mediaassets.scrippsnationalnews.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:23:9d:5c:e6:34:e7:c4:12:58:79:99:98:8b:15:09:7d:0a was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mediaassets.scrippsnationalnews.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:23:9d:5c:e6:34:e7:c4:12:58:79:99:98:8b:15:09:7d:0a
Serial Number (int): 273455911793308604521267522895175125400842
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a5:5a:56:d2:7e:44:87:d0:21:db:47:2e:7a:b2:44:a3:d1:1a:4d:a6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8d:fc:8b:29:dd:93:57:c5:76:09:26:30:7b:49:22:da:45:6f:c8:7a
Fingerprint (sha256): ea:c5:55:0c:b2:be:c0:97:5a:75:f9:31:b0:f7:c1:1c:a2:72:9d:9f:e2:f9:3d:b6:7d:64:53:ba:61:88:2b:5f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mediaassets.scrippsnationalnews.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mediaassets.scrippsnationalnews.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mediaassets.10news.com
mediaassets.3newsnow.com
mediaassets.abc15.com
mediaassets.abc2news.com
mediaassets.abcactionnews.com
mediaassets.j105.com
mediaassets.kjrh.com
mediaassets.kshb.com
mediaassets.kypost.com
mediaassets.news5cleveland.com
mediaassets.scrippsnationalnews.com
mediaassets.thedenverchannel.com
mediaassets.theindychannel.com
mediaassets.thelisttv.com
mediaassets.turnto23.com
mediaassets.wcpo.com
mediaassets.wkbw.com
mediaassets.wptv.com
mediaassets.wxyz.com
spsnetstorage.lakana.com

Other certificates including the domain name scrippsnationalnews.com

(limited to 100 certificates)
lakana-02.map.fastly.net
scrippsnationalnews.com
*.scrippsnationalnews.com
*.scrippsnationalnews.com
*.scrippsnationalnews.com
scrippsnationalnews.com
www.1041kqth.com
mediaassets.scrippsnationalnews.com
scrippsnationalnews.com
*.scrippsnationalnews.com
*.scrippsnationalnews.com
sharing.1041kqth.com
scrippsnationalnews.com
scrippsnationalnews.com
lakana-02.map.fastly.net
*.scrippsnationalnews.com
scrippsnationalnews.com
mediaassets.1041kqth.com
scrippsnationalnews.com
lakana-02.map.fastly.net
lakana-02.map.fastly.net
scrippsnationalnews.com
scrippsnationalnews.com
scrippsnationalnews.com
scrippsnationalnews.com
*.scrippsnationalnews.com
scrippsnationalnews.com
scrippsnationalnews.com
*.scrippsnationalnews.com
scrippsnationalnews.com
scrippsnationalnews.com
mediaassets.scrippsnationalnews.com
lakana-02.map.fastly.net
www.1041kqth.com
scrippsnationalnews.com
www.1041kqth.com
sharing.1041kqth.com
mediaassets.scrippsnationalnews.com
*.scrippsnationalnews.com
*.scrippsnationalnews.com
sharing.1041kqth.com
scrippsnationalnews.com
lakana-02.map.fastly.net
scrippsnationalnews.com
*.scrippsnationalnews.com
*.scrippsnationalnews.com
sharing.1041kqth.com
mediaassets.1041kqth.com
lakana-02.map.fastly.net
mediaassets.1041kqth.com
lakana-02.map.fastly.net
lakana-02.map.fastly.net
lakana-02.map.fastly.net
scrippsnationalnews.com
*.scrippsnationalnews.com
mediaassets.scrippsnationalnews.com
mediaassets.1041kqth.com
mediaassets.1041kqth.com
scrippsnationalnews.com
*.scrippsnationalnews.com
*.scrippsnationalnews.com
lakana-02.map.fastly.net
scrippsnationalnews.com
*.scrippsnationalnews.com
www.1041kqth.com
lakana-02.map.fastly.net

Certificate

The complete raw certificate details for mediaassets.scrippsnationalnews.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoFvVaC5ToyRGNHdtNGk
TGYeUBtkxULfiniQuWOG5ks5bZHojqj/ys9scWsg3XWeckbKBFXhSWvuvKQqQvL9
lnZgveOTeaTYsZyXbW2VJiQ6W7mqGphLECg6Ygem9eC0cCWtxB6Cs3nYZ7jrZqV3
pwpeFnnQdkQzuEMSyjdlLf0cSsXH6gLHHtbZ0NMCyqVq2VKX45PYF8KoSe9OsY4d
T0SpGj6g0HgKxftud0HyYty7HZWNw9W81aIh6bgF9Wi2Y28uNi/06h5bhZK0B9EF
uOXCVPEqeCnJzhFjGp6xZwxtJU9pgZzaGbemZw6ODGG/f5iuPxZP3+Gl4tE4/ySz
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273455911793308604521267522895175125400842
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-09 22:02:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-08 22:02:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mediaassets.scrippsnationalnews.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22534245012164395696630111815184598381313480946365129470098982974062364884183556753005753719704581329300038705402581407006333160739460873262154900562376890794463700677200597135943710548074514333241929060145821208618339023975908615378294915107104474695978022754229369303695389302030915264859405190377196523119899497914338583097877762245666081742708627619999880221922330733826920021739477716954166992815856245985589416838968704451276822668008533704556749365173181748095401407082746009627895871526733851643004296731819538970875709464807017289127902435712097309160334902507029868412619886921933135502889067030628891145101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a55a56d27e4487d021db472e7ab244a3d11a4da6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (526 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.10news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.3newsnow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.abc15.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.abc2news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.abcactionnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.j105.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.kjrh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.kshb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.kypost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.news5cleveland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.scrippsnationalnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.thedenverchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.theindychannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.thelisttv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.turnto23.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.wcpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.wkbw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.wptv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaassets.wxyz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spsnetstorage.lakana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000162aca551a3000004030046304402202a8488524ac540442bf31bd2548142835a0f2b934e73f6076b17d99d3a1ca0d502203e313681c22581616c234acb653084f38f38a436b2da32ef393d381afe15e507007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162aca551bc000004030046304402203951a0e27ea1625c190b7659b532ad31eae539027fd82dced0cd09bbbda5102402200b24739e49e6305df25adb94b87fe8d5f4d9ee637659748f1a8430692b8cd8dd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003f13b1bec0f0b039943230ad3db4c6cb97a5789a773614791a2f262bef4e9c75cda7bc803512879c17b47b1f1337e82b215a5dad4cadd75b3b8bfd078ddc58e035f1e897da20aa87d8b9d710a53c277a53386649fd2b7ebd8dad70c7f88e276acf20cf2e09de26b1da3590155a5acf944b1b38f84c7912cab6bbd598cc1b2a2125380143d21e1d1b1090f1ca7dc3b3f6d904a21901293eef81409e561ff439d862880e2ca8c6dd5b71a1159e32661503efe68580fba724c56bdee4afd5204bd4dbcce215f8e6431c49739a16f00fee9437027eb376545519bbe1ba0ea52a0a2b87018bfe6bde8c00bb9a8767d18df76ff03a2f281198c6fec5c5900337b945a0