*.torontolife.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:a6:df:25:2a:3a:ad:0b:8e:6c:28:4d:8c:a4:21:a4 was issued on by Amazon.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.torontolife.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:a6:df:25:2a:3a:ad:0b:8e:6c:28:4d:8c:a4:21:a4
Serial Number (int): 16817183149788704504079262914586091940
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2b:e2:6a:a6:ba:e9:f5:ff:03:bb:68:9f:6e:b3:c7:5b:e9:1b:bf:d0
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 39:6b:bd:39:1b:77:b1:44:85:8d:1e:c7:27:79:64:cf:c3:d2:c7:31
Fingerprint (sha256): c9:08:b2:58:82:9f:f6:bd:af:47:96:09:a6:8a:8f:0c:ee:30:57:c0:39:6e:5d:90:2c:9e:af:72:5f:fa:64:fc

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.torontolife.com

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.torontolife.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.torontolife.com
canadianbusiness.com
4000-15-684578694a-shop.darwin.cx
hellomagazine.ca
*.mightymag.ca
*.chatelaine.com
*.secure.canadianbusiness.com
torontolife.com
*.fr.chatelaine.com
fashionmagazine.com
ottawamagazine.com
chatelaine.com
*.todaysparent.com
*.canadianbusiness.com
*.macleans.ca
todaysparent.com
*.fashionmagazine.com
quillandquire.com
macleans.ca
*.chatelaine.darwin.cx
mightymag.ca
*.quillandquire.com
*.macleans.darwin.cx
*.fr.chatelaine.darwin.cx
*.hellomagazine.darwin.cx
*.ottawamagazine.com
*.hellomagazine.ca
*.todaysparent.darwin.cx

Other certificates including the domain name torontolife.com

(limited to 100 certificates)
stage.torontolife.com
nfoon.torontolife.com
stage.torontolife.com
torontolife.com
stage.torontolife.com
tburden.torontolife.com
www.torontolife.com
torontolife.com
secure.torontolife.com
members.torontolife.com
www.torontolife.com
*.torontolife.com
*.torontolife.com
members.torontolife.com
nfoon.torontolife.com
dev.torontolife.com
tburden.torontolife.com
qa.torontolife.com
*.torontolife.com
dev.torontolife.com
www.torontolife.com
*.torontolife.com
stage.torontolife.com
members.torontolife.com
secure.torontolife.com
torontolife.com
qa.torontolife.com
bhill.torontolife.com
stage.torontolife.com
dev.torontolife.com
*.torontolife.com
*.torontolife.com
qa.torontolife.com
secure.torontolife.com
*.torontolife.com
udobrowolska.torontolife.com
stage.torontolife.com
torontolife.com
stage.torontolife.com
torontolife.com
www.torontolife.com
tburden.torontolife.com
qa.torontolife.com
dev.torontolife.com
stage.torontolife.com
*.torontolife.com
udobrowolska.torontolife.com
ebrukson.torontolife.com
www.torontolife.com
stage.torontolife.com
torontolife.com
secure.torontolife.com
www.torontolife.com
hbaradaran.torontolife.com
dev.torontolife.com
dev.torontolife.com
www.torontolife.com
dev.torontolife.com
stage.torontolife.com
jmykolyn.torontolife.com
dev.torontolife.com
tburden.torontolife.com
torontolife.com
tburden.torontolife.com
dev.torontolife.com
tburden.torontolife.com
www.torontolife.com
*.torontolife.com
torontolife.com
www.torontolife.com
nfoon.torontolife.com
members.torontolife.com
*.torontolife.com
*.torontolife.com
torontolife.com
hbaradaran.torontolife.com
*.torontolife.com
tburden.torontolife.com
dev.torontolife.com
hbaradaran.torontolife.com
torontolife.com
listings.torontolife.com
stage.torontolife.com
torontolife.com
*.torontolife.com
tburden.torontolife.com
dev.torontolife.com
members.torontolife.com
members.torontolife.com
www.torontolife.com
*.torontolife.com
www.torontolife.com
*.torontolife.com
dev.torontolife.com
*.torontolife.com
tburden.torontolife.com
www.torontolife.com
*.torontolife.com
torontolife.com
*.torontolife.com

Certificate

The complete raw certificate details for *.torontolife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBDrDI3JI392XyJoBkLj
MfTbPbbxqi41eM67vPI89+vGsOZ/QUKFXtcp5MfRfD7UmWV0DZV9a/BCv2RRiZJW
Ki/x0JhnP3qH2v5xdqQDMtNfKIS+wohjpN6cQdk8LToyQtSp/7gLA86r0mPVqYma
FjF0v/u54LtL/7LiAMvRwIMfIuQy/ZctveI7JsXN+gx+PrySxngOnSlDzHPZlyEq
yFcPGRvJBjeoCWqWkeMegfYh+ygk3fQVr0dUXdJ/JNhJIwqyHANrPbIvFxDfSFs6
41yxgjT62MjSTF8lrT9pNke65d26Q3/diktNsSADqHrb2UWFb/eIzEAlQJRAw8O7
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16817183149788704504079262914586091940
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.torontolife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21721331109944284382854292533898433888278268817118453663057240083854945884145294689392987955699986262561319834404747125245604974106975095810321853873969424195027367837954884893325558032681828502286629931225945829244925374964774563084718850922556163943747722574996183084020173107964933821319813330991494428672060950421420412158880768320292305842670237767727586179453788807224541669577152950601350995461690936792002277108687568703602361409955106178846208251539657994838946936224320311916393605448470882561919156176536664829442155442620708056014339660342038505902767510428517528122290375639179899261351109660496261004119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2be26aa6bae9f5ff03bb689f6eb3c75be91bbfd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (593 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torontolife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadianbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4000-15-684578694a-shop.darwin.cx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellomagazine.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mightymag.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chatelaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.canadianbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torontolife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fr.chatelaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fashionmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ottawamagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatelaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todaysparent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canadianbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macleans.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todaysparent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fashionmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quillandquire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macleans.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chatelaine.darwin.cx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mightymag.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quillandquire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macleans.darwin.cx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fr.chatelaine.darwin.cx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellomagazine.darwin.cx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ottawamagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellomagazine.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todaysparent.darwin.cx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008976c62a11994e4ce8c0056e2d79c99b584c66f716008dcc2b43d6f8a0e33eb4dd679910d32c5125f2b6a30c63630215e27d16599ca419b32fa16a6afc1f89765604d660cfefe1dea4f4a106c16912f29a0dfdda7ad613ceb5863e6af0b528ef3897e4cfb646e617d9336b6b041a68721e22dfe81253dcaad194d3998424f08f89eb442901df68728912a4ff684435fdd61918881e2f6bb154a81146ef73da3cc9c4285267138ec50beddd65278725e01f43aed71aea7e3a3ac7f797d83909ee5eea3d02a2e7f2c510ea84b1a317ad646f66de4e5d8b5cb99446d04e1e7f9fa12e6a7821d84852710771cef02788496728588871dea00ed240e2101ede8d0329