cashafrica.com
Issued by R3
About this certificate
This digital certificate with serial number 04:17:c1:cc:e2:61:b0:d8:6e:4b:60:8b:eb:b3:46:b2:44:62 was issued on by Let's Encrypt.
With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=cashafrica.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:17:c1:cc:e2:61:b0:d8:6e:4b:60:8b:eb:b3:46:b2:44:62Serial Number (int): 356533242989532634314177394849990248121442
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 03:a0:0f:82:c9:ab:1c:56:1b:93:f0:b1:48:dc:1e:e7:d7:e2:ba:b4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ac:62:87:ea:64:1b:95:27:f9:80:a3:17:ea:17:8d:18:4a:77:38:b5
Fingerprint (sha256): b7:9f:0c:f9:27:da:67:c3:e4:e6:b1:a6:fe:f8:f5:e9:1e:f7:9f:5d:3c:10:09:ec:3d:c6:60:f3:00:f8:2d:6a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate cashafrica.com
13
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cashafrica.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
babycorner.in
bnbexchange.com
caselaw.net
cashafrica.com
enerpac.co.in.911companion.us
eroticaudiobook.com.lawcomplete.com
healthandsafetyconsultants.com
minion.baby
olivenhainrealestate.com.wikkipeedia.com
rvjoblistings.com.libertyrecaps.com
shipateddy.com
teleportationtv.com
youngadultmalerehab.com
bnbexchange.com
caselaw.net
cashafrica.com
enerpac.co.in.911companion.us
eroticaudiobook.com.lawcomplete.com
healthandsafetyconsultants.com
minion.baby
olivenhainrealestate.com.wikkipeedia.com
rvjoblistings.com.libertyrecaps.com
shipateddy.com
teleportationtv.com
youngadultmalerehab.com
Other certificates including the domain name cashafrica.com
(limited to 100 certificates)
alexjonesexposed.org.cashafrica.com
cashafrica.com
cashafrica.com
wholesome.club
gauriganj.org
modawhale.org
cashafrica.com
a-sap.ca
cashafrica.com
cashafrica.com
defis.ec
pubtalks.org
mosandb.org
cashafrica.com
chain.dance
cashafrica.com
enerpactoolgroup.nl
cashafrica.com
southnorfolk.email
oh.cosfacts.org
homeschoolcpl.org
cashafrica.com
cashafrica.com
wholesome.club
gauriganj.org
modawhale.org
cashafrica.com
a-sap.ca
cashafrica.com
cashafrica.com
defis.ec
pubtalks.org
mosandb.org
cashafrica.com
chain.dance
cashafrica.com
enerpactoolgroup.nl
cashafrica.com
southnorfolk.email
oh.cosfacts.org
homeschoolcpl.org
Certificate
The complete raw certificate details for cashafrica.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGGjCCBQKgAwIBAgISBBfBzOJhsNhuS2CL67NGskRiMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMjYwNDQ5NTRaFw0yNDAzMjUwNDQ5NTNaMBkxFzAVBgNVBAMT DmNhc2hhZnJpY2EuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA /qF8MIGfj67osSdHC6Hru0BaIWjC0Kd/N7qRjPylAn2C2LM5/BDo9+5q5kOiyBjO aLsFtP9j9cBW66kNjWnmlhIzDIkiNu1ddnyi+OvaG6mNvOMfYvnm5yB9cy+//Kwb zQsi8tSlsz8RFe6a6tFx3oJG1dFcMrWxUWDkaBIPFg4Ue83olbDU7jsK7exy6EEO nyeZYgCn1qgDIISSkvBqG5ag6xKgkxeYQFPYQCbse79WZ9CgfsKFTzcJk0ddTvp6 0LajIOOEGg9L70znU0qb99W5p8+TuFw7lQ9U4UVXK1nZ2jy1vt9cQUqVkmjD6wem 0Po143vBFKuK4kLq/ozRWQIDAQABo4IDQTCCAz0wDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud DgQWBBQDoA+CyascVhuT8LFI3B7n1+K6tDAfBgNVHSMEGDAWgBQULrMXt1hWy65Q CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn LzCCAUgGA1UdEQSCAT8wggE7gg1iYWJ5Y29ybmVyLmlugg9ibmJleGNoYW5nZS5j b22CC2Nhc2VsYXcubmV0gg5jYXNoYWZyaWNhLmNvbYIdZW5lcnBhYy5jby5pbi45 MTFjb21wYW5pb24udXOCI2Vyb3RpY2F1ZGlvYm9vay5jb20ubGF3Y29tcGxldGUu Y29tgh5oZWFsdGhhbmRzYWZldHljb25zdWx0YW50cy5jb22CC21pbmlvbi5iYWJ5 gihvbGl2ZW5oYWlucmVhbGVzdGF0ZS5jb20ud2lra2lwZWVkaWEuY29tgiNydmpv Ymxpc3RpbmdzLmNvbS5saWJlcnR5cmVjYXBzLmNvbYIOc2hpcGF0ZWRkeS5jb22C E3RlbGVwb3J0YXRpb250di5jb22CF3lvdW5nYWR1bHRtYWxlcmVoYWIuY29tMBMG A1UdIAQMMAowCAYGZ4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAO1N3 dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGMpKwlFAAABAMARjBEAiBo zv2XGorAi/Td2Od0pOtLgu7IetZLtSBvtbjGzlaqmAIgEMGc4f/NnoSit9oimTBe F57m3rkKK3apHzOXCEpjHToAdwCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3ivia bfUX2AAAAYykrCUfAAAEAwBIMEYCIQCj4a9/uZl3iJKcGiKmGAEQnVFpdT5velJs UdR4C5CVegIhAKx2EasZQnANJhqdJYtOSj8a/nIoHn3Dp3KmfY12M5BIMA0GCSqG SIb3DQEBCwUAA4IBAQBAoIoP8JffD6XdptQFIWprAty55ULAiuTjGCBCOKmJ3cTW c1nr0/U/u6peFa7pIZW6KDhQljLKpFY880nCV0BmV9mYOHQmn0vaoovQTdjLT9rM 5LX58LA/kYT2iMKfvK9n92zlZZ0K13OnyUGxli073xbiQgTFtUkJoF7sIj6gi+nv POxpSGt2VqmuDUhIkx7glO9xVtJJ00DoEehS1h1zjwKPSttF0h3oeP8PBM8p1JED asbNwdfBkG+oPLk5/utZua14MECN4ySgujcfl9tKT3Vzmk54fTPeoyf0qwA2dtWu /h57A3tdcD8XOFUm/tCnFBsWd73/RGyhOEMZVC97 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/qF8MIGfj67osSdHC6Hr u0BaIWjC0Kd/N7qRjPylAn2C2LM5/BDo9+5q5kOiyBjOaLsFtP9j9cBW66kNjWnm lhIzDIkiNu1ddnyi+OvaG6mNvOMfYvnm5yB9cy+//KwbzQsi8tSlsz8RFe6a6tFx 3oJG1dFcMrWxUWDkaBIPFg4Ue83olbDU7jsK7exy6EEOnyeZYgCn1qgDIISSkvBq G5ag6xKgkxeYQFPYQCbse79WZ9CgfsKFTzcJk0ddTvp60LajIOOEGg9L70znU0qb 99W5p8+TuFw7lQ9U4UVXK1nZ2jy1vt9cQUqVkmjD6wem0Po143vBFKuK4kLq/ozR WQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 356533242989532634314177394849990248121442 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-26 04:49:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 04:49:53 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cashafrica.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 32144160739556762961081794484933100314743945002595570620010928291569005960113549339301166876279520810520887670815215044075240973439943688230082836270743735047228606075610264431023391248112538388337274493911305558318371079059307766947952949013948157672165008644550953270593397498123123990710562117358248798228716598432384082852616226764021013875762321013505189640701811967025769285974727926514805630554848786601077857238189531210368440703168299112707017224131688863725255180256296995754291906045847020573556669150204727053102740752856352214706838054146821404260066835920791104367815494036254134454252504179596399006041 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 03a00f82c9ab1c561b93f0b148dc1ee7d7e2bab4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (319 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'babycorner.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnbexchange.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caselaw.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashafrica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enerpac.co.in.911companion.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eroticaudiobook.com.lawcomplete.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthandsafetyconsultants.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minion.baby' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olivenhainrealestate.com.wikkipeedia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvjoblistings.com.libertyrecaps.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shipateddy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teleportationtv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youngadultmalerehab.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ca4ac25140000040300463044022068cefd971a8ac08bf4ddd8e774a4eb4b82eec87ad64bb5206fb5b8c6ce56aa98022010c19ce1ffcd9e84a2b7da2299305e179ee6deb90a2b76a91f3397084a631d3a007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018ca4ac251f0000040300483046022100a3e1af7fb9997788929c1a22a61801109d5169753e6f7a526c51d4780b90957a022100ac7611ab1942700d261a9d258b4e4a3f1afe72281e7dc3a772a67d8d76339048 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0040a08a0ff097df0fa5dda6d405216a6b02dcb9e542c08ae4e318204238a989ddc4d67359ebd3f53fbbaa5e15aee92195ba2838509632caa4563cf349c257406657d9983874269f4bdaa28bd04dd8cb4fdacce4b5f9f0b03f9184f688c29fbcaf67f76ce5659d0ad773a7c941b1962d3bdf16e24204c5b54909a05eec223ea08be9ef3cec69486b7656a9ae0d4848931ee094ef7156d249d340e811e852d61d738f028f4adb45d21de878ff0f04cf29d491036ac6cdc1d7c1906fa83cb939feeb59b9ad7830408de324a0ba371f97db4a4f75739a4e787d33dea327f4ab003676d5aefe1e7b037b5d703f17385526fed0a7141b1677bdff446ca1384319542f7b