*.nakatamascientific.com
Issued by R3
About this certificate
This digital certificate with serial number 03:1c:fe:e2:ed:d4:38:83:5b:87:26:a8:45:38:0c:fb:7e:2b was issued on by Let's Encrypt.
With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.nakatamascientific.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1c:fe:e2:ed:d4:38:83:5b:87:26:a8:45:38:0c:fb:7e:2bSerial Number (int): 271203566262831350900138543230334524948011
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 42:dd:dc:61:5e:2e:86:63:1d:2d:d1:4b:e9:99:5f:bf:12:fa:e9:4e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 12:16:6a:e8:c8:ad:5f:84:18:c3:3e:6b:4f:79:6f:d1:12:5f:42:fb
Fingerprint (sha256): fe:3f:12:b8:69:3a:66:3f:33:f8:a0:a2:c3:25:41:98:62:27:f1:04:52:15:e8:af:b8:71:06:66:24:8f:5b:0a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate *.nakatamascientific.com
14
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.nakatamascientific.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.dfsktasikmalaya.com
*.nakatamascientific.com
autodiscover.wulingjakarta.id
cpanel.wulingjakarta.id
cpcalendars.wulingjakarta.id
cpcontacts.wulingjakarta.id
mail.wulingjakarta.id
nakatamascientific.com
webdisk.wulingjakarta.id
webmail.wulingjakarta.id
wulingjakarta.id
www.nakatamascientific.dfsktasikmalaya.com
www.wulingjakarta.dfsktasikmalaya.com
www.wulingjakarta.id
*.nakatamascientific.com
autodiscover.wulingjakarta.id
cpanel.wulingjakarta.id
cpcalendars.wulingjakarta.id
cpcontacts.wulingjakarta.id
mail.wulingjakarta.id
nakatamascientific.com
webdisk.wulingjakarta.id
webmail.wulingjakarta.id
wulingjakarta.id
www.nakatamascientific.dfsktasikmalaya.com
www.wulingjakarta.dfsktasikmalaya.com
www.wulingjakarta.id
Other certificates including the domain name nakatamascientific.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for *.nakatamascientific.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgISAxz+4u3UOINbhyaoRTgM+34rMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAxMDgwMzA0MTNaFw0yNDA0MDcwMzA0MTJaMCMxITAfBgNVBAMM GCoubmFrYXRhbWFzY2llbnRpZmljLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALs+jG/jBPKvc27YLTVelhXs1Wj7o5qzPOCsVkBBDV1Tqfl4o5Ut 4qQRsJ7C4qUbz8M06QPan8KIeqY/ol9Nevf5gnYRzMeshKrglktfhA9ApWyf26qw IfSh5mGTWI7MRRcnpLtGGrysqyAYGonNOh8h/nwnkF2rsoGRjDg/ca8s91qAYodl ogF4aLyvZuYH/Cevt6iR09K/8xPFXxevqfbUyrLlmpfJvuXHANJEfJKGITpdKbnV EjJtz8h5domNcXXW8+oaGLTYtwpqpNluVb4j8egi0NXzLnlMxyXsUUl+Hb2TGfHX SssZZHFA1NdNsfjxI62fe1MErtHPuA6nWZsCAwEAAaOCA4gwggOEMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/ BAIwADAdBgNVHQ4EFgQUQt3cYV4uhmMdLdFL6ZlfvxL66U4wHwYDVR0jBBgwFoAU FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p LmxlbmNyLm9yZy8wggGPBgNVHREEggGGMIIBgoIVKi5kZnNrdGFzaWttYWxheWEu Y29tghgqLm5ha2F0YW1hc2NpZW50aWZpYy5jb22CHWF1dG9kaXNjb3Zlci53dWxp bmdqYWthcnRhLmlkghdjcGFuZWwud3VsaW5namFrYXJ0YS5pZIIcY3BjYWxlbmRh cnMud3VsaW5namFrYXJ0YS5pZIIbY3Bjb250YWN0cy53dWxpbmdqYWthcnRhLmlk ghVtYWlsLnd1bGluZ2pha2FydGEuaWSCFm5ha2F0YW1hc2NpZW50aWZpYy5jb22C GHdlYmRpc2sud3VsaW5namFrYXJ0YS5pZIIYd2VibWFpbC53dWxpbmdqYWthcnRh LmlkghB3dWxpbmdqYWthcnRhLmlkgip3d3cubmFrYXRhbWFzY2llbnRpZmljLmRm c2t0YXNpa21hbGF5YS5jb22CJXd3dy53dWxpbmdqYWthcnRhLmRmc2t0YXNpa21h bGF5YS5jb22CFHd3dy53dWxpbmdqYWthcnRhLmlkMBMGA1UdIAQMMAowCAYGZ4EM AQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYASLDja9qmRzQP5WoC+p0w6xxS ActW3SyB2bu/qznYhHMAAAGM5z4P7QAABAMARzBFAiB/rMW7BDG5X/Ow+VvdMAB6 AE+xG6JJgN4g5ABx/0bSpQIhALtLqrr79//+4LkdBNVu6cXJ8PeaUWMUbDK9KTuw lroEAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGM5z4TLwAA BAMARzBFAiAHEaVc2Np+iCWIYCFJsty2e3Cuxh7IpWe0XGTd8iNePQIhAL1H1DEg ZzKuRiFWNsiYPmWQPLzTFaS7T/Br1OrY13X4MA0GCSqGSIb3DQEBCwUAA4IBAQAy cmnFU35/iT4WFLCXt/b7SvLbeKZK1NPLcco1OOsIBeIj1BP/1/pwt37CicbVtOCS sKz9xptmMbD404ZU4pORQ8cKcwV12ToctPUvlmsKpeqDRZkWawLjUNpWH2v7N6bZ ot1+IHl01mR/b+JutLxp0nvHm80qsN7FDRBbLz2GSAuGZfDTyuqzl227q+wgYzNk 7+AS7UbAbOOgViFbRD6DYvIq1Gc8ZlftQ2eY4xq4MR3LIChF6DwxKUy46BRT4jDJ NhKjNc9xE5aLj7uwLeimWL5MOvjIOhvJa+SOrDwTcC+ycnWJih20cPno9V/gvTI7 UztKaHmss/yCAybWSLsl -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz6Mb+ME8q9zbtgtNV6W FezVaPujmrM84KxWQEENXVOp+XijlS3ipBGwnsLipRvPwzTpA9qfwoh6pj+iX016 9/mCdhHMx6yEquCWS1+ED0ClbJ/bqrAh9KHmYZNYjsxFFyeku0YavKyrIBgaic06 HyH+fCeQXauygZGMOD9xryz3WoBih2WiAXhovK9m5gf8J6+3qJHT0r/zE8VfF6+p 9tTKsuWal8m+5ccA0kR8koYhOl0pudUSMm3PyHl2iY1xddbz6hoYtNi3Cmqk2W5V viPx6CLQ1fMueUzHJexRSX4dvZMZ8ddKyxlkcUDU102x+PEjrZ97UwSu0c+4DqdZ mwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 271203566262831350900138543230334524948011 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 03:04:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 03:04:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nakatamascientific.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23637406884130121750876104939279059091249891492401699810907149244170517999562473334681275708733279244021080402049051318951246399035569490509128290443959827820785895882782871190607738641482382424568456993734364319355545258775234055819983132014891983662960507799140965861576366636937945139963159737295962515994828277225250829332421910779066754489939273711117895455092909260221371152559860627738565145707887163486205100235413762706129998881304873150011992700952261830873097047831695044852338066431718124807031224740773501049239781083919681916195105802256565366881428622222993772317804908652716646352058329042194243475867 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 42dddc615e2e86631d2dd14be9995fbf12fae94e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (390 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dfsktasikmalaya.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nakatamascientific.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.wulingjakarta.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.wulingjakarta.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.wulingjakarta.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.wulingjakarta.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.wulingjakarta.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakatamascientific.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.wulingjakarta.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.wulingjakarta.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wulingjakarta.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nakatamascientific.dfsktasikmalaya.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wulingjakarta.dfsktasikmalaya.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wulingjakarta.id' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ce73e0fed000004030047304502207facc5bb0431b95ff3b0f95bdd30007a004fb11ba24980de20e40071ff46d2a5022100bb4baabafbf7fffee0b91d04d56ee9c5c9f0f79a5163146c32bd293bb096ba0400760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ce73e132f000004030047304502200711a55cd8da7e882588602149b2dcb67b70aec61ec8a567b45c64ddf2235e3d022100bd47d431206732ae46215636c8983e65903cbcd315a4bb4ff06bd4ead8d775f8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00327269c5537e7f893e1614b097b7f6fb4af2db78a64ad4d3cb71ca3538eb0805e223d413ffd7fa70b77ec289c6d5b4e092b0acfdc69b6631b0f8d38654e2939143c70a730575d93a1cb4f52f966b0aa5ea834599166b02e350da561f6bfb37a6d9a2dd7e207974d6647f6fe26eb4bc69d27bc79bcd2ab0dec50d105b2f3d86480b8665f0d3caeab3976dbbabec20633364efe012ed46c06ce3a056215b443e8362f22ad4673c6657ed436798e31ab8311dcb202845e83c31294cb8e81453e230c93612a335cf7113968b8fbbb02de8a658be4c3af8c83a1bc96be48eac3c13702fb27275898a1db470f9e8f55fe0bd323b533b4a6879acb3fc820326d648bb25