www.walmartwww.clos.com
Issued by R3
About this certificate
This digital certificate with serial number 04:05:3b:70:e3:6d:5f:84:e6:19:a5:f8:9a:f8:62:f2:49:ac was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.walmartwww.clos.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:05:3b:70:e3:6d:5f:84:e6:19:a5:f8:9a:f8:62:f2:49:acSerial Number (int): 350229566163417556324750826166800373402028
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 2e:e1:07:44:ca:00:de:f7:7e:94:c1:26:cf:21:38:f9:f3:00:a3:f7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 1d:3e:bb:37:89:f1:c9:51:f3:b6:ac:26:ce:d1:da:74:1a:4c:0f:0a
Fingerprint (sha256): e6:cb:38:54:30:88:52:3e:12:07:0b:cf:94:be:a7:05:6a:50:81:48:7a:bd:50:9d:38:7c:3e:53:e5:ee:6a:fb
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.walmartwww.clos.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.walmartwww.clos.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.walmartwww.clos.com
Other certificates including the domain name clos.com
(limited to 100 certificates)
clos.com
www.49s.lettest.results.clos.com
www.clos.com
49s.lettest.results.clos.com
ww18.vin65.com
fortsystems.com
www.clos.com
49s.lettest.results.clos.com
asda.clos.com
jhendrix.clos.com
clos.com
www.walmartwww.clos.com
walmartwww.clos.com
www.www.walmartwww.clos.com
em.ns.clos.com
fortsystems.com
fortsystems.com
www.clos.com
ww18.vin65.com
fortsystems.com
clos.com
walmartwww.clos.com
openhab.ci.clos.com
clos.com
clos.com
clos.com
clos.com
gedestinedestinos.clos.com
clos.com
clos.com
www.49s.lettest.results.clos.com
offers.clos.com
allswellhome.clos.com
ww18.vin65.com
clos.com
clos.com
www.clos.com
ww18.vin65.com
fortsystems.com
www.www.www.walmartwww.clos.com
ww18.vin65.com
www.walmartwww.clos.com
fortsystem.com
bs.ns.clos.com
www.49s.lettest.results.clos.com
www.clos.com
49s.lettest.results.clos.com
ww18.vin65.com
fortsystems.com
www.clos.com
49s.lettest.results.clos.com
asda.clos.com
jhendrix.clos.com
clos.com
www.walmartwww.clos.com
walmartwww.clos.com
www.www.walmartwww.clos.com
em.ns.clos.com
fortsystems.com
fortsystems.com
www.clos.com
ww18.vin65.com
fortsystems.com
clos.com
walmartwww.clos.com
openhab.ci.clos.com
clos.com
clos.com
clos.com
clos.com
gedestinedestinos.clos.com
clos.com
clos.com
www.49s.lettest.results.clos.com
offers.clos.com
allswellhome.clos.com
ww18.vin65.com
clos.com
clos.com
www.clos.com
ww18.vin65.com
fortsystems.com
www.www.www.walmartwww.clos.com
ww18.vin65.com
www.walmartwww.clos.com
fortsystem.com
bs.ns.clos.com
Certificate
The complete raw certificate details for www.walmartwww.clos.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgISBAU7cONtX4TmGaX4mvhi8kmsMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMjAwNTIzMzhaFw0yNDA1MjAwNTIzMzdaMCIxIDAeBgNVBAMT F3d3dy53YWxtYXJ0d3d3LmNsb3MuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A MIICCgKCAgEAu2gEC667Yjs2D8QUCEh8GH+jUXW5aYp4MsvgCWCzhFxQDu1soBbd aR0ajZ/rZMyW07sWRXk0TQBm0JX8p3clE9gODc9I1WWstMI4G1WQUQRop8FMjDFg XxB0m10+QjfIvAeEZZcSEC5rFRnPK2wm8q2d/mYKUrTGWmqn9rEGawKDJkr5HHgi dtc/RBY/D+tg9i6IF1CrMzKz5ac87aNQQPGIQzaeFN226JnrNm+bOK5GvKl9hQhl bVSQpd7IGBVvXiP2j798PFi6CTJWCQzCbS4UoeqN1kKkWkfxjnLsqmtcI9TrbEB7 8q92PY0k5Uy3Z5+LkhsDEZsuSanrjePPDAy/1FeialZykWv0+QzE2F5TxJ9R/V7r u44dlttNNOJ+R+uZ6OkO4MWqscRKQa1130NLTJLWSBPY6qDT8yIt/Oo/5n2cdfVo 3OMZeVKSkjDfS32sKTCDIr9RSOdkDJ6EIvlMcZl5XkFKu+MGc4s/KL8Q9rad1/rK wLVqSyaWRQPj7kkhadiVq2boiGxrNP11aSVQt8222fxhaglxB4cv4p2F1yoLSdrN tQw0ZuvbR8+8PBdPmX/nGZXBuyYD5wKxL2/niohYSzvB/Tp12+YPmwkjkke1Yz7v zcfDwjq/FZMDZh69AFnyRAWFeuO+2nrFu2rKkzwz7FuDrZvd1IIrEhUCAwEAAaOC AhcwggITMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQULuEHRMoA3vd+lMEmzyE4+fMA o/cwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEE STBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUH MAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wIgYDVR0RBBswGYIXd3d3LndhbG1h cnR3d3cuY2xvcy5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggECBgorBgEEAdZ5 AgQCBIHzBIHwAO4AdQB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAA AY3FLysBAAAEAwBGMEQCIHnuOLNqZvYeei5xi6+X8KRkqg3hXZOw4NQgDT9Kc0dn AiA9+3tCsD7a4Sl7/qODbnAjHEtimF3bexZSokulx2tg2gB1AEiw42vapkc0D+Vq AvqdMOscUgHLVt0sgdm7v6s52IRzAAABjcUvLCwAAAQDAEYwRAIgaiKpCvoewWum 4Wrk1a4+KFNJYo+PhXTzMNDtVmUriGkCIAraIBqWoMdnCalDhSTPVDHc2yBxQiQT PU8RZNH2pfrPMA0GCSqGSIb3DQEBCwUAA4IBAQCJYr4C7NbeJGwbP8q3YZ/8M0P9 tSS5rr5HDbqrI6zlGTA05GsRk6gszp8UI5WwiPwoLJ/kYZnCSBCvngC2Uz+akjh6 5OXQwombPtht3p7fFakUMqXqo+gs1djgWZcH3KXdb42u6/XM3X9PYqEoHKkuRSOl YzbVz3gbr3HbOPjpwontRSLufZCNJ4E1CNNlhWm8W3jkrzRbumy1IEaytiYGfoko +HllYtlk8CZmiNTSV2IW8M5K24YMh41jmkORQNtXuC54bOQ54iyZpAABlrDMrzYe tXKTwPV8iBOmKNxMw665t9oTw3Tqjhd4RNtU3ue2flWL7ISICkQ89cXWsJy1 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu2gEC667Yjs2D8QUCEh8 GH+jUXW5aYp4MsvgCWCzhFxQDu1soBbdaR0ajZ/rZMyW07sWRXk0TQBm0JX8p3cl E9gODc9I1WWstMI4G1WQUQRop8FMjDFgXxB0m10+QjfIvAeEZZcSEC5rFRnPK2wm 8q2d/mYKUrTGWmqn9rEGawKDJkr5HHgidtc/RBY/D+tg9i6IF1CrMzKz5ac87aNQ QPGIQzaeFN226JnrNm+bOK5GvKl9hQhlbVSQpd7IGBVvXiP2j798PFi6CTJWCQzC bS4UoeqN1kKkWkfxjnLsqmtcI9TrbEB78q92PY0k5Uy3Z5+LkhsDEZsuSanrjePP DAy/1FeialZykWv0+QzE2F5TxJ9R/V7ru44dlttNNOJ+R+uZ6OkO4MWqscRKQa11 30NLTJLWSBPY6qDT8yIt/Oo/5n2cdfVo3OMZeVKSkjDfS32sKTCDIr9RSOdkDJ6E IvlMcZl5XkFKu+MGc4s/KL8Q9rad1/rKwLVqSyaWRQPj7kkhadiVq2boiGxrNP11 aSVQt8222fxhaglxB4cv4p2F1yoLSdrNtQw0ZuvbR8+8PBdPmX/nGZXBuyYD5wKx L2/niohYSzvB/Tp12+YPmwkjkke1Yz7vzcfDwjq/FZMDZh69AFnyRAWFeuO+2nrF u2rKkzwz7FuDrZvd1IIrEhUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 350229566163417556324750826166800373402028 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 05:23:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-20 05:23:37 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.walmartwww.clos.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764551047964905130154781101185103851075099520156272262661974730376842234170135123217763849999265066584089957998534791796263129004138746053349906194076654300161248163272026679724717837577923381639669970487503728750451970281879697194912425348702337256867434038085032962519766428136347029269750218002534230560755993307816991126159826945777930766062985924471514875652238969447097885657218994940041367177137425228299824335711671524647000614703794018597239259781751974399706672365675333286511373890011400462033349661408367354966173132183172500705169296177534398799385239591229794092501527575707585059663220335805355127921779997616529561232310053357094494364790181294960757029439459897594347176812403102297615656570449035135656014899191833090593525072584084953607863153827416708949481886028851613851283262756907754205641117353358775218737508447791061214732631994871965546814198735242449070044631246196226912342147058097181620785682700603353702030935370294380204466256345068239924070835618469588264609644384752536114561451089284075719565080101757478872975588117152391294702966547767338662943590693594510280216509669049944201290018556898992580616479513672621057244772081972076547433083036764841580816474524664904547242983086502781415192203797 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2ee10744ca00def77e94c126cf2138f9f300a3f7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walmartwww.clos.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018dc52f2b010000040300463044022079ee38b36a66f61e7a2e718baf97f0a464aa0de15d93b0e0d4200d3f4a73476702203dfb7b42b03edae1297bfea3836e70231c4b62985ddb7b1652a24ba5c76b60da00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dc52f2c2c000004030046304402206a22a90afa1ec16ba6e16ae4d5ae3e285349628f8f8574f330d0ed56652b886902200ada201a96a0c76709a9438524cf5431dcdb20714224133d4f1164d1f6a5facf . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008962be02ecd6de246c1b3fcab7619ffc3343fdb524b9aebe470dbaab23ace5193034e46b1193a82cce9f142395b088fc282c9fe46199c24810af9e00b6533f9a92387ae4e5d0c2899b3ed86dde9edf15a91432a5eaa3e82cd5d8e0599707dca5dd6f8daeebf5ccdd7f4f62a1281ca92e4523a56336d5cf781baf71db38f8e9c289ed4522ee7d908d27813508d3658569bc5b78e4af345bba6cb52046b2b626067e8928f8796562d964f0266688d4d2576216f0ce4adb860c878d639a439140db57b82e786ce439e22c99a4000196b0ccaf361eb57293c0f57c8813a628dc4cc3aeb9b7da13c374ea8e177844db54dee7b67e558bec84880a443cf5c5d6b09cb5