*.rad-prod-app.wna.cloud

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:91:d9:4a:2d:ee:b7:95:10:dc:65:6a:fa:ce:bf:fd was issued on by Amazon.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.rad-prod-app.wna.cloud

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:91:d9:4a:2d:ee:b7:95:10:dc:65:6a:fa:ce:bf:fd
Serial Number (int): 16708026153889975678900584640506937341
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 73:cc:b1:4b:5a:5f:d3:df:11:5c:d1:ce:a8:7a:7a:1b:23:62:dc:46
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 50:cb:ee:50:26:51:88:4a:e9:6f:39:9a:bc:cd:17:0b:19:28:d9:0b
Fingerprint (sha256): 90:fc:9d:b4:86:b4:fd:b5:d1:47:14:67:d5:4a:22:55:0f:43:88:e3:d8:66:1e:cf:13:93:a1:12:2e:96:4a:4c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.rad-prod-app.wna.cloud

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.rad-prod-app.wna.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.rad-prod-app.wna.cloud
api-fastlane.imaginelearning.com
ala-sidebar.rad.edgenuity.com
events.imaginelearning.com
api.rad.edgenuity.com
usage-reports.rad.edgenuity.com
runner.rad.edgenuity.com
header.rad.edgenuity.com
events.edgenuity.com
dlq.imaginelearning.com
dlq.rad.edgenuity.com

Other certificates including the domain name wna.cloud

(limited to 100 certificates)
*.k8s.doolittle-dev2.us-west-2.aws.wna.cloud
*.cosmos-prod.edgenuityapp.com
media.wne-cdn.com
*.imlp-prod-app.wna.cloud
media.wne-cdn.com
*.doolittledev.wna.cloud
*.lmsadmin-prod.edgenuityapp.com
*.doolittle-dev2.us-west-2.aws.wna.cloud
*.dev.doolittle.us-west-2.aws.wna.cloud
*.lmsadmin-prod.edgenuityapp.com
*.assessment-prod.il-apps.com
*.doolittleprod.wna.cloud
*.doolittle-dev2.wna.cloud
*.ow-prod-app.wna.cloud
*.k8s.doolittle-production.us-west-2.aws.wna.cloud
*.rad-prod.edgenuityapp.com
*.ow-prod-app.wna.cloud
media-prod.wne-cdn.com
*.k8s.doolittle-dev2.us-west-2.aws.wna.cloud
*.k8s.doolittle-dev2.us-west-2.aws.wna.cloud
*.assessment-dev.il-apps.com
*.doolittle-dev2.wna.cloud
*.doolittle-nonprod.wna.cloud
*.rad-prod-app.wna.cloud
*.doolittle-dev5.wna.cloud
*.assessment-prod.il-apps.com
*.ow-prod-app.wna.cloud
*.wna.cloud
*.lmsadmin-qa.edgenuityapp.com
*.ow-qa.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.doolittle-prod-app.wna.cloud
*.rad-prod.edgenuityapp.com
media-nonprod.wne-cdn.com
*.armstrong-prod-app.wna.cloud
*.k8s.doolittle-nonprod.us-west-2.aws.wna.cloud
*.ow-prod.edgenuityapp.com
*.k8s.doolittle-dev3.us-west-2.aws.wna.cloud
*.imlp-prod.edgenuityapp.com
*.imlp-prod.edgenuityapp.com
*.imlp-prod-app.wna.cloud
*.doolittle-dev2.us-west-2.aws.wna.cloud
*.imlp-prod-app.wna.cloud
*.doolittle-dev4.wna.cloud
*.wna.cloud
*.ow-prod-app.wna.cloud
*.lmsadmin-qa-app.wna.cloud
*.wna.cloud
*.imlp-dev.edgenuityapp.com
*.cosmos-prod.edgenuityapp.com
media.wne-cdn.com
*.rad-prod-app.wna.cloud
*.doolittledev.wna.cloud
*.doolittle-nonprod.wna.cloud
*.lmsadmin-dev.edgenuityapp.com
*.doolittle-pnayak.wna.cloud
*.lmsadmin-prod-app.wna.cloud
*.imlp-prod-app.wna.cloud
*.k8s.ops.us-west-2.aws.wna.cloud
*.ops.wna.cloud
*.doolittle-dev6.wna.cloud
*.armstrong-prod-app.wna.cloud
*.rad-prod-app.wna.cloud
*.doolittle-dev3.wna.cloud
*.ow-prod.edgenuityapp.com
*.doolittle-production.wna.cloud
*.lmsadmin-prod.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.rad-prod-app.wna.cloud
*.doolittle-dev5.wna.cloud
*.lectura-staging.il-apps.com
*.k8s.doolittle-production.us-west-2.aws.wna.cloud
*.doolittle-dev-app.wna.cloud
*.doolittle-dev2.wna.cloud
*.ow-prod.edgenuityapp.com
*.doolittle-production.wna.cloud
*.doolittle-prod.il-apps.com
*.k8s.ops.us-west-2.aws.wna.cloud
*.k8s.doolittle-pnayak.us-west-2.aws.wna.cloud
*.assessment-prod.il-apps.com
*.doolittle-production.wna.cloud
*.ops.wna.cloud
*.doolittle-nonprod.wna.cloud
*.imlp-qa.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.intergalactic-prod.il-apps.com
*.doolittle-nonprod.wna.cloud
*.doolittledev.wna.cloud
*.ow-prod-app.wna.cloud
*.imlp-prod-app.wna.cloud
*.doolittle-production.wna.cloud
*.doolittle-dev6.wna.cloud
*.doolittle-nonprod.wna.cloud
*.doolittle-iam.wna.cloud
*.doolittle-production.wna.cloud
*.prod.ops.us-west-2.aws.wna.cloud
*.prod.doolittle.us-west-2.aws.wna.cloud
*.k8s.doolittle-dev6.us-west-2.aws.wna.cloud
*.doolittleprod.wna.cloud
*.doolittle-production.wna.cloud

Certificate

The complete raw certificate details for *.rad-prod-app.wna.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FnOkd0Djm8JiY2jCyFh
5SucI2Ng50LEc+G6xdqmKzwxbVlQCQLRtyyznlhkSvw3wAdHFENZ2MGcTxpKO/gH
mNLx4vNvaO2JIrQT9QJq6UUSkux1Lf5XUq/6zAw2D7JMAWy6ZA5yu0Fxf2bL9pkM
CypeHl0ohtrE4KPNK+w/SOFwN3QG9XDnqoF8q7zdUwpC4YVEXNThLc9zM5w7w6ki
qH0nm033jguN2TH8ZpAn3BI1QkY4KZO3ln/mwvLC0+XhZbkboygZ9ZLHjYf5eaQn
Fa5ji3HpdxDM61nOrWkq59rucnrJ07xEWWlpKxlLnvibBwjxihz6GRKCob6IrpPG
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16708026153889975678900584640506937341
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.rad-prod-app.wna.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27311759312107462762982662052477151519498184022529489297406042491263930036628614768889817484232480808075216817147340645859028924388318460767576733479333192222774649935431232284313483010214389318630528974443826610132214523879068727497550231209988779097097101007373565199069451586835256570900164203482256484015038461178496067287198772391025480065925153817686826243310811462170001491945318526249465862815520237036700274441711660231614900903515705903437482359176577258103658973359556820109024088353654560416153040334330041811094397404061347471477214003076979051817692287167074003093326561380557132209750929253475122660943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73ccb14b5a5fd3df115cd1cea87a7a1b2362dc46
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (301 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rad-prod-app.wna.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-fastlane.imaginelearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ala-sidebar.rad.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.imaginelearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.rad.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usage-reports.rad.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runner.rad.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'header.rad.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlq.imaginelearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlq.rad.edgenuity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00af356bbc1947260afffd75348370d4aba8ddc9ffdb0cd7ab49a28d5dfaf20594eb349b3b08f5fa969e10cd131405c7d516d5c3823864a902f8957450774ad3379355f07b96c46b9cd4694ee707fb4e4a65cab972ba98cc4da3856d2faf79f1be1e5ae1f8e321ab1b9c5c08fd8a3f7b3fe60ac9519f754ee96b4145088d93c02989498ac04f3153a9e4b48c8bc84bc04bac5723d141983b422145e77d7ab3ae9c41d2ccaa12e9831c25beca983bec670ced7126762c3a14eaa5ada3ad158907b1c285ceee017a2c348e9bc1c84c9610962816240cc160a95ed83ef04dde1d888cfba11499a3ec47114588b6d126259c10cc7efa0338a2ebda8c42f43b82d9583e