tightleaf.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:cf:fa:55:07:23:56:bf:db:3f:67:a7:3a:fd:b9:95:02:09 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=tightleaf.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:cf:fa:55:07:23:56:bf:db:3f:67:a7:3a:fd:b9:95:02:09Serial Number (int): 332108056236870906869969619585184008831497
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 52:41:0f:2a:6a:b9:1a:b2:77:30:76:86:7e:b3:bc:02:6c:69:2f:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): bc:e5:4f:4b:eb:33:fd:d9:04:18:a8:b0:b1:db:b7:9e:94:b9:5e:f8
Fingerprint (sha256): e9:12:56:b3:87:9e:2b:70:d5:2c:96:73:98:19:a4:3b:89:c0:fa:04:ea:8f:b9:07:4b:d8:04:31:2a:f0:55:31
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate tightleaf.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tightleaf.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
tightleaf.com
Other certificates including the domain name tightleaf.com
(limited to 100 certificates)
www.ultralure.com
teletrue.com
www.thermachef.com
fundydiscoveryaquarium.com
784.me
www.i-leaguebetting.com
nextcleaning.com
www.enterpriselinuxmag.com
www.tightleaf.com
www.hotelqg.com
www.anywheremba.com
deerlakevillage.com
www.caspertowing.com
www.bannedstuff.com
shantiweinberg.com
kidstracksuits.com
ownapicasso.com
www.facewallets.com
www.tightleaf.com
www.defense-minded.com
tightleaf.com
lip-augmentation.com
smileywish.org
teletrue.com
www.thermachef.com
fundydiscoveryaquarium.com
784.me
www.i-leaguebetting.com
nextcleaning.com
www.enterpriselinuxmag.com
www.tightleaf.com
www.hotelqg.com
www.anywheremba.com
deerlakevillage.com
www.caspertowing.com
www.bannedstuff.com
shantiweinberg.com
kidstracksuits.com
ownapicasso.com
www.facewallets.com
www.tightleaf.com
www.defense-minded.com
tightleaf.com
lip-augmentation.com
smileywish.org
Certificate
The complete raw certificate details for tightleaf.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgISA8/6VQcjVr/bP2enOv25lQIJMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTYwODM5MTBaFw0y MDA2MTQwODM5MTBaMBgxFjAUBgNVBAMTDXRpZ2h0bGVhZi5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDNd8mR4PLtb1DKog5iFRSR34MYpWeQuLW9 mP/OWxZIqWFdIiBEiSsNH5d/Ji1ekOr3rUn5yRFEg4QE2kl7xF66iV54Xa9Yn/0b OEnj5vudqnyNlfgfbvqkosYAQ3W49JjeeYu2j8LSQ/cRmbfXtyTUQxqyqxkhA6NV rSPRM13ZjPA25P04BPmDQ+KYwO+bQLPUbUSJlfA/+DME2QQwLK6BvkYsso4SHYrZ y6gXnu3O2hi9mvqDLcznAtaKbEySvjdG8tNiLpXf48xsoOUzDlMFcecBmSsJ0PIH NyMlwqECMf2E8ZhuQy9/TJtO4p7YEEluBaLxFegrFuh5VmGXZzeplmRlTw0BEFHB +x/FQFOZvL7dVF43uyPfgmkvfeA7LCUXkCyTl8Ho/6aNZRo8rOmPFzgSsOYERrkT zBDfLngIv5TiGm8GM0IpAJY83dnguhPFB3iI7so5ZSLYmGAwram67m2xL9NW5dpp cDH+ozXSENNN/rs3BKuwf7XOPK/rIVDsplRzcBTo5l2xKYcIRfflIRHH0b4S8rBu DMJwAbVOGFxGaiJcT4j3GLmMTzIB6dUo93fLbxSl7Eu9iLRmxvpaIJWNV6iNke6c RzkgC5zNHmZobYS9nwwCifLRCG44EcS0ms/S7azFa/rEe8kCJTFt4I/JbK2wvi4B o0rEQvwHwwIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRSQQ8q arkasncwdoZ+s7wCbGkvvjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXRpZ2h0bGVhZi5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx AO8AdQDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAXDith4MAAAE AwBGMEQCIF+FwjtE9pf78WDyOve2eB0FdRhO0ko6bBouN/0aGX9GAiBh15YKWQgd nlel2CkHHwxIPx6yO4o4mZ1NR8T+7+G1bAB2AAe3XBvlfWj/8bDGHSMVx7rmV3xX lLdq7rxhOhpp06IcAAABcOK2Hl0AAAQDAEcwRQIhAIltviZFlzs0gN1ZCqmkXeaT yGhBbJMJytbSbDDambcgAiA99m0jg5DDHsaaCkX0RoZE46F+iSuGuRyOJ+JZUUNJ jzANBgkqhkiG9w0BAQsFAAOCAQEAMhEPsnIb9Q+GZEpIr+qiW2pd56kzV01P7n0h k70ud5JWkaeuTOCG3GrxZdLs1tCbQ3hO0l5n/jnKk8U073aghi9u0lhLBLjnMnD3 WJNeCTRPvw6o9aea/3YdPGJ/EYMpaKT/gonSCCuKi6AjOrnOOxsHUHONEx9Vro1H eqg4ta3oPvkWg6h04e9RjIjTyi5tJtGQ2fW1pEijkvqM+xozh5HC4QmaP7PkXGdy U4Gd9ubu+3T+rKVyTimZjvsaSnMjkP+CNmbmEtYMzAg1kCvdDSHHHFLR7cNiDwjE 4wBdyIUE2O+MaIP4xnsN2oyceQSmTJCsWTKDxcdrXJaV7zgLQg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzXfJkeDy7W9QyqIOYhUU kd+DGKVnkLi1vZj/zlsWSKlhXSIgRIkrDR+XfyYtXpDq961J+ckRRIOEBNpJe8Re uoleeF2vWJ/9GzhJ4+b7nap8jZX4H276pKLGAEN1uPSY3nmLto/C0kP3EZm317ck 1EMasqsZIQOjVa0j0TNd2YzwNuT9OAT5g0PimMDvm0Cz1G1EiZXwP/gzBNkEMCyu gb5GLLKOEh2K2cuoF57tztoYvZr6gy3M5wLWimxMkr43RvLTYi6V3+PMbKDlMw5T BXHnAZkrCdDyBzcjJcKhAjH9hPGYbkMvf0ybTuKe2BBJbgWi8RXoKxboeVZhl2c3 qZZkZU8NARBRwfsfxUBTmby+3VReN7sj34JpL33gOywlF5Ask5fB6P+mjWUaPKzp jxc4ErDmBEa5E8wQ3y54CL+U4hpvBjNCKQCWPN3Z4LoTxQd4iO7KOWUi2JhgMK2p uu5tsS/TVuXaaXAx/qM10hDTTf67NwSrsH+1zjyv6yFQ7KZUc3AU6OZdsSmHCEX3 5SERx9G+EvKwbgzCcAG1ThhcRmoiXE+I9xi5jE8yAenVKPd3y28UpexLvYi0Zsb6 WiCVjVeojZHunEc5IAuczR5maG2EvZ8MAony0QhuOBHEtJrP0u2sxWv6xHvJAiUx beCPyWytsL4uAaNKxEL8B8MCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 332108056236870906869969619585184008831497 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 08:39:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-14 08:39:10 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tightleaf.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 838235978800157870818112552761510654084434576739218155816695708037989414336174701068141218103195428099951486115591903944056946328684832239243428892497234067100066112871664795857906497001807683984022358613896677625574230293986903861475826908295261461763141902453427992462679739901730819910522270152013291246621363709773028390906455474280604376352199516390426125799747104349010287999863085222906595963255021347703819927889499557682494089376945715230996724638504174707825237063549653073984621431520865082185874739198354161084353061487485122639173619093630368747811874967844588453932427647393872787633169280337431383303318239347594146199093541475947861743257087515361573280781816494516972620846397910122521957323750239187521165821846780535227973414995482582037073737162769516175556369030520157097135223640551677341769838496317189899870022722877435923986342064504259890884027516252057576449206713497800933910850544852840789721255240736974171063161128543627247013465636563949308129559129857483856703151062941808670490885195637607932998678201048180811629277513971355002647511462900958578409973024083741533704085562063956183607148361726211683256293018017523702929752271470348827811301170525263432888185790833606336370311865140369192824604611 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 52410f2a6ab91ab2773076867eb3bc026c692fbe . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tightleaf.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170e2b61e0c000004030046304402205f85c23b44f697fbf160f23af7b6781d0575184ed24a3a6c1a2e37fd1a197f46022061d7960a59081d9e57a5d829071f0c483f1eb23b8a38999d4d47c4feefe1b56c00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170e2b61e5d0000040300473045022100896dbe2645973b3480dd590aa9a45de693c868416c9309cad6d26c30da99b72002203df66d238390c31ec69a0a45f4468644e3a17e892b86b91c8e27e2595143498f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0032110fb2721bf50f86644a48afeaa25b6a5de7a933574d4fee7d2193bd2e77925691a7ae4ce086dc6af165d2ecd6d09b43784ed25e67fe39ca93c534ef76a0862f6ed2584b04b8e73270f758935e09344fbf0ea8f5a79aff761d3c627f11832968a4ff8289d2082b8a8ba0233ab9ce3b1b0750738d131f55ae8d477aa838b5ade83ef91683a874e1ef518c88d3ca2e6d26d190d9f5b5a448a392fa8cfb1a338791c2e1099a3fb3e45c677253819df6e6eefb74feaca5724e29998efb1a4a732390ff823666e612d60ccc0835902bdd0d21c71c52d1edc3620f08c4e3005dc88504d8ef8c6883f8c67b0dda8c9c7904a64c90ac593283c5c76b5c9695ef380b42