org

Issued by R3

About this certificate

This digital certificate with serial number 04:f7:7b:a2:d5:be:9e:9d:93:23:a6:fb:43:ad:63:e8:99:05 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tristateelectricmc.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f7:7b:a2:d5:be:9e:9d:93:23:a6:fb:43:ad:63:e8:99:05
Serial Number (int): 432663228887341099939659134025433147283717
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 20:e1:70:ee:c3:b6:c7:10:f3:2a:ca:6d:3a:a1:93:78:f2:3b:d7:83
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ea:b2:b6:71:15:d0:c1:08:5a:13:29:e4:6a:a5:e6:43:08:7b:7a:34
Fingerprint (sha256): 8c:0a:84:a4:f6:9a:4d:14:74:b5:b2:3e:6b:40:ca:06:2d:09:73:af:15:47:8a:54:78:64:d5:4e:75:f2:ef:12

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tristateelectricmc.org

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tristateelectricmc.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

catalogmanagement.com
faqaboutreligion.com
freedomforschool.net.tumalon.com
krusenberg.com.homerestoration.solutions
light.thebo.ng.tulop.com
myprivacyguide.com
panamacitybeachhome.com
phillipscounty.com
schoolforvip.com
smartcellphonestore.com
stopthemandatemn.com.unispacer.com
tristateelectricmc.org
www.nusugarunsugar.com

Other certificates including the domain name tristateelectricmc.org

(limited to 100 certificates)
tristateelectricmc.org
tristateelectricmc.org
saattorneydirectory.com.tristateelectricmc.org
tristateelectricmc.org
tristateelectricmc.org
overcomersrecovery.ca
tristateelectricmc.org
tristateelectricmc.org
bakhtos.one
overcomersrecovery.ca
tristateelectricmc.org

Certificate

The complete raw certificate details for tristateelectricmc.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGOjCCBSKgAwIBAgISBPd7otW+np2TI6b7Q61j6JkFMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMTYyMzU0MDhaFw0yNDAzMTUyMzU0MDdaMCExHzAdBgNVBAMT
FnRyaXN0YXRlZWxlY3RyaWNtYy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDOWIsXSvWq+8h6LKtXerBFkVtENscQhe16DjJ9mB+Yn31S/73sQ69C
5vhyNZnPaVM1UGbrWG2mT1jM7aIzUNpqlUrqfSR3eek6MY8HGrEWJdG6jhuq27/X
w+Mc+MAm+Sr6nxXI+Z2WMu6xDBT+X8sulpddd0wprsOoyezTE1d8yL1VedkFLzs8
rzFFJ54MGGhTltSsqUesubBwSRf7iuRwIVcBGuO4d6/oatG66xy7VQx3LvLqwVbo
iJn5psNtqINGXa6XtCNncsGMqaP/sVAjV29QwNRlznexJpwYts2Mn6jo3W9YQ1kN
x5+lR8BB4f8gy7QQi00li3aA062Pk4h7AgMBAAGjggNZMIIDVTAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFCDhcO7DtscQ8yrKbTqhk3jyO9eDMB8GA1UdIwQYMBaAFBQu
sxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYV
aHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5s
ZW5jci5vcmcvMIIBYAYDVR0RBIIBVzCCAVOCFWNhdGFsb2dtYW5hZ2VtZW50LmNv
bYIUZmFxYWJvdXRyZWxpZ2lvbi5jb22CIGZyZWVkb21mb3JzY2hvb2wubmV0LnR1
bWFsb24uY29tgihrcnVzZW5iZXJnLmNvbS5ob21lcmVzdG9yYXRpb24uc29sdXRp
b25zghhsaWdodC50aGViby5uZy50dWxvcC5jb22CEm15cHJpdmFjeWd1aWRlLmNv
bYIXcGFuYW1hY2l0eWJlYWNoaG9tZS5jb22CEnBoaWxsaXBzY291bnR5LmNvbYIQ
c2Nob29sZm9ydmlwLmNvbYIXc21hcnRjZWxscGhvbmVzdG9yZS5jb22CInN0b3B0
aGVtYW5kYXRlbW4uY29tLnVuaXNwYWNlci5jb22CFnRyaXN0YXRlZWxlY3RyaWNt
Yy5vcmeCFnd3dy5udXN1Z2FydW5zdWdhci5jb20wEwYDVR0gBAwwCjAIBgZngQwB
AgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDuzdBk1dsazsVct520zROiModG
fLzs3sNRSFlGcR+1mwAAAYx1RCHFAAAEAwBHMEUCIQC7xevVVqdpoao7FLePbARC
yQWn0Y4rHgAWb5yd8/ZDbgIgbtokOgNHtHsISuoygCAKGnqw1BPmSk+br4nZ8Gpr
rtAAdgAp0DobtnSqcRzTA1tlV8FPiqeLT+g4lEnspFP5RL0kaAAAAYx1RCJBAAAE
AwBHMEUCIQDWFy2CIUtlOks07jM0JbRlF/7kqwiZDlilyc6OeKiCpgIgWhle4mnr
7ssFMS/EAbXAf0unnSt6IR0I8j4qguRw/kQwDQYJKoZIhvcNAQELBQADggEBAFoU
0F/+rILoaDEXWXs7/JAXLR7FM3eWD51vxohJrv7CAQae3neRiHuWVfBfB3w0fFa1
zOZmzcibjj2tW0XnJ0Brql8Th+ZmXdIDmACsrREvCvlfUdUNrVzwehjlgJZCcwt3
LQpXiBV9y7tLx4OPn10+tH8ILM+xVfc1znkalt2h+IIo0u1GzDzRq7hQopa75f1b
oTvcWaWO59XJLgnjUI/ljYjQbZhNP/WRp/VzfgLKzAWUsqmH5yBinKXQe7spgSuG
hgvGqANNFQr7fiiNIOY91Ckt7HWBlDIKZDPucw7dZTq2uVLHLktfduMCA1BVAay7
9PGZZc0ZF3Qa4mgnePs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzliLF0r1qvvIeiyrV3qw
RZFbRDbHEIXteg4yfZgfmJ99Uv+97EOvQub4cjWZz2lTNVBm61htpk9YzO2iM1Da
apVK6n0kd3npOjGPBxqxFiXRuo4bqtu/18PjHPjAJvkq+p8VyPmdljLusQwU/l/L
LpaXXXdMKa7DqMns0xNXfMi9VXnZBS87PK8xRSeeDBhoU5bUrKlHrLmwcEkX+4rk
cCFXARrjuHev6GrRuuscu1UMdy7y6sFW6IiZ+abDbaiDRl2ul7QjZ3LBjKmj/7FQ
I1dvUMDUZc53sSacGLbNjJ+o6N1vWENZDcefpUfAQeH/IMu0EItNJYt2gNOtj5OI
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432663228887341099939659134025433147283717
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 23:54:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 23:54:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tristateelectricmc.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26048753163474062742879377704250039827502552998276282370156896333665292714674122800076608097326276480429963298419880624309552920387163676105438405273171193646155685210040742930103599461349802218978539354013356792322499108722028478564564420524906292390834121711538266232387902432283523734252583905281203579270718134684660681465560035945626199945956755673940790695450649791221867874817163247792238314586681448561007851460076110953962426594953259314528297573290545679017899543411587990407657014472204886763267728442342128618105410927369655158159202574696017634989783967713274930088260000112893955210825618058290572527739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20e170eec3b6c710f32aca6d3aa19378f23bd783
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (343 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalogmanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faqaboutreligion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomforschool.net.tumalon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krusenberg.com.homerestoration.solutions'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'light.thebo.ng.tulop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myprivacyguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'panamacitybeachhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phillipscounty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolforvip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartcellphonestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stopthemandatemn.com.unispacer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tristateelectricmc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nusugarunsugar.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c754421c50000040300473045022100bbc5ebd556a769a1aa3b14b78f6c0442c905a7d18e2b1e00166f9c9df3f6436e02206eda243a0347b47b084aea3280200a1a7ab0d413e64a4f9baf89d9f06a6baed000760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c754422410000040300473045022100d6172d82214b653a4b34ee333425b46517fee4ab08990e58a5c9ce8e78a882a602205a195ee269ebeecb05312fc401b5c07f4ba79d2b7a211d08f23e2a82e470fe44
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005a14d05ffeac82e8683117597b3bfc90172d1ec53377960f9d6fc68849aefec201069ede7791887b9655f05f077c347c56b5cce666cdc89b8e3dad5b45e727406baa5f1387e6665dd2039800acad112f0af95f51d50dad5cf07a18e5809642730b772d0a5788157dcbbb4bc7838f9f5d3eb47f082ccfb155f735ce791a96dda1f88228d2ed46cc3cd1abb850a296bbe5fd5ba13bdc59a58ee7d5c92e09e3508fe58d88d06d984d3ff591a7f5737e02cacc0594b2a987e720629ca5d07bbb29812b86860bc6a8034d150afb7e288d20e63dd4292dec758194320a6433ee730edd653ab6b952c72e4b5f76e30203505501acbbf4f19965cd1917741ae2682778fb