srm.ypfb-andina.com.bo

- YPFB Andina S.A. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:ed:50:64:4a:fd:ff:a4:cb:83:be:27:53:3c:d5:a1 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

YPFB Andina S.A.

Organization: YPFB Andina S.A.
Locality: Santa Cruz
Country: BO

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:ed:50:64:4a:fd:ff:a4:cb:83:be:27:53:3c:d5:a1
Serial Number (int): 14524484852115412639593443369814906273
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 09:4d:18:0e:c0:99:9a:c3:8a:32:0e:c2:6a:85:dd:9a:ed:87:43:05
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 1e:bf:0f:91:be:c6:d3:6b:6d:54:9f:3e:21:43:1a:6d:d0:f1:48:fa
Fingerprint (sha256): cb:a1:53:e1:b6:1c:92:82:6a:d9:dd:0c:f7:b5:ff:9b:b1:aa:a9:28:dc:6a:8d:46:61:c5:c4:7a:3c:4b:e1:7d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate srm.ypfb-andina.com.bo

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for srm.ypfb-andina.com.bo

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

srm.ypfb-andina.com.bo
www.srm.ypfb-andina.com.bo

Other certificates including the domain name ypfb-andina.com.bo

(limited to 100 certificates)
erp.ypfb-andina.com.bo
www.ypfb-andina.com.bo
erp.ypfb-andina.com.bo
erp.ypfb-andina.com.bo
erp.ypfb-andina.com.bo
mail2.ypfb-andina.com.bo
www1.ypfb-andina.com.bo
sip.ypfb-andina.com.bo
awm.ypfb-andina.com.bo
mail2.ypfb-andina.com.bo
erp.ypfb-andina.com.bo
woc.ypfb-andina.com.bo
adfsp.ypfb-andina.com.bo
www1.ypfb-andina.com.bo
wac.ypfb-andina.com.bo
dir.ypfb-andina.com.bo
wom.ypfb-andina.com.bo
srm.ypfb-andina.com.bo
sip.ypfb-andina.com.bo
www.ypfb-andina.com.bo
www3.ypfb-andina.com.bo
srm.ypfb-andina.com.bo
www3.ypfb-andina.com.bo
www.ypfb-andina.com.bo
www.ypfb-andina.com.bo
mail2.ypfb-andina.com.bo
invitados.ypfb-andina.com.bo
www1.ypfb-andina.com.bo
mail2.ypfb-andina.com.bo
www3.ypfb-andina.com.bo
mail2.ypfb-andina.com.bo
srm.ypfb-andina.com.bo
mail2.ypfb-andina.com.bo
invitados.ypfb-andina.com.bo
mail2.ypfb-andina.com.bo
dir.ypfb-andina.com.bo
awc.ypfb-andina.com.bo
erp.ypfb-andina.com.bo
erp.ypfb-andina.com.bo
www.ypfb-andina.com.bo
www3.ypfb-andina.com.bo
www1.ypfb-andina.com.bo
srm.ypfb-andina.com.bo
srm.ypfb-andina.com.bo
ra2.ypfb-andina.com.bo
sip.ypfb-andina.com.bo
invitados.ypfb-andina.com.bo
srm.ypfb-andina.com.bo
srm.ypfb-andina.com.bo
invitados.ypfb-andina.com.bo
ra2.ypfb-andina.com.bo
srm.ypfb-andina.com.bo
ra1.ypfb-andina.com.bo
dir.ypfb-andina.com.bo
www.ypfb-andina.com.bo
srm.ypfb-andina.com.bo
erp.ypfb-andina.com.bo
invitados.ypfb-andina.com.bo
erp.ypfb-andina.com.bo
srm.ypfb-andina.com.bo
awc.ypfb-andina.com.bo
adfsp.ypfb-andina.com.bo
www3.ypfb-andina.com.bo
invitados.ypfb-andina.com.bo
www1.ypfb-andina.com.bo
www3.ypfb-andina.com.bo
erp.ypfb-andina.com.bo

Certificate

The complete raw certificate details for srm.ypfb-andina.com.bo in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl8oe7+4RNkLod6w16/g
TWVfqDbZ4CY8s3dxBaA483TLhAq6xiP/qMD4LtkGcUfZINmCZYtEVrAFMs6j05tx
poXnMUjZwxW1x3H0OX0BjWvW54cYCzfVpxGqJG1DNunUni0SwDoqftDXWf/aMHbx
NJ3a8fDbrzBgmA9zoM8/FIvrlaiYzdAupMcFHo3E8+0osLEfT1tfxHy9u9DrubcZ
ZwWAw5Rqn5T9vFwtdyoblC9wRrVjav44ACr3qOHBDcgFnUY0rx3GsJCgyWGkeSMc
/ZdQMoa5BaTcXcwOaJWa2oWpb9OqGNgORE3lkzSal9gQQiTmVMtlyAJ8zeVSWX02
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14524484852115412639593443369814906273
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santa Cruz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'YPFB Andina S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'srm.ypfb-andina.com.bo'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24032202170416263182688272288915255241259519305650102170572088587109363914956965998379159202813195518073174576120731804845480793627396333588295513766498066445982179222315267545722403234680985771343637577792747247057066453371163371704560158440433051600713005599018292799776221391307707813717524777505566790889246050339115460779273504544409773086612227638538780438182239314844649811367459879058371212328227986051165739508470499066759229365648597400195917234950744853661914564028603042859435188038784613911399246733337964739286560012305809672206616247154478014627884414259628729307347826592908356983179611656427440780903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							094d180ec0999ac38a320ec26a85dd9aed874305
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srm.ypfb-andina.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.srm.ypfb-andina.com.bo'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000183237aaba5000004030048304602210089d3f47ee1d342807ad334600b80406a6a1efd052714c89134d0245268a72045022100ee9e5ed3c7085b658688c86a49849108f9529c9245891194e734b7610c7c343400750035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c00000183237aaba90000040300463044022029f66d4381c683944e2fb32b3ef2ce2261c066bfd3b7597a7528e419edff1263022065132e1350361c28345eacdbc1a7f4d8448f2d94f2f8bdc7423920ad7926a488007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000183237aabc6000004030047304502207d8ef868f373f722795437c5172af19fc93f5051bdec2e7983cac469b96fd5340221008e4e6ff2af017a1b6ae94dcaf2bed3028421885ad75cd375edb70b1cbf456f80
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007db77944c788372967f495e5488a1f7235974cf8fe38ce0803e30154fe88a40eb9fe8287a2b1a3554874be06ed883e23615c386e8ac3fdb676bb76a9c50248e967f8d89e11db7f2a47e6389b7c1ec74cc334c1ea78e863b2496a6480c7576c2469757015a48aa205317151d36f88dee532d1cc7fef4fb9f37d74f9a81b92b2f882d0b386f0d1e87c34898804aec8d1c342da2acb033c6b390b4e18b48c53f9559a99d44fb6735a9aaff719c8281fbe31d105281a9b07cce6a1e7fa7c21a976796801ec600f87076e1b64a2d706c65f4823a3182c94db10d0a55f8c790aa3ffd96489aa707355893a36aadc029e2ec243b72cf8ebb8516d45fcf2bcd55139fcb5