condomvendingmachine.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:bf:f4:ce:ad:46:a1:93:42:7e:de:ee:26:d0:a9:80:4a:71 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=condomvendingmachine.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:bf:f4:ce:ad:46:a1:93:42:7e:de:ee:26:d0:a9:80:4a:71Serial Number (int): 326656194635757202029287003055276362320497
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 02:28:a8:0b:b3:09:f0:5d:5d:7a:d3:59:0a:07:f7:37:de:3e:4b:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 37:89:21:70:be:e8:38:b5:b7:c1:43:1e:db:9e:d0:af:e3:04:d0:26
Fingerprint (sha256): f8:26:47:01:e0:cd:4c:63:96:ab:61:27:b8:99:48:93:ec:c3:2e:4e:b6:58:a5:c2:7b:75:fa:b5:91:43:6a:f1
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate condomvendingmachine.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for condomvendingmachine.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
condomvendingmachine.com
Other certificates including the domain name condomvendingmachine.com
(limited to 100 certificates)
www.condomvendingmachine.com
newhempsteaddentistry.com
lovelandsportsmedicine.com
69050.com
condomvendingmachine.com
bedizzole.org
www.condomvendingmachine.com
www.condomvendingmachine.com
polkachange.com.homeschoolprayers.org
businesslendingloans.website
condomvendingmachine.com
www.sellerfy.com
www.condomvendingmachine.com
condomvendingmachine.com
condomvendingmachine.com
insurancecertificatetracking.com
condomvendingmachine.com
condomvendingmachine.com
newhempsteaddentistry.com
lovelandsportsmedicine.com
69050.com
condomvendingmachine.com
bedizzole.org
www.condomvendingmachine.com
www.condomvendingmachine.com
polkachange.com.homeschoolprayers.org
businesslendingloans.website
condomvendingmachine.com
www.sellerfy.com
www.condomvendingmachine.com
condomvendingmachine.com
condomvendingmachine.com
insurancecertificatetracking.com
condomvendingmachine.com
condomvendingmachine.com
Certificate
The complete raw certificate details for condomvendingmachine.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGaDCCBVCgAwIBAgISA7/0zq1GoZNCft7uJtCpgEpxMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMjQyMTA4MDFaFw0y MDAyMjIyMTA4MDFaMCMxITAfBgNVBAMTGGNvbmRvbXZlbmRpbmdtYWNoaW5lLmNv bTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMUc16UeOmELOHOAn+Gq rb330dc1jG47SWmWJ0OGcp9OQ+u1nY2xut5U3NjdXV4H0P5w+vtNwsz/BwGwm1cy yCemqK0H4fB/CrZ4edOzEX92IVwWlPxCBagvpwblXJCfBTaU7WaIWPxMVCkYzXBW 82yS1bT8eBP+wAEptMeO5FCGKoobsjmoAAY6ElP8mz4z7VIojzcGr3ST4QQbHrpK FeiquMU+szejjDC5xidqJBE7CAU5bFYg9tPfpKj+RFRhYwmGOctRcIpW+u2yFCps QS5UEqikTu4rFqAwlAh2nXOJWfxylvrKVSFi8OQbLSM2Z3p8tLZYg0L8mRhQOr01 Os6DqZftgaV/oazcTzWxL8YldjUjqOsOJWEXG4xBuLlCXzYl2kAg9//YfmKbiN5Y KP/33r5GtP4v8DqiefUpWXb9m1dyvXrsB0DU8xBOuhk6ux+dqMixIL4Y1YMcoyPp urxhPLHPlKf07M0niFtN5RHlbIhs3560J97vpr5cB0dbBgLolQxG1kCMwJg+EXwV 12c4rkE+4WB7qdURm3+wvsKvkN4xrOqSJkPl7vtpSYueeFUq2xT8GdzneTiGtJ9H EDDZ5qJ8FVhIyeeq8f4a2VgE/l4aljAPdh59Lwo0yK9+kqu2segnkBpSs43TrVm3 gi5bkU7ANnPNlM2P6DEVkp5DAgMBAAGjggJtMIICaTAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFAIoqAuzCfBdXXrTWQoH9zfePkubMB8GA1UdIwQYMBaAFKhKamMEfd26 5tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDov L29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDov L2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIYY29uZG9t dmVuZGluZ21hY2hpbmUuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA8JWkWfIA0YJAEC0vk4iOrUv+HUfj meHQNKawqKqOsnMAAAFun3UYQgAABAMARzBFAiEA0CPPVIj1rKhEo9C+bsCT/rX0 FrHNlDEp0cJarryfBpcCIBT2FCdB7yNsS/vOHWEeU2IKxb5jerfolXovUq4STc7k AHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFun3UYLwAABAMA RzBFAiEAqUevVcq1xXeIJLUFv3DHElDMrn+wHM5TMsWmFEmBzocCIB99Ld4GASUT Z/k9Ou/ocs9KM8VeoNLrahUJXd472R8VMA0GCSqGSIb3DQEBCwUAA4IBAQBBQ7A8 XkH8DVAvUUCr/zm+8jeRUwny8HaRP9Gyrc0XWne36xluUq/0GLefK07igctUKNZj M7BH5mEX42KDGdc82L2R5eN6IVBWqYUi1fNlewrIIJIL1QYpZFQmI25zp61EnBPZ BXFWcF8ZUKI17Em+HoUEtWkNlxk3YM1Q6JxgmNWtVFw7S9wYRtxJqipt8YP+2eok IMvxhFI7d+UItz8v4uaDpvjdVynqS5bykef0QErC68y3ubTd04ALrXhRJVnOtIrG bUtii5eEqdTcddClV39dLYG+9aYsdK+e4HSDQj14tzimcBSk/58VV7P3RO3IwfeR Ueb9KdTrx0ZwmC+7 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxRzXpR46YQs4c4Cf4aqt vffR1zWMbjtJaZYnQ4Zyn05D67WdjbG63lTc2N1dXgfQ/nD6+03CzP8HAbCbVzLI J6aorQfh8H8Ktnh507MRf3YhXBaU/EIFqC+nBuVckJ8FNpTtZohY/ExUKRjNcFbz bJLVtPx4E/7AASm0x47kUIYqihuyOagABjoSU/ybPjPtUiiPNwavdJPhBBseukoV 6Kq4xT6zN6OMMLnGJ2okETsIBTlsViD209+kqP5EVGFjCYY5y1Fwilb67bIUKmxB LlQSqKRO7isWoDCUCHadc4lZ/HKW+spVIWLw5BstIzZneny0tliDQvyZGFA6vTU6 zoOpl+2BpX+hrNxPNbEvxiV2NSOo6w4lYRcbjEG4uUJfNiXaQCD3/9h+YpuI3lgo //fevka0/i/wOqJ59SlZdv2bV3K9euwHQNTzEE66GTq7H52oyLEgvhjVgxyjI+m6 vGE8sc+Up/TszSeIW03lEeVsiGzfnrQn3u+mvlwHR1sGAuiVDEbWQIzAmD4RfBXX ZziuQT7hYHup1RGbf7C+wq+Q3jGs6pImQ+Xu+2lJi554VSrbFPwZ3Od5OIa0n0cQ MNnmonwVWEjJ56rx/hrZWAT+XhqWMA92Hn0vCjTIr36Sq7ax6CeQGlKzjdOtWbeC LluRTsA2c82UzY/oMRWSnkMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 326656194635757202029287003055276362320497 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-24 21:08:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 21:08:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'condomvendingmachine.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804149516463044726118341286072387337817297886635068125916517152390814098329423375538081370061252807905367744596243653602898426720388096898795135839684001513586122316432876428363002312914470378287129978492187468461120819726958227075272506401138786195979801746553336705444403310698915994822190645749985272039401519651924024012870646447334946869006422506216826667456119347030970281474323500472623228093229736500212668110679656091695842495816341298826858776585497463709539906356721064897001730253750847858561867174836225441499216170652788312047489685221561162777522935666353160395192774409867670504162625704000990900398403288449228357159380932621614976217586596048289029677688197529682286154024081362364962987929337275219400201743852015273066695392829615959450920453162898140841747525476236494896923653527128332508651628029675819759222362520157953772004560167949328588326788378829815630531585889071515949822145338442929291219985960091885310848701089527665486631186571603753025409041616902506156855711133185946525798808918362389290952666002189548052821728520990792879416372080877460085088185695648065288352424370089476933625207080830563847849875460018600527028018393238656015866816774780950194287474154873216555044818893104199609642819139 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0228a80bb309f05d5d7ad3590a07f737de3e4b9b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'condomvendingmachine.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e9f7518420000040300473045022100d023cf5488f5aca844a3d0be6ec093feb5f416b1cd943129d1c25aaebc9f0697022014f6142741ef236c4bfbce1d611e53620ac5be637ab7e8957a2f52ae124dcee4007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e9f75182f0000040300473045022100a947af55cab5c5778824b505bf70c71250ccae7fb01cce5332c5a6144981ce8702201f7d2dde0601251367f93d3aefe872cf4a33c55ea0d2eb6a15095dde3bd91f15 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004143b03c5e41fc0d502f5140abff39bef237915309f2f076913fd1b2adcd175a77b7eb196e52aff418b79f2b4ee281cb5428d66333b047e66117e3628319d73cd8bd91e5e37a215056a98522d5f3657b0ac820920bd50629645426236e73a7ad449c13d9057156705f1950a235ec49be1e8504b5690d97193760cd50e89c6098d5ad545c3b4bdc1846dc49aa2a6df183fed9ea2420cbf184523b77e508b73f2fe2e683a6f8dd5729ea4b96f291e7f4404ac2ebccb7b9b4ddd3800bad78512559ceb48ac66d4b628b9784a9d4dc75d0a5577f5d2d81bef5a62c74af9ee07483423d78b738a67014a4ff9f1557b3f744edc8c1f79151e6fd29d4ebc74670982fbb