support.trackyourdebt.co.za
Issued by RapidSSL SHA256 CA
About this certificate
This digital certificate with serial number 72:09:13:bf:e5:a0:2c:65:87:3d:1e:53:5d:3f:37 was issued on by GeoTrust Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=support.trackyourdebt.co.za
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 72:09:13:bf:e5:a0:2c:65:87:3d:1e:53:5d:3f:37Serial Number (int): 592105948283728271887246298166673207
Serial Number lenght: 119 bits, 15 octets
SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f
Fingerprint (sha1): 8a:3b:b7:9f:8f:56:06:9b:b5:27:39:70:8d:d3:57:2b:34:b8:22:22
Fingerprint (sha256): dd:d5:d3:ff:14:a2:3b:37:50:e9:c0:de:d6:75:10:f8:4f:8e:cd:4a:f3:d7:7b:8a:5c:9d:88:90:7c:e5:70:aa
Issuing Certificate URL: http://gp.symcb.com/gp.crt
Revocation information
OCSP Server: http://gp.symcd.comCRL Distribution Point: http://gp.symcb.com/gp.crl
Check the revocation status for certificate support.trackyourdebt.co.za
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for support.trackyourdebt.co.za
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
support.trackyourdebt.co.za
Other certificates including the domain name trackyourdebt.co.za
(limited to 100 certificates)
client.annikids.com
sni.cloudflaressl.com
ss-aqua.ysknet.co.jp
support.trackyourdebt.co.za
client.annikids.com
support.trackyourdebt.co.za
support.trackyourdebt.co.za
trackyourdebt.co.za
client.annikids.com
client.annikids.com
support.trackyourdebt.co.za
client.annikids.com
client.annikids.com
trackyourdebt.co.za
support.trackyourdebt.co.za
mail.trackyourdebt.co.za
support.trackyourdebt.co.za
help.mycardholdersupport.com
merchantdoodle.execupay.help
client.annikids.com
client.annikids.com
mail.trackyourdebt.co.za
support.trackyourdebt.co.za
client.annikids.com
sni.cloudflaressl.com
client.annikids.com
mail.trackyourdebt.co.za
client.annikids.com
sni.cloudflaressl.com
help.aureo-systems.com
trackyourdebt.co.za
support.kinectcommunications.com
support.trackyourdebt.co.za
help.aureo-systems.com
support.trackyourdebt.co.za
support.trackyourdebt.co.za
help.mycardholdersupport.com
support.trackyourdebt.co.za
client.annikids.com
client.annikids.com
support.trackyourdebt.co.za
ss-aqua.ysknet.co.jp
client.annikids.com
support.trackyourdebt.co.za
sni.cloudflaressl.com
zoho.avatardesk.com
support.kinectcommunications.com
soporte.betterfield.net
support.trackyourdebt.co.za
support.trackyourdebt.co.za
support.trackyourdebt.co.za
soporte.betterfield.net
trackyourdebt.co.za
support.trackyourdebt.co.za
client.annikids.com
mail.trackyourdebt.co.za
support.trackyourdebt.co.za
support.branches.cx
support.trackyourdebt.co.za
sni.cloudflaressl.com
ss-aqua.ysknet.co.jp
support.trackyourdebt.co.za
client.annikids.com
support.trackyourdebt.co.za
support.trackyourdebt.co.za
trackyourdebt.co.za
client.annikids.com
client.annikids.com
support.trackyourdebt.co.za
client.annikids.com
client.annikids.com
trackyourdebt.co.za
support.trackyourdebt.co.za
mail.trackyourdebt.co.za
support.trackyourdebt.co.za
help.mycardholdersupport.com
merchantdoodle.execupay.help
client.annikids.com
client.annikids.com
mail.trackyourdebt.co.za
support.trackyourdebt.co.za
client.annikids.com
sni.cloudflaressl.com
client.annikids.com
mail.trackyourdebt.co.za
client.annikids.com
sni.cloudflaressl.com
help.aureo-systems.com
trackyourdebt.co.za
support.kinectcommunications.com
support.trackyourdebt.co.za
help.aureo-systems.com
support.trackyourdebt.co.za
support.trackyourdebt.co.za
help.mycardholdersupport.com
support.trackyourdebt.co.za
client.annikids.com
client.annikids.com
support.trackyourdebt.co.za
ss-aqua.ysknet.co.jp
client.annikids.com
support.trackyourdebt.co.za
sni.cloudflaressl.com
zoho.avatardesk.com
support.kinectcommunications.com
soporte.betterfield.net
support.trackyourdebt.co.za
support.trackyourdebt.co.za
support.trackyourdebt.co.za
soporte.betterfield.net
trackyourdebt.co.za
support.trackyourdebt.co.za
client.annikids.com
mail.trackyourdebt.co.za
support.trackyourdebt.co.za
support.branches.cx
support.trackyourdebt.co.za
Certificate
The complete raw certificate details for support.trackyourdebt.co.za in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEhjCCA26gAwIBAgIPcgkTv+WgLGWHPR5TXT83MA0GCSqGSIb3DQEBCwUAMEIx CzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJS YXBpZFNTTCBTSEEyNTYgQ0EwHhcNMTcwNDA0MDAwMDAwWhcNMTgwNDA0MjM1OTU5 WjAmMSQwIgYDVQQDDBtzdXBwb3J0LnRyYWNreW91cmRlYnQuY28uemEwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuNsGz1Gl/8jT99mTnhawmCpO/HxXz 2llzr8mW72XTzy4GWKvasGE+3kbTXKhIBe5GDpGwNd3+Zsy6XVMIUIXWJJ78ewkO RUoyLeg9IzNCnTGv8uhTy1H4EtgLHprciTDtwjF64X5akhqxnd48vH5EdXSajPeq YhL3qGyWnvDqvIVF7+7537y39ZcjDupYVfwUomufF8kqbzxjkIaPc5aHH26mjN5m M28R9PB6IIRIA4wW0uPHYl4wqdl4R8D5L23T7l3iJs9TnNkX2EgkCeSR/BD1m6Ea AYCs2Z5nERd0XPwW0oG2PUTxGPTdyW3+JPMokmnBhcRJP2ZcBiylG6JXAgMBAAGj ggGTMIIBjzAmBgNVHREEHzAdghtzdXBwb3J0LnRyYWNreW91cmRlYnQuY28uemEw CQYDVR0TBAIwADArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vZ3Auc3ltY2IuY29t L2dwLmNybDBvBgNVHSAEaDBmMGQGBmeBDAECATBaMCoGCCsGAQUFBwIBFh5odHRw czovL3d3dy5yYXBpZHNzbC5jb20vbGVnYWwwLAYIKwYBBQUHAgIwIAweaHR0cHM6 Ly93d3cucmFwaWRzc2wuY29tL2xlZ2FsMB8GA1UdIwQYMBaAFJfCJ1CewsnsDIgy yHyt4qYBT9pvMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vZ3Au c3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ3Auc3ltY2IuY29tL2dwLmNy dDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEABeFRUAx1 LJHvecQO+hoxueMVG//HrFkFFSuaG6i29ElWxxWsNDR3ZJ2gFy8EmMZkgy0j+wVt jSXMuRPUlhdrb6X4RM1sw7cTTigQd4kc4D+TjUY/mnAqw5vTKEWuRLxeP/+k0kOu DaTqurUFVy41AyEm0+4Qw1/Ids1yRPdiyxCxP1Br/nZXU4MnWZK8m72HXibZLCMm 1nJU7VJcxvLNZE7UvSKn1pDdD6gYkPZ8YTt8gS8EACOzDGzEEnVC+oUbXuO5PgYc 79Lfv4euFxWZAOdqPkeHV2bkPyk33fnBCS+G/Ie7qcdHwJO/UJ5PJ1PknOLdRlKb 2QPpJ+HpHxSv3Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjbBs9Rpf/I0/fZk54Ws JgqTvx8V89pZc6/Jlu9l088uBlir2rBhPt5G01yoSAXuRg6RsDXd/mbMul1TCFCF 1iSe/HsJDkVKMi3oPSMzQp0xr/LoU8tR+BLYCx6a3Ikw7cIxeuF+WpIasZ3ePLx+ RHV0moz3qmIS96hslp7w6ryFRe/u+d+8t/WXIw7qWFX8FKJrnxfJKm88Y5CGj3OW hx9upozeZjNvEfTweiCESAOMFtLjx2JeMKnZeEfA+S9t0+5d4ibPU5zZF9hIJAnk kfwQ9ZuhGgGArNmeZxEXdFz8FtKBtj1E8Rj03clt/iTzKJJpwYXEST9mXAYspRui VwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 592105948283728271887246298166673207 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-04 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'support.trackyourdebt.co.za' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21992466574684662358242004949190791137211367825807948052470175924371946924927753582659053134170884634679451186974956260291109879677314949196386592447338615871065475136910505323283398372487561899920927465133024009503344364014584889349042743893217151196064671115600626541264545860144038129413632524605106679510266279092060723125694762044815074318710095563016929405938263121901773037870825969498006511458867151908085891111941259445726427601558555855515287767402085369705021136444080545492293190716839917866726287661173291236392835405783865506470153651127663810704779992873189720418241197157534701831282216655259589911127 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.trackyourdebt.co.za' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0005e151500c752c91ef79c40efa1a31b9e3151bffc7ac5905152b9a1ba8b6f44956c715ac343477649da0172f0498c664832d23fb056d8d25ccb913d496176b6fa5f844cd6cc3b7134e281077891ce03f938d463f9a702ac39bd32845ae44bc5e3fffa4d243ae0da4eabab505572e35032126d3ee10c35fc876cd7244f762cb10b13f506bfe76575383275992bc9bbd875e26d92c2326d67254ed525cc6f2cd644ed4bd22a7d690dd0fa81890f67c613b7c812f040023b30c6cc4127542fa851b5ee3b93e061cefd2dfbf87ae17159900e76a3e47875766e43f2937ddf9c1092f86fc87bba9c747c093bf509e4f2753e49ce2dd46529bd903e927e1e91f14afdd