sanantoniocondos.org
Issued by R3
About this certificate
This digital certificate with serial number 04:d9:b1:ab:bd:ad:03:b4:f8:0d:7a:f2:8b:c6:23:c0:68:63 was issued on by Let's Encrypt.
With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=sanantoniocondos.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:d9:b1:ab:bd:ad:03:b4:f8:0d:7a:f2:8b:c6:23:c0:68:63Serial Number (int): 422526582433984407161282330307267833915491
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 79:9b:d2:19:c9:32:bb:b6:cf:50:b0:5d:e4:07:88:42:f9:05:ea:dd
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 56:79:b0:87:cd:ed:ac:83:e2:31:7e:e5:77:70:3f:bd:ce:02:f4:b6
Fingerprint (sha256): c2:e4:50:23:1a:d6:0e:d6:48:2d:3c:b1:cf:22:fa:bd:c8:bd:8e:59:e5:9a:4a:d4:56:19:0e:e2:84:ae:46:c4
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate sanantoniocondos.org
17
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sanantoniocondos.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
arbitrageurs.fr
bicflix.com
buysellsportscollectibles.com
charcoalairpurifiers.com
earinjurylawyers.com
freedomcenterusa.net
glj.co.in
hamlincounty.com
hemppowering.com
lgbtqwork.com
omanbusinessportal.info
petsluk.com
sanantoniocondos.org
theaffiliatemarketplace.com
thevideo.news
truekeratin.com
www.lifebeginsatconception.com
bicflix.com
buysellsportscollectibles.com
charcoalairpurifiers.com
earinjurylawyers.com
freedomcenterusa.net
glj.co.in
hamlincounty.com
hemppowering.com
lgbtqwork.com
omanbusinessportal.info
petsluk.com
sanantoniocondos.org
theaffiliatemarketplace.com
thevideo.news
truekeratin.com
www.lifebeginsatconception.com
Other certificates including the domain name sanantoniocondos.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for sanantoniocondos.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGPjCCBSagAwIBAgISBNmxq72tA7T4DXryi8YjwGhjMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTkwMTEyNTVaFw0yNDA3MTgwMTEyNTRaMB8xHTAbBgNVBAMT FHNhbmFudG9uaW9jb25kb3Mub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA25SXAYHM4Li7x/pvWe4v2ixV1oZnX/DbIcW+eb3yx/Ic7iEXrGQoK4eR tcJfTOOPVDTdV0qnXdapadMXCegC3jZ/xcBPOxckF3e90H88WtluDzFSfvRjggqw 4b0hgtSaPZVr1CPR0bCtuh2uU8bQdpTjRWtR7b8gQb7pW4CfZqHC/82ZxijAO2vE thZge/JJgPF/F4hIiMW48t1I1y9jzfGymRocnuoaLFgWTsqriOAIe0cAoKJR2pwm Z3Q0LhV8XQjZ7b+MxZroX+TTzlcp0hRudJNyALDtHsfTa/UL3mHVtCu0owE0vkcD canzaz3GjJZ4x8iMEfAzprZxrucSDQIDAQABo4IDXzCCA1swDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBR5m9IZyTK7ts9QsF3kB4hC+QXq3TAfBgNVHSMEGDAWgBQULrMX t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0 dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu Y3Iub3JnLzCCAWcGA1UdEQSCAV4wggFagg9hcmJpdHJhZ2V1cnMuZnKCC2JpY2Zs aXguY29tgh1idXlzZWxsc3BvcnRzY29sbGVjdGlibGVzLmNvbYIYY2hhcmNvYWxh aXJwdXJpZmllcnMuY29tghRlYXJpbmp1cnlsYXd5ZXJzLmNvbYIUZnJlZWRvbWNl bnRlcnVzYS5uZXSCCWdsai5jby5pboIQaGFtbGluY291bnR5LmNvbYIQaGVtcHBv d2VyaW5nLmNvbYINbGdidHF3b3JrLmNvbYIXb21hbmJ1c2luZXNzcG9ydGFsLmlu Zm+CC3BldHNsdWsuY29tghRzYW5hbnRvbmlvY29uZG9zLm9yZ4IbdGhlYWZmaWxp YXRlbWFya2V0cGxhY2UuY29tgg10aGV2aWRlby5uZXdzgg90cnVla2VyYXRpbi5j b22CHnd3dy5saWZlYmVnaW5zYXRjb25jZXB0aW9uLmNvbTATBgNVHSAEDDAKMAgG BmeBDAECATCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1AEiw42vapkc0D+VqAvqd MOscUgHLVt0sgdm7v6s52IRzAAABjvQg1FsAAAQDAEYwRAIgVmLVVo4WyKgr4YsF N0g5lz90K/DnLJFSKwpVyhYUES4CIBX9Aa3gH7S4Kw3wom9+OEa4pUbsXFgBWkJM 2iwL9DjvAHYAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGO9CDU VAAABAMARzBFAiAIxQi1Xh+Ousv/dXB5QyrKwyZLjYf6a+01u+PaQL5vvQIhAMz6 mea4LOdXNOb8ZCYlAGf+p0QIj8pBpkrMC3B5PjseMA0GCSqGSIb3DQEBCwUAA4IB AQCMzIZcAnr8HlkNvPzsK6N8Nd7rPiMvambBoVnIbMsNfMEZomdnpQ+7AQxfJxMF pExrXDxtVaWFs+1y3r14pP24as2wcBez0/+/c2QbEtVDGShoHapfJ6+VAGzKCWjR qY54hlrFF7jNrUHR2rZFS4CsoWvupSPOjt3RY7UTOTkXef2VtL7oIHwrEbxZeq/K s/s+0rQWXzn5xPEdI6n43XQD57TkyNIw530x0U/NxYJ6CXcKDWMCkCdKl2YeEU9T HuMC3UPbtr6ghwG6Tr5+tG7TTrroOwuBJQiwtuOXnPifU7IqjpZDmLL1Jx8QqzHD tk5FwH830VO/ByQuKhkXo3g9 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25SXAYHM4Li7x/pvWe4v 2ixV1oZnX/DbIcW+eb3yx/Ic7iEXrGQoK4eRtcJfTOOPVDTdV0qnXdapadMXCegC 3jZ/xcBPOxckF3e90H88WtluDzFSfvRjggqw4b0hgtSaPZVr1CPR0bCtuh2uU8bQ dpTjRWtR7b8gQb7pW4CfZqHC/82ZxijAO2vEthZge/JJgPF/F4hIiMW48t1I1y9j zfGymRocnuoaLFgWTsqriOAIe0cAoKJR2pwmZ3Q0LhV8XQjZ7b+MxZroX+TTzlcp 0hRudJNyALDtHsfTa/UL3mHVtCu0owE0vkcDcanzaz3GjJZ4x8iMEfAzprZxrucS DQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 422526582433984407161282330307267833915491 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 01:12:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-18 01:12:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanantoniocondos.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27719461181758569481506669602601043510635596330505274058340035892491573177903351007789901793308159522878385275968139315901059459912063387437441285974024270109513499164020129164497527583808223847852232371693764479758176595831778836502763621681590642866815378994422293597746159599452700176781553363814724416012309915166838916866225957312787949601737457443709816330437055729802933976216561518545599365001881369161668366584048469505007955346058093293792822488601939353581413286735495546548363832680249602139118896508866351213790797385657176844584343166787101684262820250172430991604125138511599904138828178824885298467341 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 799bd219c932bbb6cf50b05de4078842f905eadd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (350 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrageurs.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicflix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buysellsportscollectibles.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charcoalairpurifiers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earinjurylawyers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freedomcenterusa.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glj.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamlincounty.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hemppowering.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgbtqwork.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omanbusinessportal.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petsluk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanantoniocondos.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theaffiliatemarketplace.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thevideo.news' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truekeratin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifebeginsatconception.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ef420d45b000004030046304402205662d5568e16c8a82be18b05374839973f742bf0e72c91522b0a55ca1614112e022015fd01ade01fb4b82b0df0a26f7e3846b8a546ec5c58015a424cda2c0bf438ef0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ef420d4540000040300473045022008c508b55e1f8ebacbff757079432acac3264b8d87fa6bed35bbe3da40be6fbd022100ccfa99e6b82ce75734e6fc6426250067fea744088fca41a64acc0b70793e3b1e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008ccc865c027afc1e590dbcfcec2ba37c35deeb3e232f6a66c1a159c86ccb0d7cc119a26767a50fbb010c5f271305a44c6b5c3c6d55a585b3ed72debd78a4fdb86acdb07017b3d3ffbf73641b12d5431928681daa5f27af95006cca0968d1a98e78865ac517b8cdad41d1dab6454b80aca16beea523ce8eddd163b51339391779fd95b4bee8207c2b11bc597aafcab3fb3ed2b4165f39f9c4f11d23a9f8dd7403e7b4e4c8d230e77d31d14fcdc5827a09770a0d630290274a97661e114f531ee302dd43dbb6bea08701ba4ebe7eb46ed34ebae83b0b812508b0b6e3979cf89f53b22a8e964398b2f5271f10ab31c3b64e45c07f37d153bf07242e2a1917a3783d