minimeijeri.fi

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a9:63:3a:3b:50:5a:0d:ac:05:4b:d1:ef:2c:59:ef:1c:12 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=minimeijeri.fi

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a9:63:3a:3b:50:5a:0d:ac:05:4b:d1:ef:2c:59:ef:1c:12
Serial Number (int): 318976473732748131752455949082801774468114
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1d:ac:08:6c:2d:1a:d4:c3:e1:bf:6e:6b:cc:0f:53:8a:1e:89:e3:26
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 07:4b:2a:dd:7b:35:18:57:05:b4:07:d9:df:c7:fe:86:c7:00:82:a9
Fingerprint (sha256): b1:ed:39:0d:62:f0:23:8b:23:8a:18:4f:9b:a3:eb:b5:88:75:e8:2a:b7:02:c0:3d:48:af:85:22:2e:20:d9:59

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate minimeijeri.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for minimeijeri.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

minimeijeri.fi
www.minimeijeri.fi

Other certificates including the domain name minimeijeri.fi

(limited to 100 certificates)
minimeijeri.fi
minimeijeri.fi
minimeijeri.fi
minimeijeri.fi
minimeijeri.fi
minimeijeri.fi
minimeijeri.fi
imperium.zartura.com
minimeijeri.fi
minimeijeri.fi
minimeijeri.fi
minimeijeri.fi
www.minimeijeri.fi
minimeijeri.fi
minimeijeri.fi
www.onlinesudoku.co
minimeijeri.fi
mut8.app

Certificate

The complete raw certificate details for minimeijeri.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHHDCCBgSgAwIBAgISA6ljOjtQWg2sBUvR7yxZ7xwSMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA2MjgyMDE3MThaFw0x
ODA5MjYyMDE3MThaMBkxFzAVBgNVBAMTDm1pbmltZWlqZXJpLmZpMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2jsML0HVymGtPsE5hJ7vdnv0jI3ScQUR
OXnLUaknvcM6RJadYeeYNX3roK+3Xb1CpgN0pqjxJOshprD3CXeBLxtX7PaXrrWN
4Oar/tPafVUfy9iPhC4lEcmbBskO+eEl7b9FBS3CMmUgpqSc7p8ETlc/jqZWXR4n
KqSriacVHh1bQFCcM2s6WwbA1GrpIT0DmDN7opWJ1Kka3g6zWV9cwBFFxxKRNLNg
zYeskgaVUDw4c8bjf3FXx+KznyJUnbLl2zONQHl3Tsivvd7IKFGlv6I5t5/In8Ss
DGvLxS9+sxGotXVu72eGA7v4aEEEM6pO/Ya12ZPtQ4iRAzBtIeA8zzTmTgFlYPr2
E8tJyrW+9fL5BWw1tp1+XjZ2TEGtDgkjcUOuvlya1vxqpUTOIAbDks9FGD5v1/58
QSh/s/k90KR+oVs2oWXAMXAooftqYmxk1Q4ZogHKHujUXoe2UUDZT8OPp4Trbep7
+Gl8Yy0ZyiWer21FlF8X7cFJdkZ7bZZ/Fsg268S3ttTZrjjEGvQCgwEiiRskzcha
X8+EX6V/lwEmGg6aQxcgkWn6oxCZ7F7Ih56fvyAg+1dh2JL7aFmNF3bMURuS4wSh
o6nu1TEqBHZr+U1jnIPuAhVpe4vuEUSgUjNHSfO8otj0Km1Tyn5XCwIMRBSHpAj+
/in4FllIdjcCAwEAAaOCAyswggMnMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUHawI
bC0a1MPhv25rzA9Tih6J4yYwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAtBgNVHREEJjAkgg5taW5pbWVpamVyaS5maYIS
d3d3Lm1pbmltZWlqZXJpLmZpMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsr
BgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw
dC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25s
eSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4g
YWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQg
aHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEFBgorBgEEAdZ5
AgQCBIH2BIHzAPEAdgDbdK/uyynssf7KPnFtLOW5qrs294Rxg8ddnU83th+/ZAAA
AWRIQfBLAAAEAwBHMEUCIQDN2Clt8Z82r2y092ZXGlCKFxTUFcHfL6rPTgIxbXw2
/gIgZckHBl27PWm68j3TC1L/j33rw1RLCeHIrS+W2rblaN4AdwApPFGWVMg5Zbqq
UPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWRIQfBdAAAEAwBIMEYCIQDpKQDGFAiu
ZdwfGvh20cYXc9VtR0DqewDOg/OFDwnfYgIhAOH/+W0Ebf05jQm7LCzQIareqtDW
IG1p5v1GhxXxmJ5xMA0GCSqGSIb3DQEBCwUAA4IBAQAICD6runXh++BBIZey6l4a
UqaA4JXHno8Qp44K+oRcaRuirZilQx5TIUE9Z6lgg1CmXP73EZWGlpcWreYgSwvY
RWFuoojRazTtxRW3Z5gIBro8+Y3cHdmT9Ti1x/3QMKT5fyPhnu/Gd8HZM3lWQ5NE
nWvxyGQ/ALEM8I0ZsdpfLfTv/XanWIbC1S1M6Gcbs5FdkE6QoUhTthzMH6izDRfg
Qz7nS0qq9Eq4QM/SQUVMl4eQmm6MP8hNaarNZejYytvG1uh8lcGKocWIuUrT4zV7
yxcKx+NyxBfIR7MaUGhc8ag2MKn28EnyaYIyrJc47zJW8RTW7rPBvqTpTXGMiOZB
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318976473732748131752455949082801774468114
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-28 20:17:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-26 20:17:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'minimeijeri.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 890303395793652722495186182126562992842595758302577355602697685463262440001525337634317502666237411229447116545245088949528603016741784386176928336579059583400062667951361210984519115199514243037059078891400784077198405838529172575025000292992924220240338700501173952741412249568989149047246983041476771586144072406407949062449627801669519604632585540257105775448829017919014729266510177289815664674039790194389269452069747716647105443297850899053341337134599665875322420217830732106121721019353152237708144439440568277256477912507851460849982027291339929352753628033974738480937595279711448039721499472467073913601197082361596298027187669068286279046091284258029573675393998595419768901407413998718100681593430209185794243194309734356522915658403854768926520874592341281941724114997510806582340105748828215104423821345916482535769831167601564820732843332161665407334864943799460398234197669618711333002778541779655559096515834345207791923340899738419604955229862353844248421906799475390511923189333861266983292261803881317711614449342898633181414604963829923356919691522432096762324806056358984444310893778673117344320395430313425957257312228764570510594705495858573649962199823690116870744045868443841770450149584513711163474212407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1dac086c2d1ad4c3e1bf6e6bcc0f538a1e89e326
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minimeijeri.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minimeijeri.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf64000001644841f04b0000040300473045022100cdd8296df19f36af6cb4f766571a508a1714d415c1df2faacf4e02316d7c36fe022065c907065dbb3d69baf23dd30b52ff8f7debc3544b09e1c8ad2f96dab6e568de007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001644841f05d0000040300483046022100e92900c61408ae65dc1f1af876d1c61773d56d4740ea7b00ce83f3850f09df62022100e1fff96d046dfd398d09bb2c2cd021aadeaad0d6206d69e6fd468715f1989e71
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0008083eabba75e1fbe0412197b2ea5e1a52a680e095c79e8f10a78e0afa845c691ba2ad98a5431e5321413d67a9608350a65cfef7119586969716ade6204b0bd845616ea288d16b34edc515b767980806ba3cf98ddc1dd993f538b5c7fdd030a4f97f23e19eefc677c1d93379564393449d6bf1c8643f00b10cf08d19b1da5f2df4effd76a75886c2d52d4ce8671bb3915d904e90a14853b61ccc1fa8b30d17e0433ee74b4aaaf44ab840cfd241454c9787909a6e8c3fc84d69aacd65e8d8cadbc6d6e87c95c18aa1c588b94ad3e3357bcb170ac7e372c417c847b31a50685cf1a83630a9f6f049f2698232ac9738ef3256f114d6eeb3c1bea4e94d718c88e641