www.casalpusterlengo.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f1:c4:77:b8:01:e4:72:92:71:87:27:ee:aa:46:e9:0d:f5 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.casalpusterlengo.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f1:c4:77:b8:01:e4:72:92:71:87:27:ee:aa:46:e9:0d:f5Serial Number (int): 343606058525840215115885972893246891298293
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 96:d8:18:f3:1c:e1:3c:d8:24:69:ea:f8:2a:5a:8e:19:63:85:70:af
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 86:f6:de:bb:04:ac:aa:bb:45:f8:fd:ee:a9:7f:f1:90:cb:cc:46:62
Fingerprint (sha256): d7:7e:62:64:2b:49:14:10:c4:68:e7:23:f0:ea:1a:79:a4:04:46:7f:63:df:7c:42:22:e5:d5:5e:6f:9f:81:a6
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.casalpusterlengo.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.casalpusterlengo.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.casalpusterlengo.org
Other certificates including the domain name casalpusterlengo.org
(limited to 100 certificates)
www.casalpusterlengo.org
casalpusterlengo.org
casalpusterlengo.org
casalpusterlengo.org
www.casalpusterlengo.org
www.casalpusterlengo.org
www.casalpusterlengo.org
casalpusterlengo.org
547.me
www.casalpusterlengo.org
www.947.me
casalpusterlengo.org
theologians.club
casalpusterlengo.org
www.casalpusterlengo.org
casalpusterlengo.org
casalpusterlengo.org
casalpusterlengo.org
www.casalpusterlengo.org
www.casalpusterlengo.org
www.casalpusterlengo.org
casalpusterlengo.org
547.me
www.casalpusterlengo.org
www.947.me
casalpusterlengo.org
theologians.club
casalpusterlengo.org
www.casalpusterlengo.org
Certificate
The complete raw certificate details for www.casalpusterlengo.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGaDCCBVCgAwIBAgISA/HEd7gB5HKScYcn7qpG6Q31MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MDMwOTE3MjBaFw0y MDA3MDIwOTE3MjBaMCMxITAfBgNVBAMTGHd3dy5jYXNhbHB1c3RlcmxlbmdvLm9y ZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALrTPxaaOLH9Wu5w4WiJ s49LGIIn5lcDxKnhDpGa8DNeewOjoqCYkGzx/lCyUqM+gjIYJpxg3jXoOQv03UVo wZ3yvySxR/WdbFpkYxz/hT+ZUhekI1GteUcHiQs3gi0FzRFJhlSSYOTh/KNWLm4B zmMsbifENK3K/4vxQrdTdTTe7yMcqKPn/nOwxNWV5kuh36P/0/bJQjMAsJR/Dx1l ynNI4C6/o1R3RtAob3af6iMPCcV54T/z+Doc4OxI2iImAbHiJaOutfTkQRWrlsC8 z1ukgf39ZKW8+zdteV2gXXdugmEe206fJJcGJcX6Bd3ip3ExZyYxw2KAFHGqmL06 +7CyDKpDUwHvErKcT75eqqj6/brxDCKgOhLK/h6lxMSyZmPqRet9eNd92USJNktY ue+jXJ2RicY4vrba2QO503YaZWLR9c4yWJXbC4YRzN6Hov2RkdgSAdHLu5w2i1oc jsndbFZUl+yS1fvQP/4sHgWEHWTDGVw2rS62SfZuC+ndNgQVHYIidoNyCdueOy8g n9XjwFgwmxpLLub4PXRUrSrCFMyWoHFt3t/RXGU97a6QcCRAbrPnd5raLPn5dwiQ eGg7yYAqjVKVy56bNyHaWFdxvc4E7CFglMBSKojcEtl078wq/n+pnqSHX4fHRdYq P0QqHiAHSJQNtIdBqFUn2nctAgMBAAGjggJtMIICaTAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFJbYGPMc4TzYJGnq+CpajhljhXCvMB8GA1UdIwQYMBaAFKhKamMEfd26 5tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDov L29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDov L2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIYd3d3LmNh c2FscHVzdGVybGVuZ28ub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAXqdz+d9WwOe1Nkh90EngMnqRmgyE oRIShBh1loFxRVgAAAFxP4uG7QAABAMARzBFAiA4UZziVq7y70YzCBiTpKgHDvpN w7ue6+JCcKlQocBYjAIhAJRGsWmN2r5npxlEt+ivoyWv3HUBmTMrLwS85nxQ+jGp AHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFxP4uG5QAABAMA RzBFAiEAuauvhOm/XPQY/ypfbWrMiPuGB51UZ73AZnZJ5mAQGh8CICyns/UcLNi3 53qoumep5Jp1H9OPP+8vcQDuGpe8qSHDMA0GCSqGSIb3DQEBCwUAA4IBAQA+hBAK JKzCDYcnYm+4qqxVFAnc1oDWlcBdGsloqA7HcTe+3+zdqxGISzgro/RYE7P7ieoC AEM0haqkn8ymwrVnWrsUhbj44IXIRM8NQ4WsjimQO4tvvkoD4FKNKHRNYkYBDAHC bsbMfaRq0so0n6ktycspSJaACYwsxLoJRirRIU5bbKkSu7+dE8KlKdXZ6BzUmiuQ dvGvRRFcV/1THVE0zR1KSxUENJq21yfmu23z/wfmLgLWgK3zs/w493TmvXsJ5Uwu fmLZ3Igo2jt14gENKhQ4js4jje6McMkbaqtC/tJng7qYOrE9pn8sHPklnEaB+baZ etn+fqF36TZyCZgt -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAutM/Fpo4sf1a7nDhaImz j0sYgifmVwPEqeEOkZrwM157A6OioJiQbPH+ULJSoz6CMhgmnGDeNeg5C/TdRWjB nfK/JLFH9Z1sWmRjHP+FP5lSF6QjUa15RweJCzeCLQXNEUmGVJJg5OH8o1YubgHO YyxuJ8Q0rcr/i/FCt1N1NN7vIxyoo+f+c7DE1ZXmS6Hfo//T9slCMwCwlH8PHWXK c0jgLr+jVHdG0Chvdp/qIw8JxXnhP/P4Ohzg7EjaIiYBseIlo6619ORBFauWwLzP W6SB/f1kpbz7N215XaBdd26CYR7bTp8klwYlxfoF3eKncTFnJjHDYoAUcaqYvTr7 sLIMqkNTAe8SspxPvl6qqPr9uvEMIqA6Esr+HqXExLJmY+pF6314133ZRIk2S1i5 76NcnZGJxji+ttrZA7nTdhplYtH1zjJYldsLhhHM3oei/ZGR2BIB0cu7nDaLWhyO yd1sVlSX7JLV+9A//iweBYQdZMMZXDatLrZJ9m4L6d02BBUdgiJ2g3IJ2547LyCf 1ePAWDCbGksu5vg9dFStKsIUzJagcW3e39FcZT3trpBwJEBus+d3mtos+fl3CJB4 aDvJgCqNUpXLnps3IdpYV3G9zgTsIWCUwFIqiNwS2XTvzCr+f6mepIdfh8dF1io/ RCoeIAdIlA20h0GoVSfady0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 343606058525840215115885972893246891298293 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-03 09:17:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-02 09:17:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.casalpusterlengo.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 762180243059049905461286344195871588230955611174615755846799296651941739054947167436802420073113081432899381432532419758257441499683408175354028363640722639002172437059903979403402601889444260226828978760496648703826912902152038469039671197523807626367996990597867844352014917162040277030056481898931133190361493974742858522613860929667322464313805224580325713310828815217429483256589310237874160355841202184991838339177135749884904980872562478763987012164937666465092422657463548661525194373369616268237766221249738703151959150323085628755463860989730528286645884690138812652588571427581259895066971667962947279210497241702511422972916018993107085544447836406764727735717424591984028955053872435908411327397477560616003227487159142431853575040728650389015431173441203330202814733255345668114838021200361439477343400478526034263917459646393574137553624358423255053066783525196271270214576673877992552531746711734796408615372928143390138008269783001014703171510009422250529903908764693400110127419569210432342876585700626563414261040927875811811727345907129697688256247468851739313923431522185164774593393085089129838325624078490290561357782890307381008659765451912657855566950360375341392579016365555210567672398389726911758964782893 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 96d818f31ce13cd82469eaf82a5a8e19638570af . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casalpusterlengo.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001713f8b86ed0000040300473045022038519ce256aef2ef4633081893a4a8070efa4dc3bb9eebe24270a950a1c0588c0221009446b1698ddabe67a71944b7e8afa325afdc750199332b2f04bce67c50fa31a9007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001713f8b86e50000040300473045022100b9abaf84e9bf5cf418ff2a5f6d6acc88fb86079d5467bdc0667649e660101a1f02202ca7b3f51c2cd8b7e77aa8ba67a9e49a751fd38f3fef2f7100ee1a97bca921c3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003e84100a24acc20d8727626fb8aaac551409dcd680d695c05d1ac968a80ec77137bedfecddab11884b382ba3f45813b3fb89ea0200433485aaa49fcca6c2b5675abb1485b8f8e085c844cf0d4385ac8e29903b8b6fbe4a03e0528d28744d6246010c01c26ec6cc7da46ad2ca349fa92dc9cb29489680098c2cc4ba09462ad1214e5b6ca912bbbf9d13c2a529d5d9e81cd49a2b9076f1af45115c57fd531d5134cd1d4a4b1504349ab6d727e6bb6df3ff07e62e02d680adf3b3fc38f774e6bd7b09e54c2e7e62d9dc8828da3b75e2010d2a14388ece238dee8c70c91b6aab42fed26783ba983ab13da67f2c1cf9259c4681f9b6997ad9fe7ea177e9367209982d