webmail.pepstores.com

- Pepkor Trading (Pty) Ltd -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:b2:72:36:ae:8a:0c:54:9d:eb:2f:6e:06:61:7b:5c was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Pepkor Trading (Pty) Ltd

Organization: Pepkor Trading (Pty) Ltd
State / Province: Western Cape
Country: ZA

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:b2:72:36:ae:8a:0c:54:9d:eb:2f:6e:06:61:7b:5c
Serial Number (int): 7572685346776652444424422130670730076
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 55:e6:ad:69:40:2a:aa:4f:0d:2d:c2:b7:ae:42:00:f1:4c:cd:a0:d7
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 44:ad:d8:a9:d9:3c:fa:02:55:d2:68:f9:37:74:98:8b:0a:c0:7f:20
Fingerprint (sha256): de:51:26:4e:c1:72:61:72:6a:11:e0:48:f0:ca:d7:76:c9:8f:2c:35:40:21:2e:e8:f7:3e:21:7a:0b:dc:46:a0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate webmail.pepstores.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.pepstores.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.pepstores.com
webmail.tenacityinc.co.za
autodiscover.tenacityinc.co.za

Other certificates including the domain name pepstores.com

(limited to 100 certificates)
san-14-s51.tlsprovisioning.exacttarget.com
*.pepstores.com
www.hi5.pepstores.com
sip.pepkorit.com
sales.pepstores.com
securexweb.pepstores.com
webmail.pepstores.com
san-14-s51.tlsprovisioning.exacttarget.com
san-14-s51.tlsprovisioning.exacttarget.com
sales.pepstores.com
merchandise.pepstores.com
sip.pepkorit.com
*.pepstores.com
webmail.pepstores.com
webmail.pepstores.com
googleguides.pepstores.com
hi5.pepstores.com
san-14-s51.tlsprovisioning.exacttarget.com
*.pepstores.com
san-14-s51.tlsprovisioning.exacttarget.com
*.pepstores.com
*.pepstores.com
sip.pepkorit.com
*.pepstores.com
sales.pepstores.com
hi5.pepstores.com
webmail.pepstores.com
webmail.pepstores.com
hi5.pepstores.com
san-14-s51.tlsprovisioning.exacttarget.com
*.pepstores.com
*.pepstores.com
webmail.pepstores.com
san-14-s51.tlsprovisioning.exacttarget.com
sip.pepkorit.com
san-14-s51.tlsprovisioning.exacttarget.com
*.pepstores.com
webmail.pepstores.com
webmail.pepstores.com
*.pepstores.com
sales-training.pepstores.com
san-14-s51.tlsprovisioning.exacttarget.com
webmail.pepstores.com
san-14-s51.tlsprovisioning.exacttarget.com
san-14-s51.tlsprovisioning.exacttarget.com
san-14-s51.tlsprovisioning.exacttarget.com
sip.pepkorit.com
san-14-s51.tlsprovisioning.exacttarget.com
googleguides.pepstores.com
www.sales-training.pepstores.com
san-14-s51.tlsprovisioning.exacttarget.com
*.pepstores.com
hi5.pepstores.com
merchandise.pepstores.com
peplync1.pepstores.com
www.hi5.pepstores.com
san-14-s51.tlsprovisioning.exacttarget.com
www.hi5.pepstores.com
san-14-s51.tlsprovisioning.exacttarget.com
googleguides.pepstores.com
hi5.pepstores.com
ise0.pepstores.com
webmail.pepstores.com
ise0.pepstores.com
webmail.pepstores.com
san-14-s51.tlsprovisioning.exacttarget.com
san-14-s51.tlsprovisioning.exacttarget.com
san-14-s51.tlsprovisioning.exacttarget.com
googleguides.pepstores.com
san-14-s51.tlsprovisioning.exacttarget.com
san-14-s51.tlsprovisioning.exacttarget.com
sip.pepkorit.com
webmail.pepstores.com
san-14-s51.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for webmail.pepstores.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2thtyrLm7XBwp2vuGvQn
IdG0niXmhy8GE0EAoBOlIjQ68Yfzo/X+fAoVh9ak02HGU/R1H7lmtwNlJcWUJtyv
SkTRVhKs2QrmKNU1EsYmGFXFIvUVwxs38lUiCIX1fpVT0DC1zttA39eEKvcrSKaE
n8QJgKVSF4o04g3PN36PNXTnoFZUPZIZOglrTlKYKK8udm7KxXadEwn/WoSl0XJz
DbkKp1hxJeI2SeIgvCl/aBMgKTjFWnvC1yIOieDi8hyOa1SVpGQfjQyc7SEU3sDo
YC1geUYHcA0YnMX14tKbS0CZLza37ul8/nXwWX3Ih46RZJj0e/x9VI83sg2ylGB4
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7572685346776652444424422130670730076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Western Cape'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pepkor Trading (Pty) Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.pepstores.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27626675538160562848198893099156375730815894600433103894344932415586416354044807887850745969017209419827165826961618465335876465571989759048594025830398548992276654592093478682716943303826276147988501662597723918259619372022878321656606988918675331020900369718983651318265724922769871310274230925103067578704209155249154126781330814345844384019824063266207042524499090279786069386803428961408758807855249311438708453486641271801221094384538831533334598974194938175746466588432886908652574487389748451199081527303698792423666294627004042878806403346358579097114885475835512288178520353410795507098114526293043164772521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55e6ad69402aaa4f0d2dc2b7ae4200f14ccda0d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.pepstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.tenacityinc.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tenacityinc.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017fb081e2f80000040300473045022100ad7cb04071a82b0968dd7f45c6da430fb3c25d952c4c143432d99870784becf2022067b05caae6113399ed16523690223ae691351ab193ea62600c3bfa21fbcc79a500760035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000017fb081e318000004030047304502203de00bfdc8a5bea959a3fe4bb08d3897595301990c20762aa0c83ff0c560614b02210096d0abcca6b1797ea25f942ca921b80f04dca5d3684b2b2506dd465cc8659e6f007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000017fb081e34c0000040300483046022100932831847885d185c4a8d7a67589ce9c798865bb7e26480b2479103b2fe5c4710221008879b784210a731d536c05cb36dc5a8a4df199a16df9dbb5c06872f4f6ef87ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006718eeaa69e12056068ef6a47f6ad57a0ea6f96a21acedd206b07d3554a5d285d4773f72ee6c6d5827055d08d2a11300558eb17281fb19df399c648fc892e991e535ce84be28b8f697b732c60040dd19709417d7f42f7583d78583428f0b22b448b81f042f13c9c1ebceba430abea28748e0fdefac1d2b2a9783488998e17cb31b50a4f5808f3ad26824ab656702b899060de12d9508621dab32028f4f352a6e281388ff1bcf5920a6303901052206284a6dc377a39c78c46bb95ad9db79f596b7ba3f2db0d85c98f8916b9e3f0ae5f4448d251e77d7b986618bab3c8ce580a6f92a31250654afd31527edb1115acba8449b856ed51801638f989634a9906283