mednet-communities.net

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number 09:f8:e4:51:43:63:1b:94:5d:72:b9:08:73:63:ca:9a was issued on by ZeroSSL.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mednet-communities.net

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate will expire on

Certificate Details

Serial Number (hex): 09:f8:e4:51:43:63:1b:94:5d:72:b9:08:73:63:ca:9a
Serial Number (int): 13255372410706985899196607803632634522
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0a:c7:fa:b7:69:ce:45:a6:a5:17:42:65:d2:98:7a:49:e2:a8:aa:95
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): 9d:30:fc:3c:52:6b:53:9b:54:e2:db:88:00:d4:6f:7c:39:9a:94:64
Fingerprint (sha256): a8:8e:09:20:be:77:22:c9:bb:cc:42:ed:b5:ed:ff:46:3b:86:92:59:13:64:88:a5:90:0e:00:54:b3:2c:52:1f

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate mednet-communities.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mednet-communities.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mednet-communities.net
www.mednet-communities.net

Other certificates including the domain name mednet-communities.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for mednet-communities.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGljCCBH6gAwIBAgIQCfjkUUNjG5RdcrkIc2PKmjANBgkqhkiG9w0BAQwFADBL
MQswCQYDVQQGEwJBVDEQMA4GA1UEChMHWmVyb1NTTDEqMCgGA1UEAxMhWmVyb1NT
TCBSU0EgRG9tYWluIFNlY3VyZSBTaXRlIENBMB4XDTI0MDMyNjAwMDAwMFoXDTI0
MDYyNDIzNTk1OVowITEfMB0GA1UEAxMWbWVkbmV0LWNvbW11bml0aWVzLm5ldDCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALTMNoNSnD8sBMbGQoDayTw0
eufzhjUPLlBuhrZDsVMfsnLVkL3mFuSfErPrCNAyqmNVBvc0xb3QEkhCECwJjOCx
vVf4FqVEcB+r9QaV/V0dlTKc7GIVhs/Y6AoUC5XDTfjAtw+9F828HlJpXla6VNZo
p72WsuwVTNQ/KaWJ4TmFNbcBy2F4E6hTYoZFVi7ysRSHWaF4NPU/PybZboOPcqTf
cXOsfH49eQFBM18hhG+fj1Zpd5oqYIMMcT2mlidM79QYuOGdP90nvJvfNjk0hr80
M9zSIAxkQheJNofatEdl7y/TN0mZH4bkYP7hJtSH7RCt9BwAGVlFIc58LKpBm0cC
AwEAAaOCAp4wggKaMB8GA1UdIwQYMBaAFMjZeGii2Rlo1T1y3l8KPty1hoamMB0G
A1UdDgQWBBQKx/q3ac5FpqUXQmXSmHpJ4qiqlTAOBgNVHQ8BAf8EBAMCBaAwDAYD
VR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0g
BEIwQDA0BgsrBgEEAbIxAQICTjAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3Rp
Z28uY29tL0NQUzAIBgZngQwBAgEwgYgGCCsGAQUFBwEBBHwwejBLBggrBgEFBQcw
AoY/aHR0cDovL3plcm9zc2wuY3J0LnNlY3RpZ28uY29tL1plcm9TU0xSU0FEb21h
aW5TZWN1cmVTaXRlQ0EuY3J0MCsGCCsGAQUFBzABhh9odHRwOi8vemVyb3NzbC5v
Y3NwLnNlY3RpZ28uY29tMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAdv+IPwq2
+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGOeDL6nQAABAMARjBEAiB5S2v1
aWpItzdpUWWwpy7Sdo6b9toHssZhmkBmuMiWXQIgVRIP0GEAudg0Mupiy6RZU6qG
zvoSk1OoBheGR+3vRrkAdwA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frU
FwAAAY54MvpQAAAEAwBIMEYCIQC/nfdb2K2ZFq9nqxdK16t5A/zcmbtDuMi2J2D9
2K8buQIhAPuV0Hh5XKwc1L+PwszUehCfgAVNcf8E1XeGGlpMYMsuMD0GA1UdEQQ2
MDSCFm1lZG5ldC1jb21tdW5pdGllcy5uZXSCGnd3dy5tZWRuZXQtY29tbXVuaXRp
ZXMubmV0MA0GCSqGSIb3DQEBDAUAA4ICAQBlY3SN6G2H2CTgCJ0w3TzHB49dXVrN
gdYeCZkfcryonPh9ebBy9qMrRvLqT8uh5jZaIbNUS2e3exzo8/iRgaKlNwc80Tve
FnJQxK9U5/imaINQ/HlxMcuMWvyl0lPlHWsGgw0oVOQIGXpqAdVShqfWFXAEyG9v
rpnusVIP9JIOfrKGAeBorL3Q6vyCDqtxcMBLwGCePk/ljC9gaskDx++FoVe5tFJq
kSyprg8npg+iyC+r2KjQ9Z729tc1d4Rntoh3WRfHlBOupX3eSFMjKUBMTebfZHW+
f3Sv1myNfbeausfnvTCVxBj0m2aWSTjJQea9TYOCy0Adkec7hkPvALZhG3yQOzPE
qdfc2BgoDNSXZ8ExYYI82wC/YKsiSy7Ct84nPLpvwiGPHka9TSe5+nhfFAYHRCJU
579rwSn8kZ8Wq3LDjgPqrEyNxNN+JeWn0OpeVFPw+JSCLxh8qrI+u/94D/QHzUe9
q2QZMhM5TKQ78FoPvAxIM6kUD4YwdghWuR8LkuAHHi4o1j0SBCEZvaPvEQcBaLGX
I/QDs1okQ+uLHxPS3cFIZBklOFnPKnCNymFf7L3VOVcab0dYlMuTAqpCowMgftYU
pu1bYMKFC557wiAA9YOEhGsdfgoi1cup+3osgeZhEMhiA0Oi4dqouGVhhbkJUGVT
Wr45TkmWdSO8Lw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMw2g1KcPywExsZCgNrJ
PDR65/OGNQ8uUG6GtkOxUx+yctWQveYW5J8Ss+sI0DKqY1UG9zTFvdASSEIQLAmM
4LG9V/gWpURwH6v1BpX9XR2VMpzsYhWGz9joChQLlcNN+MC3D70XzbweUmleVrpU
1minvZay7BVM1D8ppYnhOYU1twHLYXgTqFNihkVWLvKxFIdZoXg09T8/Jtlug49y
pN9xc6x8fj15AUEzXyGEb5+PVml3mipggwxxPaaWJ0zv1Bi44Z0/3Se8m982OTSG
vzQz3NIgDGRCF4k2h9q0R2XvL9M3SZkfhuRg/uEm1IftEK30HAAZWUUhznwsqkGb
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13255372410706985899196607803632634522
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mednet-communities.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22823596048441499185438122488382283431365376251054783563519062572817450951564879481059177043563209950234990007717527173439707561578999297626427441743740316678376978662316159829186966118186621370771244058143257726457406401331608056732547560366709439061729955299294902078867910599579738535059592257831253183325172133802411706898497719909626232857856845895599134550095206563950827771942356265244585347238151198753685061441720242058977277416343121034850805562134585112365040685784687174924456262402997869842425189799033090089467159490418562777757064083525143657274292732035284792879486979020484443092814712817834346519367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ac7fab769ce45a6a5174265d2987a49e2a8aa95
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e7832fa9d00000403004630440220794b6bf5696a48b737695165b0a72ed2768e9bf6da07b2c6619a4066b8c8965d022055120fd06100b9d83432ea62cba45953aa86cefa129353a806178647edef46b90077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e7832fa500000040300483046022100bf9df75bd8ad9916af67ab174ad7ab7903fcdc99bb43b8c8b62760fdd8af1bb9022100fb95d078795cac1cd4bf8fc2ccd47a109f80054d71ff04d577861a5a4c60cb2e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mednet-communities.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mednet-communities.net'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		006563748de86d87d824e0089d30dd3cc7078f5d5d5acd81d61e09991f72bca89cf87d79b072f6a32b46f2ea4fcba1e6365a21b3544b67b77b1ce8f3f89181a2a537073cd13bde167250c4af54e7f8a6688350fc797131cb8c5afca5d253e51d6b06830d2854e408197a6a01d55286a7d6157004c86f6fae99eeb1520ff4920e7eb28601e068acbdd0eafc820eab7170c04bc0609e3e4fe58c2f606ac903c7ef85a157b9b4526a912ca9ae0f27a60fa2c82fabd8a8d0f59ef6f6d735778467b688775917c79413aea57dde48532329404c4de6df6475be7f74afd66c8d7db79abac7e7bd3095c418f49b66964938c941e6bd4d8382cb401d91e73b8643ef00b6611b7c903b33c4a9d7dcd818280cd49767c13161823cdb00bf60ab224b2ec2b7ce273cba6fc2218f1e46bd4d27b9fa785f140607442254e7bf6bc129fc919f16ab72c38e03eaac4c8dc4d37e25e5a7d0ea5e5453f0f894822f187caab23ebbff780ff407cd47bdab64193213394ca43bf05a0fbc0c4833a9140f8630760856b91f0b92e0071e2e28d63d12042119bda3ef11070168b19723f403b35a2443eb8b1f13d2ddc1486419253859cf2a708dca615fecbdd539571a6f475894cb9302aa42a303207ed614a6ed5b60c2850b9e7bc22000f58384846b1d7e0a22d5cba9fb7a2c81e66110c8620343a2e1daa8b8656185b9095065535abe394e49967523bc2f