response.bankofalbuquerque.com

- BOK Financial Corporation -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 73:81:ce:c6:83:dd:e7:63:00:00:00:00:50:ff:11:82 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BOK Financial Corporation

Organization: BOK Financial Corporation
State / Province: Oklahoma
Locality: Tulsa
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 73:81:ce:c6:83:dd:e7:63:00:00:00:00:50:ff:11:82
Serial Number (int): 153535219714381649802080665851381354882
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ed:a7:4f:b0:68:84:25:40:a8:e6:8a:b5:06:f0:d4:ac:d7:bd:69:1b
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 6d:1c:1c:4c:2b:01:cd:1a:19:bb:01:eb:ad:14:15:6c:c5:3d:d8:9b
Fingerprint (sha256): 16:58:f0:fb:8d:b0:81:9e:d5:1f:21:e5:93:8d:67:30:58:0f:c4:15:87:b6:37:81:8d:d2:f5:37:a8:1b:06:0d

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate response.bankofalbuquerque.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for response.bankofalbuquerque.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

response.bankofalbuquerque.com

Other certificates including the domain name bankofalbuquerque.com

(limited to 100 certificates)
homenow-d.bokf.com
onlinebanking.bokfinancial.com
openaccount.bokfinancial.com
onlinebanking.bokfinancial.com
onlinebanking.bokfinancial.com
homenow-t.bokf.com
www.bokfinancial.com
homenow.bokf.com
loans.bankofalbuquerque.com
homenow-t.bokf.com
ila.bankofalbuquerque.com
homenow-t.bokf.com
homenow.bokf.com
www.bankofalbuquerque.com
homenow-mqa.bokf.com
openaccount.bankofoklahoma.com
tracking.bankofalbuquerque.com
response.bankofalbuquerque.com
loans.bankofalbuquerque.com
onlinebanking.bankofalbuquerque.com
onlinebanking.bokfinancial.com
go.bokf.com
response.bankofalbuquerque.com
homenow-d.bokf.com
www.bokfinancial.com
response.bankofalbuquerque.com
response.bankofalbuquerque.com
homenow.bokf.com
homenow-t.bokf.com
www.bokfinancial.com
loans.bankofalbuquerque.com
www.bankofalbuquerque.com
locations.bankofalbuquerque.com
www.bokfinancial.com
bok-qa.roostify.com
go.bokf.com
onlinebanking.bokfinancial.com
openaccount.bokfinancial.com
demosource.bokf.com
www.bankofalbuquerque.com
tracking.bankofalbuquerque.com
es.bankofalbuquerque.com
www.bankofalbuquerque.com
www.bokfinancial.com
locations.bankofoklahoma.com
onlinebanking.bankofalbuquerque.com
response.bankofalbuquerque.com
homenow.bokf.com
onlinebanking.bokfinancial.com
homenow-d.bokf.com
onlinebanking.bokfinancial.com
es.bankofalbuquerque.com
www.bokfinancial.com
locations.bankofalbuquerque.com
openaccount.bankofoklahoma.com
bok-qa.roostify.com
homenow.bokf.com
onlinebanking.bankofalbuquerque.com
www.bankofalbuquerque.com
homenow-t.bokf.com
homenow-t.bokf.com
response.bankofalbuquerque.com
ila.bankofalbuquerque.com
bok-qa.roostify.com
es.bankofalbuquerque.com
www.bankofalbuquerque.com
onlinebanking.bokfinancial.com
openaccount.bankofoklahoma.com
onlinebanking.bankofalbuquerque.com
es.bankofalbuquerque.com
www.bokfinancial.com
bok-qa.roostify.com
mortgage-d.bokf.com
onlinebanking.bankofalbuquerque.com
www.bokfinancial.com
homenow.bokf.com
www.bankofalbuquerque.com
es.bokfinancial.com
sitecore.bokfinancial.com
es.bokfinancial.com
homenow.bokf.com
homenow-mqa.bokf.com
bok-qa.roostify.com
loans.bankofalbuquerque.com
m.bankofalbuquerque.com
openaccount.bokfinancial.com
onlinebanking.bokfinancial.com
es.bankofalbuquerque.com
ila.bankofalbuquerque.com
locations.bokfinancial.com
www.bokfinancial.com
locations.bokfinancial.com
www.bankofalbuquerque.com
homenow.bokf.com
onlinebanking.bokfinancial.com
openaccount.bankofoklahoma.com
homenow-d.bokf.com
m.bankofalbuquerque.com
homenow-mqa.bokf.com
onlinebanking.bankofalbuquerque.com

Certificate

The complete raw certificate details for response.bankofalbuquerque.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoB1VdNbNm39F+unn1rc
CaQkftQPFXj7brhbU15/HqkW+GQOhAvth8lqHo4U4LibVJ5tJtO6GP7TF4tJffV2
nX0tcBc+n30+YvZzc+OVAiOvrDWihCnOZ9KmcJExt4jzKxaSFnh/Wi9ZER7r3mho
5LV9e1JpB2IyXyockBVB8DuA2PcIo+tRyLVM3aohoT3gFyBr69MMzsE66hSu21xF
h4iu7H/ejqazXFoKFTCHg7o6WcpcoWytLyRPQ4pfiKZe2Xr8WJSUFWV8nGe8Eany
8kkvGWu3UuUiqo/y/EY1F0n+k/7I6zOQ3b6kr271GNtbCqAuco4WcUfLqcCj+wWJ
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 153535219714381649802080665851381354882
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 17:38:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-25 18:08:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oklahoma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tulsa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BOK Financial Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'response.bankofalbuquerque.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26068435991785462151380122809789276121634353085002298169246731952022553723454409437542619685253956572227219354982136374917390767450301010511971280808387132031057661127739350734103742889284034421365470473910794946484024263112661163828006858941744899185553592983432923010211888574509123754848949748230497028324995412505877200766062157589441520270887781131368818665727305712217245241864544878941129246286595623388514356205076726199081835889077167633673470333836925783631751625650060989746792085213077506781046426794202199124273845216894277989108980261034290598850487162193416714056851509707329378809661816787956369033561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'response.bankofalbuquerque.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eda74fb068842540a8e68ab506f0d4acd7bd691b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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