server01.freekwebdesign.nl
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:08:ba:b0:ab:e9:94:ce:1a:54:2a:37:68:94:7e:d9:06:c8 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=server01.freekwebdesign.nl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:08:ba:b0:ab:e9:94:ce:1a:54:2a:37:68:94:7e:d9:06:c8Serial Number (int): 264307270468909601164367154757537868875464
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e3:74:3f:e7:fb:e8:c1:98:17:89:67:df:65:29:8d:fb:3a:2d:dc:8b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 38:80:25:81:1e:30:e0:1b:56:0c:00:df:0b:9b:be:01:6b:5e:0b:7a
Fingerprint (sha256): b0:10:86:2d:37:65:d3:d9:6e:92:a5:10:42:d7:cf:04:34:82:8b:a8:02:63:d0:8e:56:df:80:17:a5:71:c2:4f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate server01.freekwebdesign.nl
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for server01.freekwebdesign.nl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
server01.freekwebdesign.nl
Other certificates including the domain name freekwebdesign.nl
(limited to 100 certificates)
server01.freekwebdesign.nl
server01.freekwebdesign.nl
freekwebdesign.nl
server01.freekwebdesign.nl
freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
freekwebdesign.nl
freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
freekwebdesign.nl
freekwebdesign.nl
server01.freekwebdesign.nl
freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
freekwebdesign.nl
server01.freekwebdesign.nl
freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
freekwebdesign.nl
server01.freekwebdesign.nl
freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
freekwebdesign.nl
freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
freekwebdesign.nl
freekwebdesign.nl
server01.freekwebdesign.nl
freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
freekwebdesign.nl
server01.freekwebdesign.nl
freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
server01.freekwebdesign.nl
Certificate
The complete raw certificate details for server01.freekwebdesign.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgISAwi6sKvplM4aVCo3aJR+2QbIMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MDQxMzQ1NDZaFw0x OTEyMDMxMzQ1NDZaMCUxIzAhBgNVBAMTGnNlcnZlcjAxLmZyZWVrd2ViZGVzaWdu Lm5sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkVHRWouriti8dEI A9YBCYMoaPQoyHgkAcUFFTKXTNcp4cmdyFHWgBXOwszJdUuc6p+TbUfpQ3MNaccY 8C7bGWcRAlBpoYCLHyYtB/datk4OKQ//hMfju0kOJzXNtN8QIwqO+poIAVBDVBZ8 vBY0uFGblgupAY6zlwvt7Cph7NHnLv1eoTmKxrfaiJaAbLlntV+hrKutLmpMnveB 2ygN7R6J2ITC0tYM+rQaodZBHJE7YbM3OHrhC8oLDhiUxlppmp0QIvzcM+xxd0DS meLHy1ZghzdHTr8CjHk0DwhMZ1bzuWNJYh/8qqsEhQVL4NWhE6nBa3I09xdodHfN 3iABHwIDAQABo4ICbjCCAmowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTjdD/n++jB mBeJZ99lKY37Oi3cizAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s ZXRzZW5jcnlwdC5vcmcvMCUGA1UdEQQeMByCGnNlcnZlcjAxLmZyZWVrd2ViZGVz aWduLm5sMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHW eQIEAgSB9ASB8QDvAHUA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4A AAFs/L0WmAAABAMARjBEAiBdIpdyH0AIHmcIu3gViuFjaa9LU79ymOHrgjpE6Ejp 6wIgSu5mMSPRu1rwYzuyRgCraoXGhdrPcq3AVwz2NVhRpjYAdgApPFGWVMg5Zbqq UPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWz8vRaLAAAEAwBHMEUCIQDs6yXPW4at UVVXh1vQEhH5HX9DvMa/VUB4A1q+3DtRrQIgJ0Ta6YJ29Uqyj71NBe5bxy2PM0hH JyZPqxnJTkpTyFwwDQYJKoZIhvcNAQELBQADggEBABNe1cmw9rT5Jj5bKX6KftNa DPIOu6W7i2Gfd7Wt9cLpyjzo5xExmI17/H3+0KtbBqr2qAWOZydsbK5l86p9CBk3 R9ynAXYYL9RBFlyAGOx/kAlgSNN3/bysH4w9DTj6xlTl7IHdU0dngl3Poyod1zBo 0RSw+XXM91MNc19yxUD3oiSzywBmqmRLAIbOML2N81ZCEv5FTVFvLio7nht3jtWa ZiEPYvb2tNGfWqc/n1cE42EMKZzoxCqW8I4/W4/NVSn3fz7m4tLWiFvJd+cZeL7F GmSqrImy/2pS55hioNE2vvf73Dvb9ZZoCTlSs610lVR7QYIV81xpEJ8OXDG7Z+Y= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkVHRWouriti8dEIA9YB CYMoaPQoyHgkAcUFFTKXTNcp4cmdyFHWgBXOwszJdUuc6p+TbUfpQ3MNaccY8C7b GWcRAlBpoYCLHyYtB/datk4OKQ//hMfju0kOJzXNtN8QIwqO+poIAVBDVBZ8vBY0 uFGblgupAY6zlwvt7Cph7NHnLv1eoTmKxrfaiJaAbLlntV+hrKutLmpMnveB2ygN 7R6J2ITC0tYM+rQaodZBHJE7YbM3OHrhC8oLDhiUxlppmp0QIvzcM+xxd0DSmeLH y1ZghzdHTr8CjHk0DwhMZ1bzuWNJYh/8qqsEhQVL4NWhE6nBa3I09xdodHfN3iAB HwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 264307270468909601164367154757537868875464 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-04 13:45:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-03 13:45:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'server01.freekwebdesign.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19979814638376798678327039188966397674924477773752110075622786894934464600437699231714196970527343698576083792383267931921269124393405966865399039104718224495209690316100146202558595631635147796227603525329296986199039807953020216388573373760884407954261275876431801231927092207667944955458229936244444581379918112567229571247669150247453654323980165691855374367975884933268070597187067317809320079599426386116552907328807333578444687554354597598203060886814555609655270020738790775005129117337708229890239633184300006724845460008952625706735707790770640062305610035470035211678127251233073288567042937566135490445599 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e3743fe7fbe8c198178967df65298dfb3a2ddc8b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'server01.freekwebdesign.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cfcbd1698000004030046304402205d2297721f40081e6708bb78158ae16369af4b53bf7298e1eb823a44e848e9eb02204aee663123d1bb5af0633bb24600ab6a85c685dacf72adc0570cf6355851a636007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016cfcbd168b0000040300473045022100eceb25cf5b86ad515557875bd01211f91d7f43bcc6bf554078035abedc3b51ad02202744dae98276f54ab28fbd4d05ee5bc72d8f33484727264fab19c94e4a53c85c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00135ed5c9b0f6b4f9263e5b297e8a7ed35a0cf20ebba5bb8b619f77b5adf5c2e9ca3ce8e71131988d7bfc7dfed0ab5b06aaf6a8058e67276c6cae65f3aa7d08193747dca70176182fd441165c8018ec7f90096048d377fdbcac1f8c3d0d38fac654e5ec81dd534767825dcfa32a1dd73068d114b0f975ccf7530d735f72c540f7a224b3cb0066aa644b0086ce30bd8df3564212fe454d516f2e2a3b9e1b778ed59a66210f62f6f6b4d19f5aa73f9f5704e3610c299ce8c42a96f08e3f5b8fcd5529f77f3ee6e2d2d6885bc977e71978bec51a64aaac89b2ff6a52e79862a0d136bef7fbdc3bdbf59668093952b3ad7495547b418215f35c69109f0e5c31bb67e6