cdn03.ccedge.net

- ChinaCache North America, Inc. -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 18:a7:4d:8b:d8:e8:f4:55:80:b2:c9:d9:e4:eb:72:34 was issued on by thawte, Inc..

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

ChinaCache North America, Inc.

Organization: ChinaCache North America, Inc.
State / Province: California
Locality: Diamond bar
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 18:a7:4d:8b:d8:e8:f4:55:80:b2:c9:d9:e4:eb:72:34
Serial Number (int): 32770158299597754571251423566889710132
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 55:00:bb:fd:33:4e:d3:66:05:5c:c9:f1:e8:1f:6c:ab:3a:f4:a1:f9
Fingerprint (sha256): ac:ef:ee:79:25:6c:6c:35:51:c8:b5:93:e0:22:56:5f:04:34:72:98:76:58:ed:87:bb:ef:81:01:c5:4a:ce:e8

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate cdn03.ccedge.net

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn03.ccedge.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.partner.microsoftonline.cdnsvc.com
shell.partner.microsoftonline.cdnsvc.com
secure.aadcdn.partner.microsoftonline-p.net.cn
r4.partner.outlook.cn
secure.aadcdn.partner.microsoftonline-p.cn
powerbichinaperftest.data.powerbi.com
powerbichinaperftest.admin.powerbi.com
sites.powerbi.com
download.microsoft.com
download.cortana.cn.bing.com
cdn03.ccedge.net

Other certificates including the domain name ccedge.net

(limited to 100 certificates)
cdn04.ccedge.net
cdn04.ccedge.net
cdn04.ccedge.net
novacdn01.ccedge.net
cdn03.ccedge.net
cdn04.ccedge.net
www.chinacache.com
cdn03.ccedge.net
cdn04.ccedge.net
cdn01.ccedge.net
cdn04.ccedge.net
cdn04.ccedge.net
cdn04.ccedge.net
cdn03.ccedge.net
www.chinacache.com
novacdn01.ccedge.net
cdn04.ccedge.net
www.chinacache.com
cdn01.ccedge.net
cdn01.ccedge.net
cdn04.ccedge.net
cdn04.ccedge.net
www.chinacache.com
cdn04.ccedge.net
cdn04.ccedge.net
cdn04.ccedge.net
cdn04.ccedge.net
cdn01.ccedge.net
www.chinacache.com
cdn01.ccedge.net
www.chinacache.com
cdn04.ccedge.net
www.chinacache.com
cdn01.ccedge.net
cdn04.ccedge.net
cdn03.ccedge.net
cdn04.ccedge.net
cdn03.ccedge.net
cdn01.ccedge.net
www.chinacache.com
cdn04.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
www.chinacache.com
cdn01.ccedge.net
cdn03.ccedge.net
cdn01.ccedge.net
novacdn01.ccedge.net
cdn04.ccedge.net
cdn04.ccedge.net
www.chinacache.com
cdn04.ccedge.net
cdn04.ccedge.net
cdn01.ccedge.net
www.chinacache.com
cdn01.ccedge.net
cdn04.ccedge.net
cdn03.ccedge.net
cdn04.ccedge.net
cdn04.ccedge.net
novacdn01.ccedge.net
cdn04.ccedge.net
cdn01.ccedge.net
cdn04.ccedge.net
cdn04.ccedge.net
cdn01.ccedge.net
www.chinacache.com
cdn01.ccedge.net
cdn01.ccedge.net
cdn04.ccedge.net
cdn04.ccedge.net
cdn04.ccedge.net
cdn01.ccedge.net
cdn04.ccedge.net
cdn01.ccedge.net
cdn04.ccedge.net
novacdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn01.ccedge.net
cdn04.ccedge.net
novacdn01.ccedge.net
cdn01.ccedge.net
novacdn01.ccedge.net

Certificate

The complete raw certificate details for cdn03.ccedge.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2GSlFX8RKKVb1tjgDMA
m72pCVddXaHpQ/EdWSwHowWua9VjCl/XnOhw4qYvx519pPzb/tPBT1uQtwd8YPuF
bupSGgXynz/TLdLo+BQiXFzsWxDwePuFIbcDS37dKxAOLp7nbsnUk/Cm7NrbGisF
mbeUZmxfUjEDqikDBIgF40+YknWW6Z5M2ma8UdMEz2V+CSIZToc+0UM73s5H5qZL
7AY0hOCONAm/dad8S0eJuU+ZgcPy69/vJVLREuDwSddF5sBalt40dkJvOOEx3W0r
onnni9Bc+Nn78SsIBzbOxzQyqHaXIFJADTagX4iOt1lGokMg7FvOdHMJ4XggFy28
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32770158299597754571251423566889710132
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Diamond bar'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ChinaCache North America, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cdn03.ccedge.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23149724639242083983431761820462679312602501362848052272657038750793375061199563454794390175522635183394978618947777876554101681818822358144157640970121809054182148479830510400801105588630536365315355810854774232500889014278672884663507135257857553775700343206104157952790328983015807397211422300457590336768088496330348732066941060357250753616001438055228167914758968060844567881615674853113852792340857542370642812330513028275674567455832367796667618689894327653200693743711922894542701510222618049420860729601576494173458429899867778728104489147349449494318350810750362810665441017005008845391271781139419996470411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (374 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.partner.microsoftonline.cdnsvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shell.partner.microsoftonline.cdnsvc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.aadcdn.partner.microsoftonline-p.net.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r4.partner.outlook.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.aadcdn.partner.microsoftonline-p.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerbichinaperftest.data.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powerbichinaperftest.admin.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites.powerbi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.microsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.cortana.cn.bing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn03.ccedge.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0058db26e41bc62b35ff1d881a2ca2562671d13beb1e03b94d2ffbcd2f34a29e2b65584916bd23f133fbf7e545b47eda61608a8ac88bafcf5dd42e8f1d9c300cbc19951c31310a2f01eeefe7fba0b55729923615f9f0ef611d5ae48a50e1e2d8816a58d6757a3e26396f7671c703a0853b4bbad1d8d7dc84109dc37a667597296ed313d30daf0ca25586af914e8d2caabbfad769e8f849fb416ac321f4bbd23e84da5f39ba604c4d5e54a1db89c2826a802c3c157cf4358ee5ee3609d71f84f4110e60866c095e8e6eccbae8cf0a160d1e5a8ff51b82580499a5e8bf423ea8e56d80f64635ed75f1a898f376626fe0c2c44561ffbbe8e60bf958e0934ba64cf192