noti.blog
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:85:96:55:8e:ee:49:5c:13:49:b2:04:17:fa:3b:7f:3a:73 was issued on by Let's Encrypt.
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=noti.blog
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:85:96:55:8e:ee:49:5c:13:49:b2:04:17:fa:3b:7f:3a:73Serial Number (int): 306794241039347438536693395626833540495987
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 7a:6f:09:e7:27:ef:82:d4:e0:27:02:aa:eb:14:d9:bb:e0:d4:d8:ab
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a4:7d:52:35:36:db:b0:e0:7c:1f:8e:8a:11:3d:9b:24:c5:fe:9f:8c
Fingerprint (sha256): bb:7d:bf:fd:ec:14:a5:dc:7f:7c:29:c7:55:11:20:a3:e8:47:49:cd:f5:b4:11:28:70:b5:05:42:9c:98:32:e5
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate noti.blog
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for noti.blog
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
citit.com
citit.nicatv.com
noti.blog
notiblog.nicatv.com
www.citit.com
www.citit.nicatv.com
www.noti.blog
www.notiblog.nicatv.com
citit.nicatv.com
noti.blog
notiblog.nicatv.com
www.citit.com
www.citit.nicatv.com
www.noti.blog
www.notiblog.nicatv.com
Other certificates including the domain name noti.blog
(limited to 100 certificates)
Certificate
The complete raw certificate details for noti.blog in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgISA4WWVY7uSVwTSbIEF/o7fzpzMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA5MDQxNTAxNDJaFw0x ODEyMDMxNTAxNDJaMBQxEjAQBgNVBAMTCW5vdGkuYmxvZzCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBALiRaAqyFiCl3BmffswCDSA7P2otIwhI+pCf07fL KN1QxjDHy+7sm8Dt4X4x4hfsZQdKLSP7PdFPXFcB7dwPC2mDelNO8g/azwBv3RB/ 3cjugDhFPGuwjERhycMvC3w3U5qJPpM90ALmEMLyNv+bADgmyAD4cPyU+/PsSPV4 10rATlryI9hQVHlq711bL0bC/VYjM49s34mxwkJQtcgNB5t2sIBkYCAfnmXOZb+0 oc7DkGPOWytXFzA/LG3SLmjmXuVmmoKWA5Gp5xH902lDjyqcOo1l8vLXlulVgmKk QsvM8+KDN/9M6PMdvKkFzsUbN696rG7B4PtDj9TrpWaEdOcCAwEAAaOCA5MwggOP MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUem8J5yfvgtTgJwKq6xTZu+DU2KswHwYD VR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4G CCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8G CCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCB lQYDVR0RBIGNMIGKggljaXRpdC5jb22CEGNpdGl0Lm5pY2F0di5jb22CCW5vdGku YmxvZ4ITbm90aWJsb2cubmljYXR2LmNvbYINd3d3LmNpdGl0LmNvbYIUd3d3LmNp dGl0Lm5pY2F0di5jb22CDXd3dy5ub3RpLmJsb2eCF3d3dy5ub3RpYmxvZy5uaWNh dHYuY29tMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB 1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsG AQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQg dXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3 aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRz ZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA dQDbdK/uyynssf7KPnFtLOW5qrs294Rxg8ddnU83th+/ZAAAAWWlUW7tAAAEAwBG MEQCIC/2YlEqGXMImwyJqM5ipM30HEcvHvhvtTecnDGlg7BjAiBQ/LVN0FZDTo5i h3eAa+g/G1sY5TUmPKTwXe5S7j9xSQB3ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLc pMMM9OVFR/R4AAABZaVRbwAAAAQDAEgwRgIhAOjm8QgIhr1+H+BboG6L6wOgt66j cGuVwvJMyapJXEwpAiEA8xlXzMRjn2EfhFu+stsp9qWnXaVdAqc6KJhdV6SsAjow DQYJKoZIhvcNAQELBQADggEBACWY4S4dmFevj2SpDt0dI8t2V6X684vVkPMZ6Yc3 gqm8aPC8BU8ir7xBBD6HQ7p+6nbUaHnJ8FbZ6cPDuNHo0+3z+csw64dzzHyq/F3j 0izY+4/ifHUkbx/Ar4IbDPw7aJYliZtl5EnBiu13EGc3i/ZFd87TNTpZ59aPsO8e M0QXTrr4n/+5OpR8IglF1xn53sYCyl3zVgFBIA/djau/mKNfsI7mPk/6cydad39I M726azVZ80QD+hLF7BOBPgHXUsI/TSFKKf4VfJz1Zy1u2kn7vqtfNKpTCDnF0sJb io3h3gOBaVBEypuAfwTgzK7dnhka7LNulpeB33GnYnEJdkI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJFoCrIWIKXcGZ9+zAIN IDs/ai0jCEj6kJ/Tt8so3VDGMMfL7uybwO3hfjHiF+xlB0otI/s90U9cVwHt3A8L aYN6U07yD9rPAG/dEH/dyO6AOEU8a7CMRGHJwy8LfDdTmok+kz3QAuYQwvI2/5sA OCbIAPhw/JT78+xI9XjXSsBOWvIj2FBUeWrvXVsvRsL9ViMzj2zfibHCQlC1yA0H m3awgGRgIB+eZc5lv7ShzsOQY85bK1cXMD8sbdIuaOZe5WaagpYDkannEf3TaUOP Kpw6jWXy8teW6VWCYqRCy8zz4oM3/0zo8x28qQXOxRs3r3qsbsHg+0OP1OulZoR0 5wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 306794241039347438536693395626833540495987 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-04 15:01:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-03 15:01:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'noti.blog' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23299550688496580668374596211799839853282818997750915338825758566412118393723672663116828034872087194879881262651325276397959163283532591413520728312759748505251114991949333534084523415610524846635657704724397580692715999200592892699749596042570781088581834031922858042402916638820794212495493632352340920924389729387933513752696811675205824747095725340151127138098019306582423197801042361425099486577910166483489933998277845128798242424080681794421141147029323369878768988362160918591984940018233857911756017279884170754504229977625461216041444486459387727175237102712449208039549145744102690474814665581686893606119 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7a6f09e727ef82d4e02702aaeb14d9bbe0d4d8ab . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citit.nicatv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noti.blog' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notiblog.nicatv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citit.nicatv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noti.blog' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notiblog.nicatv.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165a5516eed000004030046304402202ff662512a1973089b0c89a8ce62a4cdf41c472f1ef86fb5379c9c31a583b063022050fcb54dd056434e8e628777806be83f1b5b18e535263ca4f05dee52ee3f7149007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165a5516f000000040300483046022100e8e6f1080886bd7e1fe05ba06e8beb03a0b7aea3706b95c2f24cc9aa495c4c29022100f31957ccc4639f611f845bbeb2db29f6a5a75da55d02a73a28985d57a4ac023a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 002598e12e1d9857af8f64a90edd1d23cb7657a5faf38bd590f319e9873782a9bc68f0bc054f22afbc41043e8743ba7eea76d46879c9f056d9e9c3c3b8d1e8d3edf3f9cb30eb8773cc7caafc5de3d22cd8fb8fe27c75246f1fc0af821b0cfc3b689625899b65e449c18aed771067378bf64577ced3353a59e7d68fb0ef1e3344174ebaf89fffb93a947c220945d719f9dec602ca5df3560141200fdd8dabbf98a35fb08ee63e4ffa73275a777f4833bdba6b3559f34403fa12c5ec13813e01d752c23f4d214a29fe157c9cf5672d6eda49fbbeab5f34aa530839c5d2c25b8a8de1de0381695044ca9b807f04e0ccaedd9e191aecb36e969781df71a76271097642