bok-qa.roostify.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:6a:25:03:4f:ce:20:67:45:93:57:df:05:ee:36:e2:b3:50 was issued on by Let's Encrypt.
With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bok-qa.roostify.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:6a:25:03:4f:ce:20:67:45:93:57:df:05:ee:36:e2:b3:50Serial Number (int): 297455987320276223093425144216154481537872
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 28:da:05:cf:e3:fa:cc:54:a4:8d:17:b2:f0:2f:a7:dc:32:85:72:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): b9:fa:a6:96:5d:87:87:2f:c9:07:21:b0:d1:dd:b3:cc:55:17:1b:4f
Fingerprint (sha256): 24:9b:69:77:a6:d9:3f:a2:f9:c2:f2:da:f4:25:8e:f0:c5:8b:7a:9f:72:60:9c:c9:0a:e2:3c:ed:8f:19:f1:79
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate bok-qa.roostify.com
17
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bok-qa.roostify.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bok-qa.roostify.com
hfc-d.bokf.com
homenow-az-d.bokfinancial.com
homenow-az-d.bokfinancial.com.roostify.com
homenow-co-d.bokfinancial.com
homenow-co-d.bokfinancial.com.roostify.com
homenow-d.bankofalbuquerque.com
homenow-d.bankofarizona.com
homenow-d.bankofarkansas.com
homenow-d.bankofoklahoma.com
homenow-d.bankoftexas.com
homenow-d.bokf.com
homenow-d.csbt.com
homenow-d.homedirectmortgage.com
homenow-d.mobank.com
mortgage-d.bokf.com
mortgage-d.bokf.com.roostify.com
hfc-d.bokf.com
homenow-az-d.bokfinancial.com
homenow-az-d.bokfinancial.com.roostify.com
homenow-co-d.bokfinancial.com
homenow-co-d.bokfinancial.com.roostify.com
homenow-d.bankofalbuquerque.com
homenow-d.bankofarizona.com
homenow-d.bankofarkansas.com
homenow-d.bankofoklahoma.com
homenow-d.bankoftexas.com
homenow-d.bokf.com
homenow-d.csbt.com
homenow-d.homedirectmortgage.com
homenow-d.mobank.com
mortgage-d.bokf.com
mortgage-d.bokf.com.roostify.com
Other certificates including the domain name roostify.com
(limited to 100 certificates)
mortgage.1stbmt.com.roostify.com
guild-admin.roostify.com
roostify.com
books-lb8.airmason.com
insights.roostify.com
books-lb8.airmason.com
homeward-prod-equifax.roostify.com
apply.superiorcu.com
perf-test.roostify.com
guild-admin.roostify.com
www2.roostify.com
www2.roostify.com
ammac-test.roostify.com
dev.roostify.com
apply.superiorcu.com
homeward-prod-equifax.roostify.com
dev-borrower.roostify.com
books-lb8.airmason.com
demo.roostify.com
tdbank-test-optimal.roostify.com
apply.superiorcu.com
www.roostify.com
apply.truecore.org
dev.roostify.com
*.roostify.com
www.roostify.com
roostify.com
books-lb8.airmason.com
books-lb8.airmason.com
roostify.com
clientsuccess.roostify.com
apply.superiorcu.com
ammac-test.roostify.com
apply.truecore.org
bok-qa.roostify.com
demo.roostify.com
books-lb8.airmason.com
roostify.com
apply.truecore.org
ammac-test.roostify.com
dev.roostify.com
apply.superiorcu.com
books-lb8.airmason.com
ammac-test.roostify.com
apply.gomortgagebeast.com
www.roostify.com
www.roostify.com
www2.roostify.com
myapp.guildmortgage.com
mortgage.1stbmt.com
books-lb8.airmason.com
*.roostify.com
www2.roostify.com
guild-admin.roostify.com
www.roostify.com
www.roostify.com
template.roostify.com
www.roostify.com
www.roostify.com
nfcu-test.roostify.com
roostify.com
bok-qa.roostify.com
*.roostify.com
www2.roostify.com
www.roostify.com
roostify.com
mortgage.banksanjuans.com
www2.roostify.com
template.roostify.com
insights-dev.roostify.com
demo.roostify.com
mortgage.gofirstbank.com
dev.roostify.com
books-lb8.airmason.com
clientsuccess.roostify.com
www.roostify.com
bok-qa.roostify.com
roostify.com
www.roostify.com
mortgage.gofirstbank.com
dev.roostify.com
dev.roostify.com
*.roostify.com
bok-qa.roostify.com
botw-test.roostify.com
test-frame.roostify.com
mortgage.1stbmt.com
mortgage.1stbmt.com
www.roostify.com
*.roostify.com
books-lb8.airmason.com
perf-test.roostify.com
demo.roostify.com
ammac-test.roostify.com
www.roostify.com
apply.truecore.org
demo.roostify.com
ammac-test.roostify.com
mortgage.fsbmsla.com
dev.roostify.com
guild-admin.roostify.com
roostify.com
books-lb8.airmason.com
insights.roostify.com
books-lb8.airmason.com
homeward-prod-equifax.roostify.com
apply.superiorcu.com
perf-test.roostify.com
guild-admin.roostify.com
www2.roostify.com
www2.roostify.com
ammac-test.roostify.com
dev.roostify.com
apply.superiorcu.com
homeward-prod-equifax.roostify.com
dev-borrower.roostify.com
books-lb8.airmason.com
demo.roostify.com
tdbank-test-optimal.roostify.com
apply.superiorcu.com
www.roostify.com
apply.truecore.org
dev.roostify.com
*.roostify.com
www.roostify.com
roostify.com
books-lb8.airmason.com
books-lb8.airmason.com
roostify.com
clientsuccess.roostify.com
apply.superiorcu.com
ammac-test.roostify.com
apply.truecore.org
bok-qa.roostify.com
demo.roostify.com
books-lb8.airmason.com
roostify.com
apply.truecore.org
ammac-test.roostify.com
dev.roostify.com
apply.superiorcu.com
books-lb8.airmason.com
ammac-test.roostify.com
apply.gomortgagebeast.com
www.roostify.com
www.roostify.com
www2.roostify.com
myapp.guildmortgage.com
mortgage.1stbmt.com
books-lb8.airmason.com
*.roostify.com
www2.roostify.com
guild-admin.roostify.com
www.roostify.com
www.roostify.com
template.roostify.com
www.roostify.com
www.roostify.com
nfcu-test.roostify.com
roostify.com
bok-qa.roostify.com
*.roostify.com
www2.roostify.com
www.roostify.com
roostify.com
mortgage.banksanjuans.com
www2.roostify.com
template.roostify.com
insights-dev.roostify.com
demo.roostify.com
mortgage.gofirstbank.com
dev.roostify.com
books-lb8.airmason.com
clientsuccess.roostify.com
www.roostify.com
bok-qa.roostify.com
roostify.com
www.roostify.com
mortgage.gofirstbank.com
dev.roostify.com
dev.roostify.com
*.roostify.com
bok-qa.roostify.com
botw-test.roostify.com
test-frame.roostify.com
mortgage.1stbmt.com
mortgage.1stbmt.com
www.roostify.com
*.roostify.com
books-lb8.airmason.com
perf-test.roostify.com
demo.roostify.com
ammac-test.roostify.com
www.roostify.com
apply.truecore.org
demo.roostify.com
ammac-test.roostify.com
mortgage.fsbmsla.com
dev.roostify.com
Certificate
The complete raw certificate details for bok-qa.roostify.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgISA2olA0/OIGdFk1ffBe424rNQMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MTcxODM3NTFaFw0x OTA3MTYxODM3NTFaMB4xHDAaBgNVBAMTE2Jvay1xYS5yb29zdGlmeS5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+7PNYYmPHTSyjM9IYOWQN2gvK zuX4U0C05RHRQ12QXh0we5/lKeb4se6d2BoqsAmndmCR8Wk0aJB0dlvAcK0ErqAE e9il2p2J3gCyew60GgpltxX72gih2paPMVcfO/faiQZadw3NTLeIJnjG0T2T1YSc TW2t1DkKkRY2GeTP5nVXRcLeUKq5ov9QK+cX2Tw4sLhLam5McFTYZL49VqeMhxcI obCwUe9umf7WkAYorT/gm7/0utDdcBXKG21PzTIVrtL9xITmr0FX66Pl/Jd8O9R5 C9aEhHIq8WP9iW9sfxaSw8+ZpCR1qyD2FT8fAGFJVA+xJpIlSiTOxtt8Q8X9AgMB AAGjggNNMIIDSTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCjaBc/j+sxUpI0XsvAv p9wyhXLcMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUF BwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNy eXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNy eXB0Lm9yZy8wggH0BgNVHREEggHrMIIB54ITYm9rLXFhLnJvb3N0aWZ5LmNvbYIO aGZjLWQuYm9rZi5jb22CHWhvbWVub3ctYXotZC5ib2tmaW5hbmNpYWwuY29tgipo b21lbm93LWF6LWQuYm9rZmluYW5jaWFsLmNvbS5yb29zdGlmeS5jb22CHWhvbWVu b3ctY28tZC5ib2tmaW5hbmNpYWwuY29tgipob21lbm93LWNvLWQuYm9rZmluYW5j aWFsLmNvbS5yb29zdGlmeS5jb22CH2hvbWVub3ctZC5iYW5rb2ZhbGJ1cXVlcnF1 ZS5jb22CG2hvbWVub3ctZC5iYW5rb2Zhcml6b25hLmNvbYIcaG9tZW5vdy1kLmJh bmtvZmFya2Fuc2FzLmNvbYIcaG9tZW5vdy1kLmJhbmtvZm9rbGFob21hLmNvbYIZ aG9tZW5vdy1kLmJhbmtvZnRleGFzLmNvbYISaG9tZW5vdy1kLmJva2YuY29tghJo b21lbm93LWQuY3NidC5jb22CIGhvbWVub3ctZC5ob21lZGlyZWN0bW9ydGdhZ2Uu Y29tghRob21lbm93LWQubW9iYW5rLmNvbYITbW9ydGdhZ2UtZC5ib2tmLmNvbYIg bW9ydGdhZ2UtZC5ib2tmLmNvbS5yb29zdGlmeS5jb20wTAYDVR0gBEUwQzAIBgZn gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s ZXRzZW5jcnlwdC5vcmcwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQEL BQADggEBAGDYr58SP0hjFTCA7D3gBmmt2V/I9xSYy6CBVYTHY3v++DmupQ/mlnI/ DXNfxd4jtMgerElrpIFWi9NiAsIbx7dGJ+Lj8EjPzYT0WH6m6JfBFDPzzrwj6DAG p5MdjFzQPqUdAExySs/4pogvo91ioxogNW7uAAmhdvwN1DJXF/aySFKRuBA/HPIn FTaTd5nERKu4pObECP74jTdGC4evb6hYR8NDp43ur0SrahVdM3LYjnbUxUIHKCkO pYLhEkNGnMq75pD2TX+BB3AE4ksZjVbHqPUwMbNCnjl6cNWqkYYwx8gP26hyukYf pG2vG8y6UXzunuPn2vr4dhmtUX4xI7U= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuzzWGJjx00sozPSGDlk DdoLys7l+FNAtOUR0UNdkF4dMHuf5Snm+LHundgaKrAJp3ZgkfFpNGiQdHZbwHCt BK6gBHvYpdqdid4AsnsOtBoKZbcV+9oIodqWjzFXHzv32okGWncNzUy3iCZ4xtE9 k9WEnE1trdQ5CpEWNhnkz+Z1V0XC3lCquaL/UCvnF9k8OLC4S2puTHBU2GS+PVan jIcXCKGwsFHvbpn+1pAGKK0/4Ju/9LrQ3XAVyhttT80yFa7S/cSE5q9BV+uj5fyX fDvUeQvWhIRyKvFj/YlvbH8WksPPmaQkdasg9hU/HwBhSVQPsSaSJUokzsbbfEPF /QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 297455987320276223093425144216154481537872 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-17 18:37:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-16 18:37:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bok-qa.roostify.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24102122623190971816599537728649938003543580057962929254117896958740292799056750743482660838251827507396419043433388980534055058707446686605236368600397324035890846192476479559889633316330818280614782554868938281720733328714609314482205635095892011318585874968861159032225359240533222010353923282568376393008087331685323208377656336108381492949132771893465099657033504398180415372000381313126143642128213029827787276314546402889508257990132196470979740474311789126719035880677581914946445925479820432951069706487819000316465070944358001009371670261150189966402623527105239675040727141758745243733387246554884780312061 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 28da05cfe3facc54a48d17b2f02fa7dc328572dc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (491 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bok-qa.roostify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfc-d.bokf.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homenow-az-d.bokfinancial.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homenow-az-d.bokfinancial.com.roostify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homenow-co-d.bokfinancial.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homenow-co-d.bokfinancial.com.roostify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homenow-d.bankofalbuquerque.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homenow-d.bankofarizona.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homenow-d.bankofarkansas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homenow-d.bankofoklahoma.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homenow-d.bankoftexas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homenow-d.bokf.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homenow-d.csbt.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homenow-d.homedirectmortgage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homenow-d.mobank.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgage-d.bokf.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgage-d.bokf.com.roostify.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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