thebiblecourse.ca
Issued by R3
About this certificate
This digital certificate with serial number 03:61:79:35:25:91:56:fc:76:1a:01:90:58:a2:4a:02:bf:d3 was issued on by Let's Encrypt.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=thebiblecourse.ca
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:61:79:35:25:91:56:fc:76:1a:01:90:58:a2:4a:02:bf:d3Serial Number (int): 294505359927799407879854994410632718237651
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 56:c2:7e:e6:51:6d:bc:0a:4d:d3:10:ce:d5:03:a6:6e:be:ae:c5:7e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): b0:6e:26:0f:fe:77:29:0c:74:27:03:4d:41:9e:4b:4b:df:9f:99:fb
Fingerprint (sha256): 9b:f5:9f:bc:c1:50:1a:b5:26:0d:a7:83:ef:82:64:8d:48:a4:ec:dc:36:3f:6f:42:a1:c7:a3:40:aa:d6:f4:b3
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate thebiblecourse.ca
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for thebiblecourse.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
beaglesounds.com
cannabisstoner.com
cattling.com
compoundarbitrage.com
dcpig.com
emssuits.com
exham.com
homeschoolinteriordesigns.org
hudson.bible
hvacapopka.com
incontri-gratis.com
rejectthemark.com
thebiblecourse.ca
thechurchofthewest.com
trimarketclub.com
vert-tige.com
worcestertowing.com
worldwidemm.com
cannabisstoner.com
cattling.com
compoundarbitrage.com
dcpig.com
emssuits.com
exham.com
homeschoolinteriordesigns.org
hudson.bible
hvacapopka.com
incontri-gratis.com
rejectthemark.com
thebiblecourse.ca
thechurchofthewest.com
trimarketclub.com
vert-tige.com
worcestertowing.com
worldwidemm.com
Other certificates including the domain name thebiblecourse.ca
(limited to 100 certificates)
Certificate
The complete raw certificate details for thebiblecourse.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgISA2F5NSWRVvx2GgGQWKJKAr/TMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTMxMTUyNTJaFw0yNDA3MTIxMTUyNTFaMBwxGjAYBgNVBAMT EXRoZWJpYmxlY291cnNlLmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqptvPBSCf8w6p+9/DLwu9XzCOodcMcac8VoEXFJYKRTCL3EHZd5nkCoKm696 ev5BFqX2u3EklISARLWfNXBRhpYfmy3+E/X1632C4mI9lA/QE6uLq3olLxjj7/kp 9IKgQ3iHBVq0wI6XHvAv96td6FQtiItmzGli1yvYOnrHlwRp/lBfNayQ96ul6Gb9 3zEgepjZoStAXN5GHAys2lSpf6axLl1t2N6VjG4I7gmBVoeuQNBOTTc8xb/9xcUN P9ztWUnWeJW6G+ANULlIDM5gn/LC5Qn+/zU8qU/HZbaZrLPcEDaL5OxMhVjHGMoH T9TE2DEBsLMR7hrntyj46j5/qQIDAQABo4IDTTCCA0kwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBRWwn7mUW28Ck3TEM7VA6Zuvq7FfjAfBgNVHSMEGDAWgBQULrMXt1hW y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6 Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu b3JnLzCCAVQGA1UdEQSCAUswggFHghBiZWFnbGVzb3VuZHMuY29tghJjYW5uYWJp c3N0b25lci5jb22CDGNhdHRsaW5nLmNvbYIVY29tcG91bmRhcmJpdHJhZ2UuY29t gglkY3BpZy5jb22CDGVtc3N1aXRzLmNvbYIJZXhoYW0uY29tgh1ob21lc2Nob29s aW50ZXJpb3JkZXNpZ25zLm9yZ4IMaHVkc29uLmJpYmxlgg5odmFjYXBvcGthLmNv bYITaW5jb250cmktZ3JhdGlzLmNvbYIRcmVqZWN0dGhlbWFyay5jb22CEXRoZWJp YmxlY291cnNlLmNhghZ0aGVjaHVyY2hvZnRoZXdlc3QuY29tghF0cmltYXJrZXRj bHViLmNvbYINdmVydC10aWdlLmNvbYITd29yY2VzdGVydG93aW5nLmNvbYIPd29y bGR3aWRlbW0uY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIE AgSB9QSB8gDwAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGO 14SQbwAABAMARzBFAiAZx1kdI6i1Ay2GTQjTIg5pjmTlRQxWrEVvLsRJ1tJCAgIh ANI9AhTgbSrxDzGYkhDI+RmmQvXKCbpeP39xg7U1Xn/EAHYAPxdLT9ciR1iUHWUc hL4NEu2QN38fhWrrwb8ohez4ZG4AAAGO14SQiwAABAMARzBFAiAKNPDLFbFRRO8B XBj+9buSdUTp4kH4yE+t2YJ+f/El3AIhAN3FoGeHh+fssLDPMfUfVO5tXYpLrAyE YsTK0wAhGUxNMA0GCSqGSIb3DQEBCwUAA4IBAQBgzybMLQ1izIbuF2ev/C7Wd5SF FOdpWn9uzK6zCxk50or7JwffDOFc4Xl0NAY5JXjP/LRTPQGWbuQaDSprJYrn5eiq AzVRkdgmjNAhhVPXjiwE8cUjx0gWv9K9L4dxodynmwsxOOgvlt8oTAWKOya5JcoO Oqh3odT/mX7IrUCzOWvBr9gjqUGUQyYNPTAGnJM+EnSgelD/L8cF2h2wpBSydRhS xJ0VmX/DGSw80Mv+6r3Ulk/t1JexZ5ZqlxSEv+/DkGT2tdk1LZnoG1wbhTKRw6Ew tMLm0Hu+zCAvaHnordX/sy8nBUmrZU4uHLB/fSi1FWnuxaiizcbfiL7qbom/ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqptvPBSCf8w6p+9/DLwu 9XzCOodcMcac8VoEXFJYKRTCL3EHZd5nkCoKm696ev5BFqX2u3EklISARLWfNXBR hpYfmy3+E/X1632C4mI9lA/QE6uLq3olLxjj7/kp9IKgQ3iHBVq0wI6XHvAv96td 6FQtiItmzGli1yvYOnrHlwRp/lBfNayQ96ul6Gb93zEgepjZoStAXN5GHAys2lSp f6axLl1t2N6VjG4I7gmBVoeuQNBOTTc8xb/9xcUNP9ztWUnWeJW6G+ANULlIDM5g n/LC5Qn+/zU8qU/HZbaZrLPcEDaL5OxMhVjHGMoHT9TE2DEBsLMR7hrntyj46j5/ qQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 294505359927799407879854994410632718237651 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-13 11:52:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-12 11:52:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thebiblecourse.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21537159458053115890355788295425027819114877775875774238915083620871779697800332592665263676185102625664744958744960557644855823449947450692247038588190133942393477790157870355166049482415231960084929504070629702044931872251854552934511723726747874839762748713130112839371395558116785644374424722179635771698803765333183457523966323416514628666633455925554426696711890129175929661678452955904398624715207984798657254026311159887599200232629338351678823482005791740829255598081504060698641185057854022176352957271315582723137065207533562820437297261470348351350206493268633914738015300065883243585197629150213124816809 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 56c27ee6516dbc0a4dd310ced503a66ebeaec57e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (331 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beaglesounds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannabisstoner.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cattling.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compoundarbitrage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcpig.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emssuits.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exham.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeschoolinteriordesigns.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hudson.bible' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvacapopka.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incontri-gratis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rejectthemark.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thebiblecourse.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thechurchofthewest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimarketclub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vert-tige.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worcestertowing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldwidemm.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ed784906f0000040300473045022019c7591d23a8b5032d864d08d3220e698e64e5450c56ac456f2ec449d6d24202022100d23d0214e06d2af10f31989210c8f919a642f5ca09ba5e3f7f7183b5355e7fc40076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ed784908b000004030047304502200a34f0cb15b15144ef015c18fef5bb927544e9e241f8c84fadd9827e7ff125dc022100ddc5a0678787e7ecb0b0cf31f51f54ee6d5d8a4bac0c8462c4cad30021194c4d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0060cf26cc2d0d62cc86ee1767affc2ed677948514e7695a7f6eccaeb30b1939d28afb2707df0ce15ce179743406392578cffcb4533d01966ee41a0d2a6b258ae7e5e8aa03355191d8268cd0218553d78e2c04f1c523c74816bfd2bd2f8771a1dca79b0b3138e82f96df284c058a3b26b925ca0e3aa877a1d4ff997ec8ad40b3396bc1afd823a9419443260d3d30069c933e1274a07a50ff2fc705da1db0a414b2751852c49d15997fc3192c3cd0cbfeeabdd4964fedd497b167966a971484bfefc39064f6b5d9352d99e81b5c1b853291c3a130b4c2e6d07bbecc202f6879e8add5ffb32f270549ab654e2e1cb07f7d28b51569eec5a8a2cdc6df88beea6e89bf