dirndl-mini.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:30:05:de:d9:8f:2e:bb:dc:51:ab:d2:e1:dc:89:aa:d7:ef was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=dirndl-mini.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:30:05:de:d9:8f:2e:bb:dc:51:ab:d2:e1:dc:89:aa:d7:efSerial Number (int): 277678214649994280149171258259012007417839
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 89:55:d7:84:4f:d6:89:a3:67:5c:8d:c6:de:25:0d:ab:bf:8d:a0:48
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 74:15:f2:4e:a8:52:fa:d7:f9:7f:f8:b9:62:3d:71:29:b7:30:eb:b8
Fingerprint (sha256): da:54:5a:1a:2f:86:58:45:3b:c9:22:59:95:8c:ce:26:30:f6:d1:f2:63:d3:de:83:39:a0:58:ea:d0:00:fd:c3
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate dirndl-mini.de
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dirndl-mini.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.dirndl-mini.de
dirndl-mini.de
mail.dirndl-mini.de
webdisk.dirndl-mini.de
www.dirndl-mini.de
dirndl-mini.de
mail.dirndl-mini.de
webdisk.dirndl-mini.de
www.dirndl-mini.de
Other certificates including the domain name dirndl-mini.de
(limited to 100 certificates)
dirndl-mini.de
dirndl-mini.de
jobsuche-international.de
dirndl-mini.de
dirndl-mini.de
*.dirndl-mini.de
www.dirndl-mini.t6a.de
versicherungenkredite.de
dirndl-mini.de
dirndl-mini.de
www.dirndl-mini.t6a.de
cubanischessen.de
dirndl-mini.de
dirndl-mini.de
dirndl-mini.de
dirndl-mini.de
mail.arbeitsschutz-welt.de
dirndl-mini.de
www.arbeitsschutz-welt.t6a.de
www.ruehrloeffel.t6a.de
dirndl-mini.de
inkontinenzunterhosen.de
dirndl-mini.de
jungemodeonlineshop.de
dirndl-mini.t6a.de
webloggerforum.de
dirndl-mini.de
www.haushaltswaren-1a.t6a.de
dirndl-mini.de
wrestlingdeutschland.de
china-reisen-visum.de
80er.com
dirndl-mini.de
dirndl-mini.de
dirndl-mini.de
dirndl-mini.de
dirndl-mini.de
dirndl-mini.de
dirndl-mini.de
dirndl-mini.de
dirndl-mini.de
*.casinospieleblog.de
dirndl-mini.de
dirndl-mini.de
mail.handmikro.de
dirndl-mini.de
dirndl-mini.de
jobsuche-international.de
dirndl-mini.de
dirndl-mini.de
*.dirndl-mini.de
www.dirndl-mini.t6a.de
versicherungenkredite.de
dirndl-mini.de
dirndl-mini.de
www.dirndl-mini.t6a.de
cubanischessen.de
dirndl-mini.de
dirndl-mini.de
dirndl-mini.de
dirndl-mini.de
mail.arbeitsschutz-welt.de
dirndl-mini.de
www.arbeitsschutz-welt.t6a.de
www.ruehrloeffel.t6a.de
dirndl-mini.de
inkontinenzunterhosen.de
dirndl-mini.de
jungemodeonlineshop.de
dirndl-mini.t6a.de
webloggerforum.de
dirndl-mini.de
www.haushaltswaren-1a.t6a.de
dirndl-mini.de
wrestlingdeutschland.de
china-reisen-visum.de
80er.com
dirndl-mini.de
dirndl-mini.de
dirndl-mini.de
dirndl-mini.de
dirndl-mini.de
dirndl-mini.de
dirndl-mini.de
dirndl-mini.de
dirndl-mini.de
*.casinospieleblog.de
dirndl-mini.de
dirndl-mini.de
mail.handmikro.de
dirndl-mini.de
Certificate
The complete raw certificate details for dirndl-mini.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAzAF3tmPLrvcUavS4dyJqtfvMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAxMjEwMDM1NDZaFw0x ODA0MjEwMDM1NDZaMBkxFzAVBgNVBAMTDmRpcm5kbC1taW5pLmRlMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurH5w23gcRO4eg1UtF63nP5dvMDsGuQO uUNZdDvrtXmKnL8Hjbfs7gARhkymbgHJCoslYo8WoAvhe4faiIkqZJ/jeESqVlV0 UjNkEL+xEXUFwRCcgedJBX2Fs9GLsjjmPrw59ycMb1MdUhF9YoYkjcD9pJBPH7TI c/Wvjejb4tJDze+Nfzve2XYFZwREXgMj3bCeb0/rgq5LAhYokQh1lHBNs009PXdn 5BX2Z8i/UbLTZDVKPvEYPICXeet3mfCbW8Z6xBF1MIOUkU9SXorMR53hpQc3KwhO EUPKuEH8e3AFSsAEvv2RwWBRhYeyvK8Hi53igPPFXJ5ZrVuF5oNbOQIDAQABo4IC bDCCAmgwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSJVdeET9aJo2dcjcbeJQ2rv42g SDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRj MGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5v cmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5v cmcvMHcGA1UdEQRwMG6CG2F1dG9kaXNjb3Zlci5kaXJuZGwtbWluaS5kZYIOZGly bmRsLW1pbmkuZGWCE21haWwuZGlybmRsLW1pbmkuZGWCFndlYmRpc2suZGlybmRs LW1pbmkuZGWCEnd3dy5kaXJuZGwtbWluaS5kZTCB/gYDVR0gBIH2MIHzMAgGBmeB DAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu bGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNh dGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFu ZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5 IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0G CSqGSIb3DQEBCwUAA4IBAQAyVoH56v2WlOiOCBrs+8SafJWQaZcTNBvHGZJzeNE5 Unio5VNBclVDjPGq3bQXOKkNYGE2kMhe5+ceGk7gi4Cgra3FMDsUwORzeymXtxaf jV/VGSC+6ogjDXMJDqoQedHl8bg97Ho8YxZ93O/sQVE3cUucWZBA+f/ikogvqTz7 5i0Al3omwTh7Y7jhHhRrVzUmVmoO88NXAprbCe4EsPAjyGlHtw7LUZEB1appOLAe MEFab8PtHoI9HyN9F/85Ocm+th6bqCwhDW0EWQuaJDpqlWbGuJKHHzFxyCIvsWVu Itz4t5moA6NA5+guV8PP+T9e5jwVz5nS+ADG1JjeAU8+ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurH5w23gcRO4eg1UtF63 nP5dvMDsGuQOuUNZdDvrtXmKnL8Hjbfs7gARhkymbgHJCoslYo8WoAvhe4faiIkq ZJ/jeESqVlV0UjNkEL+xEXUFwRCcgedJBX2Fs9GLsjjmPrw59ycMb1MdUhF9YoYk jcD9pJBPH7TIc/Wvjejb4tJDze+Nfzve2XYFZwREXgMj3bCeb0/rgq5LAhYokQh1 lHBNs009PXdn5BX2Z8i/UbLTZDVKPvEYPICXeet3mfCbW8Z6xBF1MIOUkU9SXorM R53hpQc3KwhOEUPKuEH8e3AFSsAEvv2RwWBRhYeyvK8Hi53igPPFXJ5ZrVuF5oNb OQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 277678214649994280149171258259012007417839 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-21 00:35:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-21 00:35:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dirndl-mini.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23568087781888377805825205821056430747816632381975998960993612674589310474182572293144471529597802112428824579857883095650860886603483193155807273508664832079436529198523501071430487156313753980258609909846216910452571781779701499631153941762980705186436142533999135173566201928513048418255670677190633655744355797482744742344156410024248049205164212947276810491405841132245504254749825301032627130980682941626474712447205010725256213484441159972442655086279226854441434923885028789305467578219970071476546968431634868146556629477464546296730945175977323033767840556194669786142113704353888007682153290770992626621241 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8955d7844fd689a3675c8dc6de250dabbf8da048 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.dirndl-mini.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirndl-mini.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.dirndl-mini.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.dirndl-mini.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dirndl-mini.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00325681f9eafd9694e88e081aecfbc49a7c9590699713341bc719927378d1395278a8e553417255438cf1aaddb41738a90d60613690c85ee7e71e1a4ee08b80a0adadc5303b14c0e4737b2997b7169f8d5fd51920beea88230d73090eaa1079d1e5f1b83dec7a3c63167ddcefec415137714b9c599040f9ffe292882fa93cfbe62d00977a26c1387b63b8e11e146b573526566a0ef3c357029adb09ee04b0f023c86947b70ecb519101d5aa6938b01e30415a6fc3ed1e823d1f237d17ff3939c9beb61e9ba82c210d6d04590b9a243a6a9566c6b892871f3171c8222fb1656e22dcf8b799a803a340e7e82e57c3cff93f5ee63c15cf99d2f800c6d498de014f3e