portfolio.statefarm.com

- State Farm Mutual Automobile Insurance Company -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 07:6f:c5:aa:d7:bd:b1:73:00:00:00:00:54:cd:fb:da was issued on by Entrust, Inc..

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State Farm Mutual Automobile Insurance Company

Company registration number: 37-0533100
Organization: State Farm Mutual Automobile Insurance Company
State / Province: Illinois
Locality: Bloomington
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:6f:c5:aa:d7:bd:b1:73:00:00:00:00:54:cd:fb:da
Serial Number (int): 9884950092039925852843834120552184794
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 6d:29:f6:56:23:b6:ad:23:6c:2d:6f:a1:aa:43:25:4d:b4:64:b3:a4
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): d7:33:84:4d:59:0c:a8:6f:d0:c1:05:d4:df:99:87:13:67:c1:55:7e
Fingerprint (sha256): 04:37:42:7e:e9:6b:12:fc:27:d2:45:62:56:35:cd:20:74:f6:e5:d7:f6:2a:3e:6f:80:78:62:1e:d3:23:5b:e5

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate portfolio.statefarm.com

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portfolio.statefarm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portfolio.statefarm.com
sfcheckout-portfolio-app-prod-iscw.prod.statefarm.ca
sfbackout-portfolio-app-prod-iscw.prod.statefarm.ca
hashtag-portfolio.statefarm.com
sfbackout-portfolio-app-prod-iscc.prod.statefarm.ca
portfolio-appint-prod-isce.prod.statefarm.com
sfcheckout-portfolio-app-prod-iscc.prod.statefarm.ca
sfcheckout-portfolio-app-prod-iscw.prod.statefarm.com
sfbackout-portfolio-app-prod-iscw.prod.statefarm.com
portfolio-appint-prod-iscc.prod.statefarm.com
sfcheckout-portfolio-app-prod-iscc.prod.statefarm.com
sfbackout-portfolio-app-prod-isce.prod.statefarm.com
portfolio-appint-prod-iscw.prod.statefarm.com
sfcheckout-portfolio-app-prod-isce.prod.statefarm.com
sfcheckout-portfolio-app-prod-isce.prod.statefarm.ca
portfolio.statefarm.ca
sfbackout-portfolio-app-prod-isce.prod.statefarm.ca
sfbackout-portfolio-app-prod-iscc.prod.statefarm.com
sfbackout-portfolio.statefarm.com
sfcheckout-portfolio.statefarm.ca
sfcheckout-portfolio.statefarm.com
sfbackout-portfolio.statefarm.ca
portfolio-appext-prod-isce.statefarm.com
portfolio-appext-prod-iscc.statefarm.com
portfolio-appext-prod-iscw.statefarm.com
www.portfolio.statefarm.com

Other certificates including the domain name statefarm.com

(limited to 100 certificates)
claims-prep.test.statefarm.com
apps-prep.test.statefarm.com
iwh.statefarm.com
forlife.statefarm.com
ex90dev1vin2.statefarm.com
ildap.prod.statefarm.com
cebuatadm.statefarm.com
sflws13p1.tcisp.statefarm.com
securedatamgmt.statefarm.com
eBank.statefarm.com
onlineapps-imaging.statefarm.com
checkout.hub.claims.statefarm.com
quotes.statefarm.com
arsondog.statefarm.com
sfrun.statefarm.com
cebuat.statefarm.com
cebuat.statefarm.com
b2b.statefarm.com
aexp.auto.statefarm.com
www.statefarm.com
services.tcidv.statefarm.com
online2.statefarm.com
edocuments.statefarm.com
www.neighborhoodofgood.statefarm.com
portfolio.statefarm.com
es.statefarm.com
hub.claims.sandbox.statefarm.com
utility-prep.test.statefarm.com
coleschallenge.statefarm.com
iwh.statefarm.com
worlds22.statefarm.com
online3.statefarm.com
communication.statefarm.com
www-prep.test.statefarm.com
banksvc.statefarm.com
cebuat.statefarm.com
checkout.hub.claims.statefarm.com
commercialcard.statefarm.com
roadsideassistance.claims.test.statefarm.com
iwh.statefarm.com
bank.statefarm.com
sflsweb.statefarm.com
auth.statefarm.com
common.statefarm.com
opportunity.statefarm.com
api.claims.sandbox.c1.statefarm
cromsvcs-prep.test.statefarm.com
chat.statefarm.com
cebuat.statefarm.com
e.statefarm.com
base.statefarm.com
banksvc.statefarm.com
common.statefarm.com
fire.statefarm.com
vehicleloan.statefarm.com
developer.statefarm.com
iwh.statefarm.com
communication.statefarm.com
quotes.statefarm.com
b2cwa.tcidv.statefarm.com
photovideocapture.claims.test.statefarm.com
SECCTF.STATEFARM.COM
learningcenter.statefarm.com
assocmgmt-prep.test.statefarm.com
phase0-xx.test.statefarm.com
www.developer.statefarm.com
apps-prep.test.statefarm.com
sfvdiFrstBdom.statefarm.com
sfvdifrstbdom.tcisp.statefarm.com
sfmeet.statefarm.com
online4.tcidv.statefarm.com
banksvc-prep.test.statefarm.com
chat.statefarm.com
developer.statefarm.com
www.tcidv.statefarm.com
statefarm.com
launch-dev.policy-view.test.statefarm.com
sfcmgtest.test.statefarm.com
health-prep.test.statefarm.com
forlife.statefarm.com
checkout.hub.claims.statefarm.com
mft.statefarm.com
rating.statefarm.com
meetus.statefarm.com
franchiseprograms.statefarm.com
qaa-prep.test.statefarm.com
cdnlog.statefarm.com
cromsvcs.statefarm.com
iwh-staging.statefarm.com
mail71.tcisp.statefarm.com
www.statefarm.com
auth.test.statefarm.com
assocmgmt.statefarm.com
dvntservice.test.statefarm.com
findjobs.statefarm.com
becomeanagent.statefarm.com
tcixx.statefarm.com
access.tcidv.statefarm.com
test.statefarm.com
mvp.statefarm.com

Certificate

The complete raw certificate details for portfolio.statefarm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp4Q1kaZUfxewVNQNl+k
6vXrK+qt+abbVLTeFccX1gcqGUtxg6CgZ9QPhYIJd7riO/kMxVjuMRWIfJ2oCeXC
W1y/lPkxSp2thG+DN/TcFrmeM2Njd4B8EAEFD/hKa3fr5PssvcLnWiy+kicBjkH/
EC0jOm+q0k2stuySRiThrbN7QurlMrzudnPyJQ3YPi4M05sY+HtqLzrZC/PLMAXT
6pKr4HwKXnLYtQEuFYNDk6iVRAu0s88F/PQCKPEMPSCWGedzRWj8cRDCchs0laxt
unNrgeI0DCrAWS9RUZA1+/ZHn8yX85nftLZ9vbEAAS9kRhUQ1XxNg4Ihf0VfGhTd
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9884950092039925852843834120552184794
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-20 13:45:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 14:15:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bloomington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State Farm Mutual Automobile Insurance Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '37-0533100'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portfolio.statefarm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24568176299454654208993267373418470466162961352253967225026155140028509921758868154619305939696353116132846216450359234994302067833560412149132630225451100669017916214506108864205506304494453773073466005161147470412623606050978626414937206690327151641682116613508810772816378824401118787735727916849350566295870676470423078783026854696738226928920066618439190676529729245781570069827555128107843963024029864793415234964676862976722750681012685148590594746520945802658638754084537550478229456471178604381394145749676558962451127681057747143232411117443538208403824428166482719430292830019874051531200890107721285950971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1170 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-portfolio-app-prod-iscw.prod.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-portfolio-app-prod-iscw.prod.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hashtag-portfolio.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-portfolio-app-prod-iscc.prod.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio-appint-prod-isce.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-portfolio-app-prod-iscc.prod.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-portfolio-app-prod-iscw.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-portfolio-app-prod-iscw.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio-appint-prod-iscc.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-portfolio-app-prod-iscc.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-portfolio-app-prod-isce.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio-appint-prod-iscw.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-portfolio-app-prod-isce.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-portfolio-app-prod-isce.prod.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-portfolio-app-prod-isce.prod.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-portfolio-app-prod-iscc.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-portfolio.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-portfolio.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-portfolio.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-portfolio.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio-appext-prod-isce.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio-appext-prod-iscc.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio-appext-prod-iscw.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portfolio.statefarm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d29f65623b6ad236c2d6fa1aa43254db464b3a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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