www.trulyathletic.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:75:a5:b5:6e:ac:6b:2a:a4:aa:43:7f:63:3e:b0:c5:49:a7 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.trulyathletic.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:75:a5:b5:6e:ac:6b:2a:a4:aa:43:7f:63:3e:b0:c5:49:a7Serial Number (int): 388482445326552159537221753099891392203175
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: a8:2d:59:2e:33:61:6b:d7:07:02:d5:e0:41:da:26:a4:da:a9:00:1e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f6:3a:37:e2:2a:98:cf:71:e5:e8:d6:12:7b:7f:12:f0:fd:56:bb:9a
Fingerprint (sha256): fa:66:f8:4a:8c:4b:cd:76:e3:7d:19:81:e1:d0:eb:db:46:e7:10:35:3c:6a:66:0b:5a:6e:25:55:55:01:96:af
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.trulyathletic.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.trulyathletic.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.trulyathletic.com
Other certificates including the domain name trulyathletic.com
(limited to 100 certificates)
trulyathletic.com
www.trulyathletic.com
trulyathletic.com
trulyathletic.com
nancydixon.com
trulyathletic.com
trulyathletic.com
www.trulyathletic.com
trulyathletic.com
www.clevelandcomingsoon.com
trulyathletic.com
www.trulyathletic.com
trulyathletic.com
www.trulyathletic.com
www.trulyathletic.com
www.trulyathletic.com
www.trulyathletic.com
trulyathletic.com
trulyathletic.com
nancydixon.com
trulyathletic.com
trulyathletic.com
www.trulyathletic.com
trulyathletic.com
www.clevelandcomingsoon.com
trulyathletic.com
www.trulyathletic.com
trulyathletic.com
www.trulyathletic.com
www.trulyathletic.com
www.trulyathletic.com
Certificate
The complete raw certificate details for www.trulyathletic.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgISBHWltW6sayqkqkN/Yz6wxUmnMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMzEwNDIyNDRaFw0y MDA2MjkwNDIyNDRaMCAxHjAcBgNVBAMTFXd3dy50cnVseWF0aGxldGljLmNvbTCC AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALVWuIgLhZvkI0CCwCX9i1wO qlH1fHD+YSncTFPQJszyB1ZsfweM6yM77SCrlnep+r9uad0PszVXLKW2MrLjiVB5 n8n74hQ7AjKzG9DcrSWpJGdjdiQC5YRwFaatibTcv/5rcfTpMMecsdauIXCjf7jx fVBe0QQw2y9Xq4y1yynk0fNx1J2+UlWby6SvGJtpWhNYj8uYZGWyPajViNTsGO6h yfEefLOZKy2MtHoSOkhjc2RYbVQY+5d92KNrTP5LlpR97CYdVcENVpoihG+tICKE i9ME+12/vrBGxz7DxJI3B/AuKigS79rM5osnvPvIiUY5pwX8KTmFageP+MI2CNEL SHuetajL+8Q+O2eNA7ZhTEyV3H90kcbimSmHROYYyqmuYqXHgLH0xPnDrEJe3qL+ 0Ry0gU7XFfdZxm5cDTG1sUFdAwPQ4PMu4nwyK7nwc58Gz20ADhMhMFNqSv5UH7F0 MR7FGQH2/UGZeFkp+U70HwqHKEPj4R0q9EQcSTJgkbGR0KaTe6KR+T2osNw36NKF gtDxiBk+WXcV/qlT4pZMeKLbAjxOvU58heyTHWvN5Jd/+z8NqPGhR6R5ZILBi8AK gk/jjVQnmgF7IIWO4QyD1QyOMJTvZjJ/tZOQ0tKSGdo8azbNAUhrG68ae2Aqs14r ZIaC40J6juFQTCTl5dMvAgMBAAGjggJrMIICZzAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFKgtWS4zYWvXBwLV4EHaJqTaqQAeMB8GA1UdIwQYMBaAFKhKamMEfd265tE5 t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIAYDVR0RBBkwF4IVd3d3LnRydWx5 YXRobGV0aWMuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYK KwYBBAHWeQIEAgSB9gSB8wDxAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2y CJo32RMAAAFxLwq8gwAABAMARzBFAiB9njq4ECdWN8ToyayrQV/J2E3fUPLtHjv2 cnlhtD/L6wIhAK0pR5lnz18QiFwI/nzd8Ce4ycIVMGKjCBThUw67otDjAHcAB7dc G+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6GmnTohwAAAFxLwq8gwAABAMASDBGAiEA 8WHfKgfFDejuaY2VjUGkoHWhEGA3p3jS2gEJJOdMNJICIQDh0JsdJLvb6f9bYzJl niSZDDXMbPuafVF3cra+3/tWKDANBgkqhkiG9w0BAQsFAAOCAQEAFFhW5aHahqw+ Ekw7xy571SnpeIvRwv62kIPJ3zS8ZRviQW+IdTBLx8vjYuZenuLkPyoVsKUABUaS 1VpIsfG5bJOD21QTfTIqggJiWZfGbzNqlR3Kqfo455mlun1vVdCCbsbko01fXBdt xrxDZb75RXgg1oFeNYbnWf8I8cutygL2uCIxNKeNyW/BmbjGAcF60hRNi4XUq9lf yhkHVQbzaO/Y0fggcYaBp7MIh5c2hIz48FBAIWoYuNGjyCOZ7jAgXmv3WbeWh66b Z9RyZtwn+wQP+a5ViPLRo25qcz9XIVUpoVGYxt9eXHZbNDtpJll9dd9k4ayHBQLc 7R084z7aRw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtVa4iAuFm+QjQILAJf2L XA6qUfV8cP5hKdxMU9AmzPIHVmx/B4zrIzvtIKuWd6n6v25p3Q+zNVcspbYysuOJ UHmfyfviFDsCMrMb0NytJakkZ2N2JALlhHAVpq2JtNy//mtx9Okwx5yx1q4hcKN/ uPF9UF7RBDDbL1erjLXLKeTR83HUnb5SVZvLpK8Ym2laE1iPy5hkZbI9qNWI1OwY 7qHJ8R58s5krLYy0ehI6SGNzZFhtVBj7l33Yo2tM/kuWlH3sJh1VwQ1WmiKEb60g IoSL0wT7Xb++sEbHPsPEkjcH8C4qKBLv2szmiye8+8iJRjmnBfwpOYVqB4/4wjYI 0QtIe561qMv7xD47Z40DtmFMTJXcf3SRxuKZKYdE5hjKqa5ipceAsfTE+cOsQl7e ov7RHLSBTtcV91nGblwNMbWxQV0DA9Dg8y7ifDIrufBznwbPbQAOEyEwU2pK/lQf sXQxHsUZAfb9QZl4WSn5TvQfCocoQ+PhHSr0RBxJMmCRsZHQppN7opH5Paiw3Dfo 0oWC0PGIGT5ZdxX+qVPilkx4otsCPE69TnyF7JMda83kl3/7Pw2o8aFHpHlkgsGL wAqCT+ONVCeaAXsghY7hDIPVDI4wlO9mMn+1k5DS0pIZ2jxrNs0BSGsbrxp7YCqz XitkhoLjQnqO4VBMJOXl0y8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 388482445326552159537221753099891392203175 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 04:22:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-29 04:22:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.trulyathletic.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 739797568901032048559325826737128790189437303507014633067428018256387900446293145829376164071619524753998862863933192324545336900444110214213934284495942730775323981832305592840084725327528192045358079210591672288884789233905001907689360492185223546119324904042576125830901838592017242166610969257770318915029450235386058617942007488600202805389517785751588804956471450974259328548306106041632109633717697437659333875807250493914105876106259366930318591699896561067781772494208923406490812333194422547479417963627826048301483444619406861695317454543866353679922022547972151597721267476931904041271849838856234551120689896503211866720077214643105858603111759045834456751085800549295313676162643648877125044262646143535985097479609068949543840122970836125014499326303884229266052588999848500142955981265099813778424278137956229537969799680937739378230953026104890847783231221439124844756118226278786689669133643615736158813199067395205413510483061099091161560649766195615958003877127930075267044463391795988122729121462951190175819161063364346385269187057624846316821894037064770228619354325227579869012302982027613574190207367163426086145877746422188842641310559630472833951226375147049078155070075000893876534159888800339092421595951 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a82d592e33616bd70702d5e041da26a4daa9001e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trulyathletic.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001712f0abc83000004030047304502207d9e3ab810275637c4e8c9acab415fc9d84ddf50f2ed1e3bf6727961b43fcbeb022100ad29479967cf5f10885c08fe7cddf027b8c9c2153062a30814e1530ebba2d0e300770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001712f0abc830000040300483046022100f161df2a07c50de8ee698d958d41a4a075a1106037a778d2da010924e74c3492022100e1d09b1d24bbdbe9ff5b6332659e24990c35cc6cfb9a7d517772b6bedffb5628 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00145856e5a1da86ac3e124c3bc72e7bd529e9788bd1c2feb69083c9df34bc651be2416f8875304bc7cbe362e65e9ee2e43f2a15b0a500054692d55a48b1f1b96c9383db54137d322a8202625997c66f336a951dcaa9fa38e799a5ba7d6f55d0826ec6e4a34d5f5c176dc6bc4365bef9457820d6815e3586e759ff08f1cbadca02f6b8223134a78dc96fc199b8c601c17ad2144d8b85d4abd95fca19075506f368efd8d1f820718681a7b308879736848cf8f05040216a18b8d1a3c82399ee30205e6bf759b79687ae9b67d47266dc27fb040ff9ae5588f2d1a36e6a733f57215529a15198c6df5e5c765b343b6926597d75df64e1ac870502dced1d3ce33eda47