www.tamgram.com.pl
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:75:51:7e:b6:af:b8:91:48:67:ac:70:3c:a7:4b:de:da:22 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.tamgram.com.pl
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:75:51:7e:b6:af:b8:91:48:67:ac:70:3c:a7:4b:de:da:22Serial Number (int): 301258220127413890921647005546948358756898
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1c:d9:32:cd:74:f0:44:68:05:62:14:1e:d7:bb:f8:ee:f5:e6:12:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e6:bd:b3:b3:88:0a:fc:f6:34:9e:b9:2c:fe:62:59:0e:aa:6e:70:c0
Fingerprint (sha256): ce:4c:6a:68:7b:12:7a:67:ef:d4:e0:3d:0d:01:87:74:13:8d:6d:44:2d:34:93:12:c3:27:b4:e0:7f:55:36:55
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.org/Check the revocation status for certificate www.tamgram.com.pl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.tamgram.com.pl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
tamgram.com.pl
www.tamgram.com.pl
www.tamgram.com.pl
Other certificates including the domain name tamgram.com.pl
(limited to 100 certificates)
tamgram.com.pl
tamgram.com.pl
tamgram.com.pl
tamgram.com.pl
www.tamgram.com.pl
tamgram.tamgram.smarthost.pl
tamgram.com.pl
tamgram.com.pl
tamgram.com.pl
tamgram.com.pl
tamgram.com.pl
tamgram.com.pl
tamgram.com.pl
tamgram.com.pl
tamgram.com.pl
www.tamgram.com.pl
tamgram.com.pl
www.tamgram.com.pl
tamgram.tamgram.smarthost.pl
tamgram.com.pl
tamgram.com.pl
tamgram.com.pl
tamgram.com.pl
tamgram.com.pl
tamgram.com.pl
www.tamgram.com.pl
tamgram.tamgram.smarthost.pl
tamgram.com.pl
tamgram.com.pl
tamgram.com.pl
tamgram.com.pl
tamgram.com.pl
tamgram.com.pl
tamgram.com.pl
tamgram.com.pl
tamgram.com.pl
www.tamgram.com.pl
tamgram.com.pl
www.tamgram.com.pl
tamgram.tamgram.smarthost.pl
tamgram.com.pl
tamgram.com.pl
tamgram.com.pl
Certificate
The complete raw certificate details for www.tamgram.com.pl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGGDCCBQCgAwIBAgISA3VRfravuJFIZ6xwPKdL3toiMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjExMDkyMzEzMDBaFw0x NzAyMDcyMzEzMDBaMB0xGzAZBgNVBAMTEnd3dy50YW1ncmFtLmNvbS5wbDCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL9QYklt7vLGyu9ZTfTL9PBkPHZN aeakr3Mh8LOPxM6yHxm1pp7IMIveOBVisazZKtOBjsesT5Xvlo0s0387zlQbuASu bzIZlQf5kwAE4lkxGIWpg0kh1o+QKs3dksQeTbUl/RNHZtyZISrdkKDgchEYxxWt FETZ3DeFSDpJJWFbFfM4Xf6X91x+kWIwXx3OS0u68kuvIIMS9JHNKlQ3PC9UUyTQ X++7DAJGNu9mnGEf8pCjCYxIGGcipOqYSbyIwIEJPHaH0yftu9r9L4z3McX8bSRA g6p9bCRBsqUGz1xGXA+slGEc6iabeGgCPnYx9JFOYlOTG32L9+hYNYNI8PCmKkzT eIMEyZBORgV5IwCX6h4XmWPwXX4DwiHlANo1brtFB8tNAjNATaysN4ZTsbmCcBNi 0mfQdN/A8BGaotKgA315p7807x3JQlo1c2J7/N89Ulh0didPF6EIDUsBOxXpvzXW VkgSh2p+OQuGzTcH0luPfjxu9nEcaHJJUhiyn3tkzZVb7xX/5D6pNZc5YmxwRZ60 65xOIEQ+XXZResjnDYJb9ocveHTS4TA81h2n630Jy4Py/uBfB9F2p8QgCoB3eOOR QeOdDfvcNIqZEcczx3ZPMqjwQcy3Lb9shExnEEZ9WsrUaUbGBaPfjkN9PTO9t8EO bvC/i/bzwiJTzJbfAgMBAAGjggIjMIICHzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FBzZMs108ERoBWIUHte7+O715hL9MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMC0GA1UdEQQmMCSCDnRhbWdyYW0uY29t LnBsghJ3d3cudGFtZ3JhbS5jb20ucGwwgf4GA1UdIASB9jCB8zAIBgZngQwBAgEw geYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl bmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRlIG1h eSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQgb25s eSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBmb3Vu ZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzANBgkqhkiG 9w0BAQsFAAOCAQEAhAMY1fPKnkfK/F8QJfLtpJYFouGAElOy8TrJYQWtOTTuGsMW 55OZoi8SPnbz557ciH69ezFs6jj66lmdNDY3rHlWPlXDGMlMgZbMI4o98o/2kI90 7ttAeEvibgM5NaR7ipdtqeb47NTgM73xFEnieJyPnI4yT+r2jn5IW7joMKLZRMpx HL3PyoTMBYLosZ9b+Mc4bO49qPfqDFTtbo+ILda8I4FdvRTXBtspgIY1VruZuMNg PlCKf6aoEnTVD1JrhMJ46UkK4fTbbgLNJs0K9Epp+DTZCWYgVy5zRWfGEMHJKaTf wP/FtpNzxEaf3w7Nb5b7t50W4e5Tk9ByqgvDKA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAv1BiSW3u8sbK71lN9Mv0 8GQ8dk1p5qSvcyHws4/EzrIfGbWmnsgwi944FWKxrNkq04GOx6xPle+WjSzTfzvO VBu4BK5vMhmVB/mTAATiWTEYhamDSSHWj5Aqzd2SxB5NtSX9E0dm3JkhKt2QoOBy ERjHFa0URNncN4VIOkklYVsV8zhd/pf3XH6RYjBfHc5LS7ryS68ggxL0kc0qVDc8 L1RTJNBf77sMAkY272acYR/ykKMJjEgYZyKk6phJvIjAgQk8dofTJ+272v0vjPcx xfxtJECDqn1sJEGypQbPXEZcD6yUYRzqJpt4aAI+djH0kU5iU5MbfYv36Fg1g0jw 8KYqTNN4gwTJkE5GBXkjAJfqHheZY/BdfgPCIeUA2jVuu0UHy00CM0BNrKw3hlOx uYJwE2LSZ9B038DwEZqi0qADfXmnvzTvHclCWjVzYnv83z1SWHR2J08XoQgNSwE7 Fem/NdZWSBKHan45C4bNNwfSW49+PG72cRxocklSGLKfe2TNlVvvFf/kPqk1lzli bHBFnrTrnE4gRD5ddlF6yOcNglv2hy94dNLhMDzWHafrfQnLg/L+4F8H0XanxCAK gHd445FB450N+9w0ipkRxzPHdk8yqPBBzLctv2yETGcQRn1aytRpRsYFo9+OQ309 M723wQ5u8L+L9vPCIlPMlt8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 301258220127413890921647005546948358756898 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-09 23:13:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-07 23:13:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tamgram.com.pl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780493024160593073192709808655041536694159425028193318376820593850505328099696436050824154191447397754524136129463852812933454746321230676565636537244865440753210106996663942819406251364388063131941985021045381327400681312125104219583040095168390934792419729057697235794284448101855962576930796704659083743026709189311917603727543276041024205403190310734398703944990477217874531577864829440701020866090135661629672122784617591484786390523130954341858342970799907492145834962451021240446087305317687701037550353278992464812854703786442056090421744842690025967827597124171919821364756563163006074644823618145049530373700751973881672682965516116100995468331046565565190879099633773607888142238511266171528886083406169309588356152938596149566024321894126143939283605129252134780467001311238943994694639373512539022863481015928526405033391637917229007116274517632178847856258486118453847609700482856290755957839014790638663293583641718257133479189137519443204915178440787580713569884428630750425445670603650571951388867936102550255841501584173038027471802788220076926549527340264327048091460656676327619466012713331645671757315912794389809543217463030196512207784605725924742910578857228068679402778485282897782711093577927010550209615583 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1cd932cd74f044680562141ed7bbf8eef5e612fd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tamgram.com.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tamgram.com.pl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00840318d5f3ca9e47cafc5f1025f2eda49605a2e1801253b2f13ac96105ad3934ee1ac316e79399a22f123e76f3e79edc887ebd7b316cea38faea599d343637ac79563e55c318c94c8196cc238a3df28ff6908f74eedb40784be26e033935a47b8a976da9e6f8ecd4e033bdf11449e2789c8f9c8e324feaf68e7e485bb8e830a2d944ca711cbdcfca84cc0582e8b19f5bf8c7386cee3da8f7ea0c54ed6e8f882dd6bc23815dbd14d706db2980863556bb99b8c3603e508a7fa6a81274d50f526b84c278e9490ae1f4db6e02cd26cd0af44a69f834d9096620572e734567c610c1c929a4dfc0ffc5b69373c4469fdf0ecd6f96fbb79d16e1ee5393d072aa0bc328