eshop.metalvisquatro.cz
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ae:90:9a:27:30:0a:15:8e:84:72:98:91:80:a4:f4:8d:56 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=eshop.metalvisquatro.cz
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ae:90:9a:27:30:0a:15:8e:84:72:98:91:80:a4:f4:8d:56Serial Number (int): 320738198879453322085311350505291325410646
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 6a:e9:23:f8:a1:5b:ee:e9:4a:10:45:7e:04:25:e4:24:be:da:fd:9c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 1f:23:f7:ff:25:25:c3:55:3f:69:34:bc:9d:8d:cc:6e:1a:60:e3:17
Fingerprint (sha256): ca:54:e3:58:43:88:9d:40:62:d0:00:bc:9b:66:11:26:24:fb:6f:00:9f:6e:8f:30:bf:d8:94:cc:c7:d3:ad:9a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate eshop.metalvisquatro.cz
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for eshop.metalvisquatro.cz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
eshop.metalvisquatro.cz
Other certificates including the domain name metalvisquatro.cz
(limited to 100 certificates)
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
eshop.metalvisquatro.cz
Certificate
The complete raw certificate details for eshop.metalvisquatro.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGGzCCBQOgAwIBAgISA66QmicwChWOhHKYkYCk9I1WMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA2MDkwMjAwMjBaFw0x ODA5MDcwMjAwMjBaMCIxIDAeBgNVBAMTF2VzaG9wLm1ldGFsdmlzcXVhdHJvLmN6 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuILAazLlG8U9MxuD+qiz yr5lhyUvqZVG/CnZIq7sxC9XCO/6fwA0Z39oK3ywCHYxG+O9QBaPbYMx9+vnQnJn CP3nEpl800N1cPiVb+4/f2VGRAg2PkG5Q/s+pRRJifnGOHlApKy0ZiqejfeUO9av LIctc36sa31IiBuhK9v3bkTaZIWCFcM1kSVCA39P3XRHBqqqLFSpFiPfEOt7f9h4 vx4mm9QgNssI838yVendEmIiUtDjYNx1E04hJJMMF6WThXw+zpL4g6htO3xjIQlc zb4wjJmpznoaxYByUDZIvVO1zXlu9ukGLQOBRMLDAW4dXO954hN8vkWpx0wnKmSE MwIDAQABo4IDITCCAx0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRq6SP4oVvu6UoQ RX4EJeQkvtr9nDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggr BgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRz ZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRz ZW5jcnlwdC5vcmcvMCIGA1UdEQQbMBmCF2VzaG9wLm1ldGFsdmlzcXVhdHJvLmN6 MIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggr BgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwIC MIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBi eSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRo ZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlw dC5vcmcvcmVwb3NpdG9yeS8wggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwDbdK/u yynssf7KPnFtLOW5qrs294Rxg8ddnU83th+/ZAAAAWPifNFfAAAEAwBIMEYCIQCy XvNcyulkta4u1ABtXcu1KRzTf6ybT/LUNSZl/m3zfAIhAKdgcSFrg89fc5B0c3d2 Vqi4Ybs//2iVXMjCStjREZ5HAHcAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz0 5UVH9HgAAAFj4nzRbwAABAMASDBGAiEAjNoXaA75ltmU9vR+BnZchBgKsYHpcpiR RvlVQCKKl/cCIQDC/xLCOdjfFq+wK6RSSUjdaZaplILOCdN2PgSp0+/qzTANBgkq hkiG9w0BAQsFAAOCAQEAeoLyyTiQ1UD4WSgh2UIZpoGm4L2wPtzfjWOkkNL9v1C9 QdAzlDvfxW9ffs6Q+RrkBQueaCAW4NWxG+u2h2x9vVtMLRBHicYIgU92Lpmawb76 w+ORq8ZDT1rfEEvxeuu2WEPMhkpJtB1LylDUHUYlvY10MvL2AcK3GirBF7/LAI0I 8rwI8gn0BImM6QYeR7V1O8gpLyJ7ghvMx9+n/O/AxWQryf1jjWzvAAnOkTKvPPp5 leua5u5GOrMvqEoRang+gZdOAk6WPpHMuV5UjDaksuaOx7AmHhGel/A6JOSqjFjY sXEf3w+I/pATioJy9isX3MK8nBY1W0EuTnbh360SSg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuILAazLlG8U9MxuD+qiz yr5lhyUvqZVG/CnZIq7sxC9XCO/6fwA0Z39oK3ywCHYxG+O9QBaPbYMx9+vnQnJn CP3nEpl800N1cPiVb+4/f2VGRAg2PkG5Q/s+pRRJifnGOHlApKy0ZiqejfeUO9av LIctc36sa31IiBuhK9v3bkTaZIWCFcM1kSVCA39P3XRHBqqqLFSpFiPfEOt7f9h4 vx4mm9QgNssI838yVendEmIiUtDjYNx1E04hJJMMF6WThXw+zpL4g6htO3xjIQlc zb4wjJmpznoaxYByUDZIvVO1zXlu9ukGLQOBRMLDAW4dXO954hN8vkWpx0wnKmSE MwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 320738198879453322085311350505291325410646 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-09 02:00:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-07 02:00:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eshop.metalvisquatro.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23292324148385013055768874280874645135378688902235313999236942975620112146663093252376784077041427062184371381720486724837277768391929079901197239871966297067761004826661094607014761117379836508956987600607740335898580871279401313191961746637455639928485093741006103009637971040729923815489967532601832269908649416578618064898636328721295250290324207112196058650272791940122850136843481967608198343646124287096076930103620428524842841105886662317854125976897836106087598279556261690777175813255506144373645862599929902639800265359863035833177428755847330758287579882985052965400458192351884851616457893624521739764787 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6ae923f8a15beee94a10457e0425e424bedafd9c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshop.metalvisquatro.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163e27cd15f0000040300483046022100b25ef35ccae964b5ae2ed4006d5dcbb5291cd37fac9b4ff2d4352665fe6df37c022100a76071216b83cf5f73907473777656a8b861bb3fff68955cc8c24ad8d1119e47007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163e27cd16f00000403004830460221008cda17680ef996d994f6f47e06765c84180ab181e972989146f95540228a97f7022100c2ff12c239d8df16afb02ba4524948dd6996a99482ce09d3763e04a9d3efeacd . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007a82f2c93890d540f8592821d94219a681a6e0bdb03edcdf8d63a490d2fdbf50bd41d033943bdfc56f5f7ece90f91ae4050b9e682016e0d5b11bebb6876c7dbd5b4c2d104789c608814f762e999ac1befac3e391abc6434f5adf104bf17aebb65843cc864a49b41d4bca50d41d4625bd8d7432f2f601c2b71a2ac117bfcb008d08f2bc08f209f404898ce9061e47b5753bc8292f227b821bccc7dfa7fcefc0c5642bc9fd638d6cef0009ce9132af3cfa7995eb9ae6ee463ab32fa84a116a783e81974e024e963e91ccb95e548c36a4b2e68ec7b0261e119e97f03a24e4aa8c58d8b1711fdf0f88fe90138a8272f62b17dcc2bc9c16355b412e4e76e1dfad124a