base.statefarm.com

- State Farm Mutual Automobile Insurance Company -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 63:2c:9b:0c:02:e7:34:12:00:00:00:00:54:cd:5a:48 was issued on by Entrust, Inc..

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State Farm Mutual Automobile Insurance Company

Company registration number: 37-0533100
Organization: State Farm Mutual Automobile Insurance Company
State / Province: Illinois
Locality: Bloomington
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 63:2c:9b:0c:02:e7:34:12:00:00:00:00:54:cd:5a:48
Serial Number (int): 131825177369607197792292175779269007944
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c7:99:5e:35:dd:18:7f:b8:98:9c:0c:d5:14:1d:74:0f:23:54:fe:60
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 15:65:08:87:a1:7a:6b:6e:28:d4:d0:08:29:9d:a1:b9:1c:44:a4:2d
Fingerprint (sha256): 08:92:61:b9:26:7f:f1:0d:f2:4d:f0:3e:44:3b:86:0f:be:59:4c:b5:38:60:e9:b3:0d:ae:5f:29:33:c8:f4:97

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate base.statefarm.com

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for base.statefarm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

base.statefarm.com
www.base.statefarm.com
base-appint-prod-iscc.prod.statefarm.com
sfcheckout-base-app-prod-iscw.prod.statefarm.ca
base-appint-prod-isce.prod.statefarm.com
sfbackout-base-app-prod-isce.prod.statefarm.com
sfbackout-base-app-prod-iscc.prod.statefarm.ca
sfcheckout-base-app-prod-iscc.prod.statefarm.com
sfcheckout-base-app-prod-iscc.prod.statefarm.ca
sfcheckout-base-app-prod-isce.prod.statefarm.com
sfcheckout-base-app-prod-isce.prod.statefarm.ca
sfbackout-base-app-prod-iscc.prod.statefarm.com
sfbackout-base-app-prod-iscw.prod.statefarm.com
base.statefarm.ca
sfbackout-base-app-prod-iscw.prod.statefarm.ca
sfcheckout-base-app-prod-iscw.prod.statefarm.com
base-appint-prod-iscw.prod.statefarm.com
sfbackout-base-app-prod-isce.prod.statefarm.ca
sfbackout-base.statefarm.com
sfcheckout-base.statefarm.com
sfbackout-base.statefarm.ca
sfcheckout-base.statefarm.ca
hashtag-base.statefarm.com
base-appext-prod-isce.statefarm.com
base-appext-prod-iscc.statefarm.com
base-appext-prod-iscw.statefarm.com

Other certificates including the domain name statefarm.com

(limited to 100 certificates)
claims-prep.test.statefarm.com
apps-prep.test.statefarm.com
iwh.statefarm.com
forlife.statefarm.com
ex90dev1vin2.statefarm.com
ildap.prod.statefarm.com
cebuatadm.statefarm.com
sflws13p1.tcisp.statefarm.com
securedatamgmt.statefarm.com
eBank.statefarm.com
onlineapps-imaging.statefarm.com
checkout.hub.claims.statefarm.com
quotes.statefarm.com
arsondog.statefarm.com
sfrun.statefarm.com
cebuat.statefarm.com
cebuat.statefarm.com
b2b.statefarm.com
aexp.auto.statefarm.com
www.statefarm.com
services.tcidv.statefarm.com
online2.statefarm.com
edocuments.statefarm.com
www.neighborhoodofgood.statefarm.com
portfolio.statefarm.com
es.statefarm.com
hub.claims.sandbox.statefarm.com
utility-prep.test.statefarm.com
coleschallenge.statefarm.com
iwh.statefarm.com
worlds22.statefarm.com
online3.statefarm.com
communication.statefarm.com
www-prep.test.statefarm.com
banksvc.statefarm.com
cebuat.statefarm.com
checkout.hub.claims.statefarm.com
commercialcard.statefarm.com
roadsideassistance.claims.test.statefarm.com
iwh.statefarm.com
bank.statefarm.com
sflsweb.statefarm.com
auth.statefarm.com
common.statefarm.com
opportunity.statefarm.com
api.claims.sandbox.c1.statefarm
cromsvcs-prep.test.statefarm.com
chat.statefarm.com
cebuat.statefarm.com
e.statefarm.com
base.statefarm.com
banksvc.statefarm.com
common.statefarm.com
fire.statefarm.com
vehicleloan.statefarm.com
developer.statefarm.com
iwh.statefarm.com
communication.statefarm.com
quotes.statefarm.com
b2cwa.tcidv.statefarm.com
photovideocapture.claims.test.statefarm.com
SECCTF.STATEFARM.COM
learningcenter.statefarm.com
assocmgmt-prep.test.statefarm.com
phase0-xx.test.statefarm.com
www.developer.statefarm.com
apps-prep.test.statefarm.com
sfvdiFrstBdom.statefarm.com
sfvdifrstbdom.tcisp.statefarm.com
sfmeet.statefarm.com
online4.tcidv.statefarm.com
banksvc-prep.test.statefarm.com
chat.statefarm.com
developer.statefarm.com
www.tcidv.statefarm.com
statefarm.com
launch-dev.policy-view.test.statefarm.com
sfcmgtest.test.statefarm.com
health-prep.test.statefarm.com
forlife.statefarm.com
checkout.hub.claims.statefarm.com
mft.statefarm.com
rating.statefarm.com
meetus.statefarm.com
franchiseprograms.statefarm.com
qaa-prep.test.statefarm.com
cdnlog.statefarm.com
cromsvcs.statefarm.com
iwh-staging.statefarm.com
mail71.tcisp.statefarm.com
www.statefarm.com
auth.test.statefarm.com
assocmgmt.statefarm.com
dvntservice.test.statefarm.com
findjobs.statefarm.com
becomeanagent.statefarm.com
tcixx.statefarm.com
access.tcidv.statefarm.com
test.statefarm.com
mvp.statefarm.com

Certificate

The complete raw certificate details for base.statefarm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJ0zCCCLugAwIBAgIQYyybDALnNBIAAAAAVM1aSDANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDE0IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxTTAeFw0x
NzA0MjAxNDM5MjdaFw0xOTA3MTkxNTA5MjVaMIHwMQswCQYDVQQGEwJVUzERMA8G
A1UECBMISWxsaW5vaXMxFDASBgNVBAcTC0Jsb29taW5ndG9uMRMwEQYLKwYBBAGC
NzwCAQMTAlVTMRkwFwYLKwYBBAGCNzwCAQITCElsbGlub2lzMTcwNQYDVQQKEy5T
dGF0ZSBGYXJtIE11dHVhbCBBdXRvbW9iaWxlIEluc3VyYW5jZSBDb21wYW55MR0w
GwYDVQQPExRQcml2YXRlIE9yZ2FuaXphdGlvbjETMBEGA1UEBRMKMzctMDUzMzEw
MDEbMBkGA1UEAxMSYmFzZS5zdGF0ZWZhcm0uY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA6zffmdV14n8qd3p5AQ/PK68qP4N6PyERTptqC1SMEGd8
j8dQvmBTPZTkrcVf11RtahQUxWhQcvrr9flyQpWK27EaYWPUAXQzHmsxroFLSAwf
bn3zo4Rj8q2US7GMgErQxFJJw+VS3P1V4zc/aTiXCiC2QL3zT8oWQvVnKx8KtAmy
PmSOB1TiFmaztmldiN9Wl0NQsIP2o6PufepJVZYr+rMOFKhVqmjMtYlxSXW7d2XD
+RwFYPoPlhoRnad3CYtMWvWs02qK7fTF5g05sIriU1OrWu+gmAVV7b8t6pI6riJW
KNWC2QSyEi6B9nNjPhn9owQV6Ofrn5BSr9Ea7q4h8QIDAQABo4IFmzCCBZcwEwYK
KwYBBAHWeQIEAwEB/wQCBQAwggQZBgNVHREEggQQMIIEDIISYmFzZS5zdGF0ZWZh
cm0uY29tghZ3d3cuYmFzZS5zdGF0ZWZhcm0uY29tgihiYXNlLWFwcGludC1wcm9k
LWlzY2MucHJvZC5zdGF0ZWZhcm0uY29tgi9zZmNoZWNrb3V0LWJhc2UtYXBwLXBy
b2QtaXNjdy5wcm9kLnN0YXRlZmFybS5jYYIoYmFzZS1hcHBpbnQtcHJvZC1pc2Nl
LnByb2Quc3RhdGVmYXJtLmNvbYIvc2ZiYWNrb3V0LWJhc2UtYXBwLXByb2QtaXNj
ZS5wcm9kLnN0YXRlZmFybS5jb22CLnNmYmFja291dC1iYXNlLWFwcC1wcm9kLWlz
Y2MucHJvZC5zdGF0ZWZhcm0uY2GCMHNmY2hlY2tvdXQtYmFzZS1hcHAtcHJvZC1p
c2NjLnByb2Quc3RhdGVmYXJtLmNvbYIvc2ZjaGVja291dC1iYXNlLWFwcC1wcm9k
LWlzY2MucHJvZC5zdGF0ZWZhcm0uY2GCMHNmY2hlY2tvdXQtYmFzZS1hcHAtcHJv
ZC1pc2NlLnByb2Quc3RhdGVmYXJtLmNvbYIvc2ZjaGVja291dC1iYXNlLWFwcC1w
cm9kLWlzY2UucHJvZC5zdGF0ZWZhcm0uY2GCL3NmYmFja291dC1iYXNlLWFwcC1w
cm9kLWlzY2MucHJvZC5zdGF0ZWZhcm0uY29tgi9zZmJhY2tvdXQtYmFzZS1hcHAt
cHJvZC1pc2N3LnByb2Quc3RhdGVmYXJtLmNvbYIRYmFzZS5zdGF0ZWZhcm0uY2GC
LnNmYmFja291dC1iYXNlLWFwcC1wcm9kLWlzY3cucHJvZC5zdGF0ZWZhcm0uY2GC
MHNmY2hlY2tvdXQtYmFzZS1hcHAtcHJvZC1pc2N3LnByb2Quc3RhdGVmYXJtLmNv
bYIoYmFzZS1hcHBpbnQtcHJvZC1pc2N3LnByb2Quc3RhdGVmYXJtLmNvbYIuc2Zi
YWNrb3V0LWJhc2UtYXBwLXByb2QtaXNjZS5wcm9kLnN0YXRlZmFybS5jYYIcc2Zi
YWNrb3V0LWJhc2Uuc3RhdGVmYXJtLmNvbYIdc2ZjaGVja291dC1iYXNlLnN0YXRl
ZmFybS5jb22CG3NmYmFja291dC1iYXNlLnN0YXRlZmFybS5jYYIcc2ZjaGVja291
dC1iYXNlLnN0YXRlZmFybS5jYYIaaGFzaHRhZy1iYXNlLnN0YXRlZmFybS5jb22C
I2Jhc2UtYXBwZXh0LXByb2QtaXNjZS5zdGF0ZWZhcm0uY29tgiNiYXNlLWFwcGV4
dC1wcm9kLWlzY2Muc3RhdGVmYXJtLmNvbYIjYmFzZS1hcHBleHQtcHJvZC1pc2N3
LnN0YXRlZmFybS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6
Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8vYWlhLmVudHJ1
c3QubmV0L2wxbS1jaGFpbjI1Ni5jZXIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDov
L2NybC5lbnRydXN0Lm5ldC9sZXZlbDFtLmNybDBKBgNVHSAEQzBBMDYGCmCGSAGG
+mwKAQIwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEw
BwYFZ4EMAQEwHwYDVR0jBBgwFoAUw/fQtSowra8NkSFwOVTdvIlwxzowHQYDVR0O
BBYEFMeZXjXdGH+4mJwM1RQddA8jVP5gMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQEL
BQADggEBAJt4xkrsOdFvOEHKiaF4QsPm4AZloY4OC8VZbytKsMpS94/2d8oHNody
C0cn1J+kzXoVcHXx7qN9c2NmIDG2ntDQdJIctBiFtB5EmtJjYSfxFD157Wkb1p1+
RY37UMMQy6YtHamQJPtV/36/B6sG99uOoxCzpnBa+E2maQMwU0C62BtITASV/mJH
k7k21pAF9hbnIMWjCOhKpsizRZdes0WikeSNEa5wAJc7yRFT8ERbsOKMushSJB7G
8Ho+rRVt1CVwCqExsg2dbnPvx05D8+XWI3MvKibHIkxOFaG76AOa+sAXeY463K/w
vYkWFIfGUDhG2vzG8Wc6bk7aF1EAnFk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zffmdV14n8qd3p5AQ/P
K68qP4N6PyERTptqC1SMEGd8j8dQvmBTPZTkrcVf11RtahQUxWhQcvrr9flyQpWK
27EaYWPUAXQzHmsxroFLSAwfbn3zo4Rj8q2US7GMgErQxFJJw+VS3P1V4zc/aTiX
CiC2QL3zT8oWQvVnKx8KtAmyPmSOB1TiFmaztmldiN9Wl0NQsIP2o6PufepJVZYr
+rMOFKhVqmjMtYlxSXW7d2XD+RwFYPoPlhoRnad3CYtMWvWs02qK7fTF5g05sIri
U1OrWu+gmAVV7b8t6pI6riJWKNWC2QSyEi6B9nNjPhn9owQV6Ofrn5BSr9Ea7q4h
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 131825177369607197792292175779269007944
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-20 14:39:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-19 15:09:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bloomington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State Farm Mutual Automobile Insurance Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '37-0533100'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'base.statefarm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29693553887699716185326253343144344204389506939600855461284297952218014144789462305361628247597351535740729395897226284843121170751114756972984720461162382827808800822723996202064733532520250420178864153110513382881282087011171349020896724996058397795159705575616485888569360998315154395715217094648814416309324259772669993710034394579197088261489566223297239815827938328935792369432369712661268938917989694071381389031703050402119208133282874682949761372666663421027796346806494605824763157095591807830738504747178527670019541249340038232154148205019986850790426615417259628100222876018964967243692449475005588054513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1040 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'base.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.base.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'base-appint-prod-iscc.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-base-app-prod-iscw.prod.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'base-appint-prod-isce.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-base-app-prod-isce.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-base-app-prod-iscc.prod.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-base-app-prod-iscc.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-base-app-prod-iscc.prod.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-base-app-prod-isce.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-base-app-prod-isce.prod.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-base-app-prod-iscc.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-base-app-prod-iscw.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'base.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-base-app-prod-iscw.prod.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-base-app-prod-iscw.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'base-appint-prod-iscw.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-base-app-prod-isce.prod.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-base.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-base.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-base.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-base.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hashtag-base.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'base-appext-prod-isce.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'base-appext-prod-iscc.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'base-appext-prod-iscw.statefarm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7995e35dd187fb8989c0cd5141d740f2354fe60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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