kores.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ff:98:3c:b6:bf:59:79:db:01:16:9a:cc:e4:54:dc:fd:f2 was issued on by Let's Encrypt.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kores.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ff:98:3c:b6:bf:59:79:db:01:16:9a:cc:e4:54:dc:fd:f2Serial Number (int): 348311219259849685810316427957676827016690
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 25:08:2a:d3:7e:cd:2b:2f:8e:03:c4:28:0b:77:b2:75:a6:55:d7:ac
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d2:72:70:46:47:f5:be:cc:58:be:aa:f2:10:ff:a8:3b:77:b9:7b:2b
Fingerprint (sha256): de:1d:33:1e:47:db:bb:08:61:c5:89:58:50:a2:43:66:5b:cd:0c:fa:86:03:6b:e2:7b:f9:86:92:18:00:87:5b
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate kores.com
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kores.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kores-europe.cz
kores.at
kores.com
kores.cz
kores.de
production.kores.agentur-loop.com
www.kores-europe.cz
www.kores.at
www.kores.cz
www.kores.de
kores.at
kores.com
kores.cz
kores.de
production.kores.agentur-loop.com
www.kores-europe.cz
www.kores.at
www.kores.cz
www.kores.de
Other certificates including the domain name kores.com
(limited to 100 certificates)
kores.com
ae.kores.com
ae.kores.com
kores.com
origin.production.kores.com.sneakpeek.cc
kores.com
kores.com
kores.com
kores.com
ae.kores.com
origin.production.kores.com.sneakpeek.cc
*.kores.com
kores.com
kores.com
*.kores.com
kores.com
kores.com
kores.com
origin.production.kores.com.sneakpeek.cc
kores.com
*.kores.com
ae.kores.com
kores.com
kores.com
ae.kores.com
*.kores.com
kores.com
kores.com
kores.com
origin.production.kores.com.sneakpeek.cc
*.kores.com
kores.com
kores.com
ae.kores.com
ae.kores.com
kores.com
origin.production.kores.com.sneakpeek.cc
kores.com
kores.com
kores.com
kores.com
ae.kores.com
origin.production.kores.com.sneakpeek.cc
*.kores.com
kores.com
kores.com
*.kores.com
kores.com
kores.com
kores.com
origin.production.kores.com.sneakpeek.cc
kores.com
*.kores.com
ae.kores.com
kores.com
kores.com
ae.kores.com
*.kores.com
kores.com
kores.com
kores.com
origin.production.kores.com.sneakpeek.cc
*.kores.com
kores.com
kores.com
Certificate
The complete raw certificate details for kores.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgISA/+YPLa/WXnbARaazORU3P3yMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTgwOTUxMjBaFw0x OTEwMTYwOTUxMjBaMBQxEjAQBgNVBAMTCWtvcmVzLmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAK50hv1E4e+4qYltNv/QYvYuW1bLG3Tp6J4VDYwR xrFoQHpl4tEQD424MGJ12rGYdlABmvYx+IGSIp3+HROFiTDID8Us4nhuOcHWJ9jJ YimtSfBw34K7aZdZlHwVtgED7RSw+nKGGSRBvyzhHH1DjE4jD2e7a7xsNS7IZlfg PTGQQEjA8iKP342b2bOgHkJqGr3XbVfJk43uDHzJCkpLtO6Oz2G5F4RVvpwkPOr0 Nvim9/228L24VxnMjuZG1ZZRbouUOcphhfWBCxInlXKOtwHgW0Ll9aXYaLs6GjGl Pf87wMuiJpCTD0jPyot7yjsdbeKK6tSQCBHn1cYKytRlia0CAwEAAaOCAvEwggLt MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJQgq037NKy+OA8QoC3eydaZV16wwHwYD VR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4G CCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8G CCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCB pwYDVR0RBIGfMIGcgg9rb3Jlcy1ldXJvcGUuY3qCCGtvcmVzLmF0gglrb3Jlcy5j b22CCGtvcmVzLmN6gghrb3Jlcy5kZYIhcHJvZHVjdGlvbi5rb3Jlcy5hZ2VudHVy LWxvb3AuY29tghN3d3cua29yZXMtZXVyb3BlLmN6ggx3d3cua29yZXMuYXSCDHd3 dy5rb3Jlcy5jeoIMd3d3LmtvcmVzLmRlMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5 cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAb1N2rDHwMRnYmQCkURX/ dxUcEdkCwQApBo2yCJo32RMAAAFsBLU2fAAABAMARzBFAiA2M3I9vBk6YTXuEjzj Wgi1pTth9bEvUgaATkhOWnbtWgIhAImPE4L92rkPePDSl8+JomRdjZlbvHw/cSWe APSLalM/AHUAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFsBLU2 gQAABAMARjBEAiBbTTggddjAj5eZw7POgJkHkBmZnB1vSdPb5y2TYhFIRwIgezY6 P1piWCS+w8qgD4HQOSJBfRtiv4dzuTKHLPQoSOEwDQYJKoZIhvcNAQELBQADggEB AGNK0IsvoDbmfXHzVP2zjzWJC+K8gEyWlJNFNa8HJU7TRGsrCEH470TzPZiKHOwF QVKksuX6C8BhSUDdRY/Kx/OX7+1RXoON6EmJ5MjEdl1u2m4SbMwMWzSau4mvvLtK qIFud+/hRLrEqIF+wJ3s9ue9gQu1ssduBbCjrBWwHflrKarX14kLseXee2rZO872 h4xsE4/bO+dvEvKVNxDKHUnlLxSfAmWCHiRUXD4SgyLDMxHH0pE8GrzzpPvdXkTg tEXsSItrTAFq6UcFDQPUKBRS9yTQPrNyqI8mids9wiqOsRongvFMtnFJewFAwZi2 KrBiaJfg0KiPB/xqiRtrjJ0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnSG/UTh77ipiW02/9Bi 9i5bVssbdOnonhUNjBHGsWhAemXi0RAPjbgwYnXasZh2UAGa9jH4gZIinf4dE4WJ MMgPxSzieG45wdYn2MliKa1J8HDfgrtpl1mUfBW2AQPtFLD6coYZJEG/LOEcfUOM TiMPZ7trvGw1LshmV+A9MZBASMDyIo/fjZvZs6AeQmoavddtV8mTje4MfMkKSku0 7o7PYbkXhFW+nCQ86vQ2+Kb3/bbwvbhXGcyO5kbVllFui5Q5ymGF9YELEieVco63 AeBbQuX1pdhouzoaMaU9/zvAy6ImkJMPSM/Ki3vKOx1t4orq1JAIEefVxgrK1GWJ rQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 348311219259849685810316427957676827016690 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 09:51:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 09:51:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kores.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22022926818378440407214324949848658924858385300696222469987260500323287482923796495405292264725112954436545495787349048149886240390545780990807662732554600038048778622487731781672371422056274876068147066931851519458136933583260845592177235914335181728915129847617276814655326915897916149001611052124485300459129084805064409234426114953174043454877887655218392213906488838458600747777100553636910834177118975894874106001025345522528260886682412396482373020295611053734216721564464007985425877601639043143957088932596529675357349893274637623545787847630172193381031430409622075030103682996812030387731365079841847478701 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 25082ad37ecd2b2f8e03c4280b77b275a655d7ac . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kores-europe.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kores.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kores.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kores.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kores.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.kores.agentur-loop.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kores-europe.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kores.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kores.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kores.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c04b5367c000004030047304502203633723dbc193a6135ee123ce35a08b5a53b61f5b12f5206804e484e5a76ed5a022100898f1382fddab90f78f0d297cf89a2645d8d995bbc7c3f71259e00f48b6a533f007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c04b53681000004030046304402205b4d382075d8c08f9799c3b3ce8099079019999c1d6f49d3dbe72d936211484702207b363a3f5a625824bec3caa00f81d03922417d1b62bf8773b932872cf42848e1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00634ad08b2fa036e67d71f354fdb38f35890be2bc804c9694934535af07254ed3446b2b0841f8ef44f33d988a1cec054152a4b2e5fa0bc0614940dd458fcac7f397efed515e838de84989e4c8c4765d6eda6e126ccc0c5b349abb89afbcbb4aa8816e77efe144bac4a8817ec09decf6e7bd810bb5b2c76e05b0a3ac15b01df96b29aad7d7890bb1e5de7b6ad93bcef6878c6c138fdb3be76f12f2953710ca1d49e52f149f0265821e24545c3e128322c33311c7d2913c1abcf3a4fbdd5e44e0b445ec488b6b4c016ae947050d03d4281452f724d03eb372a88f2689db3dc22a8eb11a2782f14cb671497b0140c198b62ab0626897e0d0a88f07fc6a891b6b8c9d