allulose.id
Issued by R3
About this certificate
This digital certificate with serial number 03:74:46:3a:71:7e:0a:88:42:bf:1d:c0:be:a8:e2:7f:f9:0c was issued on by Let's Encrypt.
With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=allulose.id
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:74:46:3a:71:7e:0a:88:42:bf:1d:c0:be:a8:e2:7f:f9:0cSerial Number (int): 300902961772930634101376279626301059365132
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c8:36:7a:7e:fe:56:ff:e7:6c:27:1c:ea:83:28:ac:b0:77:63:a3:15
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 90:8b:4c:a3:e4:b1:89:46:28:4e:a1:fb:eb:08:eb:b2:72:3b:a2:7d
Fingerprint (sha256): b8:3b:03:22:51:ef:2c:4e:05:80:bf:fd:79:0c:fc:56:d9:ef:5f:24:dd:4a:2e:98:51:94:97:a4:11:94:90:7d
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate allulose.id
19
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for allulose.id
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aipaulo.com
allulose.id
breakingthe.news
davidbatemanwasright.com
drhumphreykeever.com
easygrinds.com
enerpacwh.com
goshenrolloff.com
houstoncommericalplumber.com
marketingsemantico.com
martai.com
nft.bible
nutuk.com
paragonah.com
totalartcinema.com
toyeu.com
vegetationnation.com
weddingproart.com
zombiewrangler.info
allulose.id
breakingthe.news
davidbatemanwasright.com
drhumphreykeever.com
easygrinds.com
enerpacwh.com
goshenrolloff.com
houstoncommericalplumber.com
marketingsemantico.com
martai.com
nft.bible
nutuk.com
paragonah.com
totalartcinema.com
toyeu.com
vegetationnation.com
weddingproart.com
zombiewrangler.info
Other certificates including the domain name allulose.id
(limited to 100 certificates)
Certificate
The complete raw certificate details for allulose.id in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgISA3RGOnF+CohCvx3Avqjif/kMMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMjQxODI4NTdaFw0yNDA2MjIxODI4NTZaMBYxFDASBgNVBAMT C2FsbHVsb3NlLmlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlF8 D421fQcc0uYu2bTsHUzCR1SOYP5mNq4QMufESsW+2+Vn/4NOQe4uJZvfgqt20Fuh eqpSfX+G8xE6tVc2W/FZgJ2oCAF1GO+z4vu2HKQ/v6gX7QS9oP8tvjRHAjDWyOSa uXub0neHBnPrnEjKP5l8uVMzJ9XWXzfuJ4qlfR01Npgw6HhDzl2XIvx8TnnBn2ly 6sqZv3L61iisLvMCJwfV/pyK3A3NdWLQyM0kdwVJULffbFPlGglPFY5HmXzfdv0m A6UXizpKjsvfe/9f7AcKpfuFufXBMi7xI4qHKvT+NmOdvv7jl08oeZpdtn7L98V0 THfIuDE+AgktGvVKCwIDAQABo4IDWTCCA1UwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBTINnp+/lb/52wnHOqDKKywd2OjFTAfBgNVHSMEGDAWgBQULrMXt1hWy65QCUDm H6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9yMy5v LmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3JnLzCC AV8GA1UdEQSCAVYwggFSggthaXBhdWxvLmNvbYILYWxsdWxvc2UuaWSCEGJyZWFr aW5ndGhlLm5ld3OCGGRhdmlkYmF0ZW1hbndhc3JpZ2h0LmNvbYIUZHJodW1waHJl eWtlZXZlci5jb22CDmVhc3lncmluZHMuY29tgg1lbmVycGFjd2guY29tghFnb3No ZW5yb2xsb2ZmLmNvbYIcaG91c3RvbmNvbW1lcmljYWxwbHVtYmVyLmNvbYIWbWFy a2V0aW5nc2VtYW50aWNvLmNvbYIKbWFydGFpLmNvbYIJbmZ0LmJpYmxlggludXR1 ay5jb22CDXBhcmFnb25haC5jb22CEnRvdGFsYXJ0Y2luZW1hLmNvbYIJdG95ZXUu Y29tghR2ZWdldGF0aW9ubmF0aW9uLmNvbYIRd2VkZGluZ3Byb2FydC5jb22CE3pv bWJpZXdyYW5nbGVyLmluZm8wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEFBgorBgEE AdZ5AgQCBIH2BIHzAPEAdwCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX 2AAAAY5x8ABdAAAEAwBIMEYCIQCuIJZQ+QnHBSMZ7zvDcxnzVX4GifVKPXulv6Lf JmU4BgIhAPww+oFWXDkR5Zf3F2p3x5dGwt9a9EtFSdrxVhewtzuvAHYAdv+IPwq2 +5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGOcfAAlgAABAMARzBFAiEAsavb Avlq/JFDv64luCkR35S+6gkED36ZClhxas/fHXACICtaytPDZFwgkYGigxd7X4Fc aqQVZYtV9CpROlFTO/2CMA0GCSqGSIb3DQEBCwUAA4IBAQClng9H+R9/fFgpJac0 2ZmlEy9bCaoOQnG9CCsKL1BO+3wFxQNk4Jtv9CtgLgCm2J2V6f1Mpgbh4uZJp5Ky w6d7dIpZvKevx386LkU5xhHd9gGkvuZkMmx0pMbJ6A6QMlqSqHBytIDz2atf1J2p gxpxqLgtXucC7/HpZd4q1D021nvJYH2pI6Tws4IAqyB78BITMUGEQ8q/q8hIlUO9 WQblepHPirP3AWrGM3sxxXpmlgwgPea2iULkhm/eERniNaVCPNxmqA7VUtOnYovV 4Z8Wlk1uw5tPvzULplKjd46FKlIyflKRycF7BX8Q5KScZ4c9xtHKI940BuFALsyk nQYp -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlF8D421fQcc0uYu2bTs HUzCR1SOYP5mNq4QMufESsW+2+Vn/4NOQe4uJZvfgqt20FuheqpSfX+G8xE6tVc2 W/FZgJ2oCAF1GO+z4vu2HKQ/v6gX7QS9oP8tvjRHAjDWyOSauXub0neHBnPrnEjK P5l8uVMzJ9XWXzfuJ4qlfR01Npgw6HhDzl2XIvx8TnnBn2ly6sqZv3L61iisLvMC JwfV/pyK3A3NdWLQyM0kdwVJULffbFPlGglPFY5HmXzfdv0mA6UXizpKjsvfe/9f 7AcKpfuFufXBMi7xI4qHKvT+NmOdvv7jl08oeZpdtn7L98V0THfIuDE+AgktGvVK CwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 300902961772930634101376279626301059365132 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 18:28:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-22 18:28:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'allulose.id' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23015553063749024398528206988014368787821398586650971129002240893865925647585461327906163047854557618668096561213430874910598754650919307897657362773188804452918728745212961568757336656264916320820978633252140948876448449788920464384154078125826754865033446681751021771600764307966202638023263603717382971423734397642568501661662779476001375079926059212273797843069702043265190882910740162104936080865344125630389427060720446465891342983703875790814412411310692891600267814788460682445472226106272713322331715857826071943457278026021811806796808147001304639289724475282761158492471650040661400645353356741962661972491 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c8367a7efe56ffe76c271cea8328acb07763a315 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (342 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aipaulo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allulose.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'breakingthe.news' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'davidbatemanwasright.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drhumphreykeever.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easygrinds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enerpacwh.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goshenrolloff.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houstoncommericalplumber.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingsemantico.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martai.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nft.bible' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nutuk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paragonah.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalartcinema.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toyeu.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vegetationnation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weddingproart.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zombiewrangler.info' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e71f0005d0000040300483046022100ae209650f909c7052319ef3bc37319f3557e0689f54a3d7ba5bfa2df26653806022100fc30fa81565c3911e597f7176a77c79746c2df5af44b4549daf15617b0b73baf00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e71f000960000040300473045022100b1abdb02f96afc9143bfae25b82911df94beea09040f7e990a58716acfdf1d7002202b5acad3c3645c209181a283177b5f815c6aa415658b55f42a513a51533bfd82 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00a59e0f47f91f7f7c582925a734d999a5132f5b09aa0e4271bd082b0a2f504efb7c05c50364e09b6ff42b602e00a6d89d95e9fd4ca606e1e2e649a792b2c3a77b748a59bca7afc77f3a2e4539c611ddf601a4bee664326c74a4c6c9e80e90325a92a87072b480f3d9ab5fd49da9831a71a8b82d5ee702eff1e965de2ad43d36d67bc9607da923a4f0b38200ab207bf0121331418443cabfabc8489543bd5906e57a91cf8ab3f7016ac6337b31c57a66960c203de6b68942e4866fde1119e235a5423cdc66a80ed552d3a7628bd5e19f16964d6ec39b4fbf350ba652a3778e852a52327e5291c9c17b057f10e4a49c67873dc6d1ca23de3406e1402ecca49d0629