hifi.tebixa.com
Issued by R3
About this certificate
This digital certificate with serial number 03:99:cc:9e:d3:90:b8:df:a4:55:7e:63:d5:91:b5:d7:80:3e was issued on by Let's Encrypt.
With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=hifi.tebixa.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:99:cc:9e:d3:90:b8:df:a4:55:7e:63:d5:91:b5:d7:80:3eSerial Number (int): 313672047119282593571472307319247797190718
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: aa:a6:49:d2:46:e7:6a:b9:ed:09:35:2e:0a:b5:c0:e0:41:28:b0:31
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 00:15:e6:c5:34:94:2c:78:c0:80:7b:92:3f:79:22:96:fc:62:a2:c3
Fingerprint (sha256): e1:c0:e4:cb:8e:01:d3:27:a0:f2:27:18:65:d0:09:bd:8e:5f:0d:b8:d7:cd:19:46:75:9d:fa:64:0e:24:8d:40
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate hifi.tebixa.com
24
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for hifi.tebixa.com
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
connect.aciesglobal.com
connect.athloft.com
connect.byjus.com
connect.celestialsys.com
connect.cfrce.org
connect.coworx.in
connect.cs.zohohost.in
connect.deskriver.com
connect.empfly.com
connect.fyers.in
connect.medhaid.com
connect.mindsjournal.com
connect.myacies.com
connect.nevrio.tech
connect.ojasimmigration.com
connect.thoughtseed.io
connect.twinny.in
connect.zustpe.com
connectindia.productspace.com
hifi.tebixa.com
intranet.alternative-path.com
intranet.securin.io
intranet.thoughtlogik.com
social.simplable.com
connect.athloft.com
connect.byjus.com
connect.celestialsys.com
connect.cfrce.org
connect.coworx.in
connect.cs.zohohost.in
connect.deskriver.com
connect.empfly.com
connect.fyers.in
connect.medhaid.com
connect.mindsjournal.com
connect.myacies.com
connect.nevrio.tech
connect.ojasimmigration.com
connect.thoughtseed.io
connect.twinny.in
connect.zustpe.com
connectindia.productspace.com
hifi.tebixa.com
intranet.alternative-path.com
intranet.securin.io
intranet.thoughtlogik.com
social.simplable.com
Other certificates including the domain name tebixa.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for hifi.tebixa.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGNDCCBRygAwIBAgISA5nMntOQuN+kVX5j1ZG114A+MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEwMjUxNjA4MDJaFw0yNDAxMjMxNjA4MDFaMBoxGDAWBgNVBAMT D2hpZmkudGViaXhhLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABGMRJKAG VWFRXu8Ig16xVeOPXxuO8VZiRY1Xj0C4h1UVnhAuPOCvZ68ri5zaF+nBLpPoYenD Pq452wnlk+xBfAyjggQlMIIEITAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKqmSdJG 52q57Qk1Lgq1wOBBKLAxMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLG MFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iu b3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIICLQYDVR0R BIICJDCCAiCCF2Nvbm5lY3QuYWNpZXNnbG9iYWwuY29tghNjb25uZWN0LmF0aGxv ZnQuY29tghFjb25uZWN0LmJ5anVzLmNvbYIYY29ubmVjdC5jZWxlc3RpYWxzeXMu Y29tghFjb25uZWN0LmNmcmNlLm9yZ4IRY29ubmVjdC5jb3dvcnguaW6CFmNvbm5l Y3QuY3Muem9ob2hvc3QuaW6CFWNvbm5lY3QuZGVza3JpdmVyLmNvbYISY29ubmVj dC5lbXBmbHkuY29tghBjb25uZWN0LmZ5ZXJzLmlughNjb25uZWN0Lm1lZGhhaWQu Y29tghhjb25uZWN0Lm1pbmRzam91cm5hbC5jb22CE2Nvbm5lY3QubXlhY2llcy5j b22CE2Nvbm5lY3QubmV2cmlvLnRlY2iCG2Nvbm5lY3Qub2phc2ltbWlncmF0aW9u LmNvbYIWY29ubmVjdC50aG91Z2h0c2VlZC5pb4IRY29ubmVjdC50d2lubnkuaW6C EmNvbm5lY3QuenVzdHBlLmNvbYIdY29ubmVjdGluZGlhLnByb2R1Y3RzcGFjZS5j b22CD2hpZmkudGViaXhhLmNvbYIdaW50cmFuZXQuYWx0ZXJuYXRpdmUtcGF0aC5j b22CE2ludHJhbmV0LnNlY3VyaW4uaW+CGWludHJhbmV0LnRob3VnaHRsb2dpay5j b22CFHNvY2lhbC5zaW1wbGFibGUuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIB AwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70A DS1yb+H61BcAAAGLZ864SQAABAMARjBEAiAXcwL9MG82f3wTXLDCMeHDP1vsM1Vc u+bTdLYKhmYzxAIgSqsSB7Yvc2lHEZoNmCP/zb3pdEHeTrdrfP6iDvy6Jq0AdgB2 /4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYtnzriBAAAEAwBHMEUC IQCCS/nK7pjkGNGOREU2I6o7wUgWGhLmIrJTPIIdS+NhpAIgXIaXJPnn8G7S3IC5 Z/wXMbeT0yeevSGB7UBZyKRJEJQwDQYJKoZIhvcNAQELBQADggEBALM8n6EGJXhN 9HmHEL/mltwQnJlbPccKXSzytH41x/emcF0YsuoV9umgYAK9EfGbRmIBaYL/lWKa t5Kvdrovse8CUFLBurps9rh3thB/5evnGwBlX1+vQdFjk7WMorhjdiGtay5QSP3S BzZOpQQKEZmsjCUk3fdIC3nmHnJ9XjU4O709DF0XxkVrSvJoXi4kFyECiPGAyzxb NtbGQiACAJ3NfELAmNHzG4zT1qWPJkzSKnAmXyQIKJ2MKje9jTyRIN31RnzybBtL D90oJjsg50wNthC8f2KvgulE2nMiUhSBudJqd+UUu3bu/4pmeD5Zl9rPe/ZK8yjZ 1mlCaQzgvPs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEYxEkoAZVYVFe7wiDXrFV449fG47x VmJFjVePQLiHVRWeEC484K9nryuLnNoX6cEuk+hh6cM+rjnbCeWT7EF8DA== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 313672047119282593571472307319247797190718 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-25 16:08:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-23 16:08:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hifi.tebixa.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 0004631124a0065561515eef08835eb155e38f5f1b8ef15662458d578f40b88755159e102e3ce0af67af2b8b9cda17e9c12e93e861e9c33eae39db09e593ec417c0c . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) aaa649d246e76ab9ed09352e0ab5c0e04128b031 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (548 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.aciesglobal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.athloft.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.byjus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.celestialsys.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.cfrce.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.coworx.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.cs.zohohost.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.deskriver.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.empfly.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.fyers.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.medhaid.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.mindsjournal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.myacies.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.nevrio.tech' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.ojasimmigration.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.thoughtseed.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.twinny.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.zustpe.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectindia.productspace.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hifi.tebixa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.alternative-path.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.securin.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.thoughtlogik.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.simplable.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b67ceb84900000403004630440220177302fd306f367f7c135cb0c231e1c33f5bec33555cbbe6d374b60a866633c402204aab1207b62f736947119a0d9823ffcdbde97441de4eb76b7cfea20efcba26ad00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b67ceb8810000040300473045022100824bf9caee98e418d18e44453623aa3bc148161a12e622b2533c821d4be361a402205c869724f9e7f06ed2dc80b967fc1731b793d3279ebd2181ed4059c8a4491094 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00b33c9fa10625784df4798710bfe696dc109c995b3dc70a5d2cf2b47e35c7f7a6705d18b2ea15f6e9a06002bd11f19b4662016982ff95629ab792af76ba2fb1ef025052c1baba6cf6b877b6107fe5ebe71b00655f5faf41d16393b58ca2b8637621ad6b2e5048fdd207364ea5040a1199ac8c2524ddf7480b79e61e727d5e35383bbd3d0c5d17c6456b4af2685e2e2417210288f180cb3c5b36d6c6422002009dcd7c42c098d1f31b8cd3d6a58f264cd22a70265f2408289d8c2a37bd8d3c9120ddf5467cf26c1b4b0fdd28263b20e74c0db610bc7f62af82e944da7322521481b9d26a77e514bb76eeff8a66783e5997dacf7bf64af328d9d66942690ce0bcfb