fxadvance.bokf.com

- BOK Financial Corporation -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 66:5a:cf:b5:42:99:69:43:00:00:00:00:50:f2:6f:01 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BOK Financial Corporation

Organization: BOK Financial Corporation
State / Province: Oklahoma
Locality: Tulsa
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 66:5a:cf:b5:42:99:69:43:00:00:00:00:50:f2:6f:01
Serial Number (int): 136052775107026397883401293382907227905
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 61:d2:c8:af:e2:67:4b:ed:e6:30:ec:c8:60:6f:89:ec:7c:8d:18:9f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 9d:9e:a3:fc:6b:89:5f:50:da:35:fe:67:3a:fe:24:d2:ad:58:d0:fb
Fingerprint (sha256): 09:41:f8:e6:a6:16:96:7d:83:fa:df:8e:ea:cb:a9:15:ea:5f:3b:1b:54:21:26:9b:3a:e6:06:40:f8:48:24:b7

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate fxadvance.bokf.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fxadvance.bokf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fxadvance.bokf.com

Other certificates including the domain name bokf.com

(limited to 100 certificates)
homenow-d.bokf.com
chat.bokf.com
onlinebanking.bokfinancial.com
VRT-CDT-F02-UAP.bokf.com
demo.spendcontrol.bokf.com
tradeadvance.bokf.com
tradeadvance.bokf.com
m3.treasurysource.bokf.com
mortgagenow.bokf.com
insights.bokf.com
thebeacon.bokf.com
onlinebanking.bokfinancial.com
treasurysource2.bokf.com
onlinebanking.bokfinancial.com
homenow-t.bokf.com
mortgagebanker.bokf.com
san-38-s12.tlsprovisioning.exacttarget.com
www.bokfinancial.com
fxadvance.bokf.com
media.bokf.com
FXAdvance3.bokf.com
s.bokf.com
homenow.bokf.com
san-38-s12.tlsprovisioning.exacttarget.com
www.bokf.com
remote.bokf.com
startrightauth.bokf.com
FXAdvance2.bokf.com
homenow-t.bokf.com
imperva.com
magnet.bokf.com
m2.businesssource.bokf.com
imperva.com
mortgage.bokf.com
treasurysource.bokf.com
bankconnect.bokf.com
startright.bokf.com
fxadvance.bokf.com
homenow-t.bokf.com
cashvault.bokf.com
m2.treasurysource.bokf.com
bankconnecttest.bokf.com
imperva.com
homenow.bokf.com
mortgagebanker.bokf.com
*.portal.bokf.com
san-38-s12.tlsprovisioning.exacttarget.com
remote.bokf.com
investor.bokf.com
thebeacon.bokf.com
businesssource2.bokf.com
clientsource.bokf.com
imperva.com
homenow-mqa.bokf.com
mortgagenow.bokf.com
imperva.com
response.bokf.com
evision.bokf.com
securemail.bokf.com
mortgage.bokf.com
mortgage.bokf.com
san-38-s12.tlsprovisioning.exacttarget.com
remote.bokf.com
businesssource2.bokf.com
vrt-cdt-f02-uap.bokf.com
*.portal.bokf.com
spendcontrol.bokf.com
onlinebanking.bokfinancial.com
www.spendcontrol.bokf.com
dbpsamlsso.bokf.com
remitviewdemo.bokf.com
go.bokf.com
remitviewdemo.bokf.com
eserviceswc.bokf.com
demo.webera.bokf.com
imperva.com
investor.bokf.com
FXAdvance2.bokf.com
maintenance.bokf.com
homenow-d.bokf.com
owa.bokf.com
payweb.bokf.com
www.bokfinancial.com
businesssource.bokf.com
homenow.bokf.com
cs.bokf.com
homenow-t.bokf.com
www.bokfinancial.com
remote.bokf.com
m.businesssource.bokf.com
eserviceswc.bokf.com
pospay.bokf.com
returnsource.bokf.com
mortgagebanker.bokf.com
FXAdvance3.bokf.com
securemail.bokf.com
businesssource.bokf.com
BusinessSource.bokf.com
FXAdvance3.bokf.com
treasurysource2.bokf.com

Certificate

The complete raw certificate details for fxadvance.bokf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjLz8Ng4Yx9p0yT6Tk1W
0btoEyagBsPlporOw6tBvljunfrYxV+627gEmjQme26PquRcAQJH1lC7HswhDYDr
UzjuULXkrYRmKFBMEsLw9Cq0vOd1SVGecKsR0TrAhttA8Q3DteOD68T7KApt9vNe
tJ4FyqV/dqNgpfe+YFA55m0J8KDwHaXKzgf+ZMW4/nrYxNDpeatqfdwvY5y+jRt3
lXsuhRl/FooLLCCFf9+ek4WQjUWzaI9JOJ0VxbcnoQNI2mzvjou5vzNMsdfy9OGm
J1rnslqAAHgUiiKs1xDfa8BMqIGqqjpvFJEMQ41hR6qQO6AFGuwkcRKQNkDPEteq
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 136052775107026397883401293382907227905
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-31 03:08:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-20 03:38:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oklahoma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tulsa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BOK Financial Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fxadvance.bokf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19465824773131428091966933810627924428815488514892750051667115262541188934363631003497887236774516717480575310729410173347085526842180914969190267564692963980725035684898783033072913077376512913798541391301924126106564126669003489649897809836312239648013959285517151034831885629417174980572266881187187547690171699468300121222057014593998452911508588285824722919038747292612993573656419174398794641035221760197590815340663092931822621479189563822631929688463083089464181565146590822494327697856723773145704336091388410343098679194608704874745013751814621395656380949430118066334297629795435198427789973751903051819767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxadvance.bokf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61d2c8afe2674bede630ecc8606f89ec7c8d189f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001292be3aa8a9bbc797c479b7b099a93ceeeabd8b4a3c6c15888588a595d14660ab3f71d02bb880d8fb674875a70fc6cffeda599163035345aceaa8b7ce38f1a02de1b9a83eccf596c01acc4f35da7a321d5dcfeff8af3b735fd2e054b3eb165685a4067cdaee9dde2fdee9e3d3bee2af5b29376bae4ec42e37041c6cc12a64d3c63cf9c405d89e98008968c5a30861dc82f9bbb9b7af4d4d0c4fb45de168bd7b10c352deb46691585a3f08ab6d32a825dbed3a6bdd07d2de99609303c5e15925ab89f58e1fcb21a1d64705198e2c1ec661fdce55762fbead3afd93c8e0369804c969d8ca11c3e536cf68a42cd39aaa848f96d85522f0744530079c014e60b364