phase0-xx.test.statefarm.com

- State Farm Mutual Automobile Insurance Company -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:1f:08:fb was issued on by Entrust, Inc..

With 40 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

State Farm Mutual Automobile Insurance Company

Organization: State Farm Mutual Automobile Insurance Company
State / Province: Illinois
Locality: Bloomington
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:1f:08:fb
Serial Number (int): 1277102331
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 5c:d5:07:f8:d2:e7:51:9c:3f:c9:4a:ab:64:e8:ab:82:23:3b:af:0d
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): de:19:4e:af:7e:65:e5:4a:98:a6:b8:5f:b0:60:c0:4d:fc:fd:37:10
Fingerprint (sha256): 0a:c9:3e:2f:05:a4:71:a7:af:e5:6e:7c:4a:a4:e2:c6:61:a9:72:d7:4a:5c:18:69:15:2b:79:76:a0:8e:3a:eb

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate phase0-xx.test.statefarm.com

40

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for phase0-xx.test.statefarm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

phase0-xx.test.statefarm.com
www-syst-phase0.test.statefarm.ca
www-syst-phase0.test.statefarm.com
es-syst-phase0.test.statefarm.com
sparkapppd-syst-phase0.test.statefarm.com
sparkapppd-syst-phase0.test.statefarm.ca
qaa-syst-phase0.test.statefarm.com
qaa-syst-phase0.test.statefarm.ca
proofing-syst.test.statefarm.com
proofing-syst.test.statefarm.ca
proofing-syst-phase0.test.statefarm.com
proofing-syst-phase0.test.statefarm.ca
life-syst-phase0.test.statefarm.com
life-syst-phase0.test.statefarm.ca
financials-syst-phase0.test.statefarm.com
financials-syst-phase0.test.statefarm.ca
common-syst-phase0.test.statefarm.com
common-syst-phase0.test.statefarm.ca
base-syst-phase0.test.statefarm.com
base-syst-phase0.test.statefarm.ca
apps-syst-phase0.test.statefarm.com
apps-syst-phase0.test.statefarm.ca
auto-syst-phase0.test.statefarm.com
auto-syst-phase0.test.statefarm.ca
customer-syst-phase0.test.statefarm.com
customer-syst-phase0.test.statefarm.ca
fire-syst-phase0.test.statefarm.com
fire-syst-phase0.test.statefarm.ca
bank-syst-phase0.test.statefarm.com
bank-syst-phase0.test.statefarm.ca
health-syst-phase0.test.statefarm.com
health-syst-phase0.test.statefarm.ca
mutualfunds-syst-phase0.test.statefarm.com
mutualfunds-syst-phase0.test.statefarm.ca
claims-syst-phase0.test.statefarm.com
claims-syst-phase0.test.statefarm.ca
edocuments-syst-phase0.test.statefarm.com
edocuments-syst-phase0.test.statefarm.ca
tpapp-syst-phase0.test.statefarm.com
tpapp-syst-phase0.test.statefarm.ca

Other certificates including the domain name statefarm.com

(limited to 100 certificates)
claims-prep.test.statefarm.com
apps-prep.test.statefarm.com
iwh.statefarm.com
forlife.statefarm.com
ex90dev1vin2.statefarm.com
ildap.prod.statefarm.com
cebuatadm.statefarm.com
sflws13p1.tcisp.statefarm.com
securedatamgmt.statefarm.com
eBank.statefarm.com
onlineapps-imaging.statefarm.com
checkout.hub.claims.statefarm.com
quotes.statefarm.com
arsondog.statefarm.com
sfrun.statefarm.com
cebuat.statefarm.com
cebuat.statefarm.com
b2b.statefarm.com
aexp.auto.statefarm.com
www.statefarm.com
services.tcidv.statefarm.com
online2.statefarm.com
edocuments.statefarm.com
www.neighborhoodofgood.statefarm.com
portfolio.statefarm.com
es.statefarm.com
hub.claims.sandbox.statefarm.com
utility-prep.test.statefarm.com
coleschallenge.statefarm.com
iwh.statefarm.com
worlds22.statefarm.com
online3.statefarm.com
communication.statefarm.com
www-prep.test.statefarm.com
banksvc.statefarm.com
cebuat.statefarm.com
checkout.hub.claims.statefarm.com
commercialcard.statefarm.com
roadsideassistance.claims.test.statefarm.com
iwh.statefarm.com
bank.statefarm.com
sflsweb.statefarm.com
auth.statefarm.com
common.statefarm.com
opportunity.statefarm.com
api.claims.sandbox.c1.statefarm
cromsvcs-prep.test.statefarm.com
chat.statefarm.com
cebuat.statefarm.com
e.statefarm.com
base.statefarm.com
banksvc.statefarm.com
common.statefarm.com
fire.statefarm.com
vehicleloan.statefarm.com
developer.statefarm.com
iwh.statefarm.com
communication.statefarm.com
quotes.statefarm.com
b2cwa.tcidv.statefarm.com
photovideocapture.claims.test.statefarm.com
SECCTF.STATEFARM.COM
learningcenter.statefarm.com
assocmgmt-prep.test.statefarm.com
phase0-xx.test.statefarm.com
www.developer.statefarm.com
apps-prep.test.statefarm.com
sfvdiFrstBdom.statefarm.com
sfvdifrstbdom.tcisp.statefarm.com
sfmeet.statefarm.com
online4.tcidv.statefarm.com
banksvc-prep.test.statefarm.com
chat.statefarm.com
developer.statefarm.com
www.tcidv.statefarm.com
statefarm.com
launch-dev.policy-view.test.statefarm.com
sfcmgtest.test.statefarm.com
health-prep.test.statefarm.com
forlife.statefarm.com
checkout.hub.claims.statefarm.com
mft.statefarm.com
rating.statefarm.com
meetus.statefarm.com
franchiseprograms.statefarm.com
qaa-prep.test.statefarm.com
cdnlog.statefarm.com
cromsvcs.statefarm.com
iwh-staging.statefarm.com
mail71.tcisp.statefarm.com
www.statefarm.com
auth.test.statefarm.com
assocmgmt.statefarm.com
dvntservice.test.statefarm.com
findjobs.statefarm.com
becomeanagent.statefarm.com
tcixx.statefarm.com
access.tcidv.statefarm.com
test.statefarm.com
mvp.statefarm.com

Certificate

The complete raw certificate details for phase0-xx.test.statefarm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILLjCCChagAwIBAgIETB8I+zANBgkqhkiG9w0BAQUFADCBsTELMAkGA1UEBhMC
VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0
Lm5ldC9ycGEgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMW
KGMpIDIwMDkgRW50cnVzdCwgSW5jLjEuMCwGA1UEAxMlRW50cnVzdCBDZXJ0aWZp
Y2F0aW9uIEF1dGhvcml0eSAtIEwxQzAeFw0xMzAyMTgyMDEwMjVaFw0xNTAyMTkx
MjMxMDVaMIGWMQswCQYDVQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMxFDASBgNV
BAcTC0Jsb29taW5ndG9uMTcwNQYDVQQKEy5TdGF0ZSBGYXJtIE11dHVhbCBBdXRv
bW9iaWxlIEluc3VyYW5jZSBDb21wYW55MSUwIwYDVQQDExxwaGFzZTAteHgudGVz
dC5zdGF0ZWZhcm0uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
sxNwuR/HtKdhW5h/hqUFQ4vLDbMjxB/9v80Yxt+339ehWu0+8R1EtjKBf+4B3mpx
u7ZNd38Pdi/Rto3nqnRFIKnlJP0y4w8oSDxe1tC+L5tGqjytanEpKpv+CouW9EyG
INGpgun0oTgN/p7q491nMArbk7A+v3scx9QTWQX3tdFcqdm8wm1TMlrH90EK4aIg
KMs8byv8cW1eFAsix9Cmq/TOVoDQzP5kmG4qUvKIfxspi2AXdxhqAUWdzMmkHD26
6ABgQhxCBY6B05Ixr5FdE/D12cRaZwh6OuKFGfy/zIZtta0dD2IgR7geVMxBmUIS
jV8yXWLKJAGrGqO+dXQkeQIDAQABo4IHZTCCB2EwCwYDVR0PBAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAzBgNVHR8ELDAqMCigJqAkhiJodHRw
Oi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWMuY3JsMGQGCCsGAQUFBwEBBFgwVjAj
BggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwLwYIKwYBBQUHMAKG
I2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvMjA0OC1sMWMuY2VyMEoGA1UdIARDMEEw
NQYJKoZIhvZ9B0sCMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuZW50cnVzdC5u
ZXQvcnBhMAgGBmeBDAECAjCCBf8GA1UdEQSCBfYwggXyghxwaGFzZTAteHgudGVz
dC5zdGF0ZWZhcm0uY29tgiF3d3ctc3lzdC1waGFzZTAudGVzdC5zdGF0ZWZhcm0u
Y2GCInd3dy1zeXN0LXBoYXNlMC50ZXN0LnN0YXRlZmFybS5jb22CIWVzLXN5c3Qt
cGhhc2UwLnRlc3Quc3RhdGVmYXJtLmNvbYIpc3BhcmthcHBwZC1zeXN0LXBoYXNl
MC50ZXN0LnN0YXRlZmFybS5jb22CKHNwYXJrYXBwcGQtc3lzdC1waGFzZTAudGVz
dC5zdGF0ZWZhcm0uY2GCInFhYS1zeXN0LXBoYXNlMC50ZXN0LnN0YXRlZmFybS5j
b22CIXFhYS1zeXN0LXBoYXNlMC50ZXN0LnN0YXRlZmFybS5jYYIgcHJvb2Zpbmct
c3lzdC50ZXN0LnN0YXRlZmFybS5jb22CH3Byb29maW5nLXN5c3QudGVzdC5zdGF0
ZWZhcm0uY2GCJ3Byb29maW5nLXN5c3QtcGhhc2UwLnRlc3Quc3RhdGVmYXJtLmNv
bYImcHJvb2Zpbmctc3lzdC1waGFzZTAudGVzdC5zdGF0ZWZhcm0uY2GCI2xpZmUt
c3lzdC1waGFzZTAudGVzdC5zdGF0ZWZhcm0uY29tgiJsaWZlLXN5c3QtcGhhc2Uw
LnRlc3Quc3RhdGVmYXJtLmNhgilmaW5hbmNpYWxzLXN5c3QtcGhhc2UwLnRlc3Qu
c3RhdGVmYXJtLmNvbYIoZmluYW5jaWFscy1zeXN0LXBoYXNlMC50ZXN0LnN0YXRl
ZmFybS5jYYIlY29tbW9uLXN5c3QtcGhhc2UwLnRlc3Quc3RhdGVmYXJtLmNvbYIk
Y29tbW9uLXN5c3QtcGhhc2UwLnRlc3Quc3RhdGVmYXJtLmNhgiNiYXNlLXN5c3Qt
cGhhc2UwLnRlc3Quc3RhdGVmYXJtLmNvbYIiYmFzZS1zeXN0LXBoYXNlMC50ZXN0
LnN0YXRlZmFybS5jYYIjYXBwcy1zeXN0LXBoYXNlMC50ZXN0LnN0YXRlZmFybS5j
b22CImFwcHMtc3lzdC1waGFzZTAudGVzdC5zdGF0ZWZhcm0uY2GCI2F1dG8tc3lz
dC1waGFzZTAudGVzdC5zdGF0ZWZhcm0uY29tgiJhdXRvLXN5c3QtcGhhc2UwLnRl
c3Quc3RhdGVmYXJtLmNhgidjdXN0b21lci1zeXN0LXBoYXNlMC50ZXN0LnN0YXRl
ZmFybS5jb22CJmN1c3RvbWVyLXN5c3QtcGhhc2UwLnRlc3Quc3RhdGVmYXJtLmNh
giNmaXJlLXN5c3QtcGhhc2UwLnRlc3Quc3RhdGVmYXJtLmNvbYIiZmlyZS1zeXN0
LXBoYXNlMC50ZXN0LnN0YXRlZmFybS5jYYIjYmFuay1zeXN0LXBoYXNlMC50ZXN0
LnN0YXRlZmFybS5jb22CImJhbmstc3lzdC1waGFzZTAudGVzdC5zdGF0ZWZhcm0u
Y2GCJWhlYWx0aC1zeXN0LXBoYXNlMC50ZXN0LnN0YXRlZmFybS5jb22CJGhlYWx0
aC1zeXN0LXBoYXNlMC50ZXN0LnN0YXRlZmFybS5jYYIqbXV0dWFsZnVuZHMtc3lz
dC1waGFzZTAudGVzdC5zdGF0ZWZhcm0uY29tgiltdXR1YWxmdW5kcy1zeXN0LXBo
YXNlMC50ZXN0LnN0YXRlZmFybS5jYYIlY2xhaW1zLXN5c3QtcGhhc2UwLnRlc3Qu
c3RhdGVmYXJtLmNvbYIkY2xhaW1zLXN5c3QtcGhhc2UwLnRlc3Quc3RhdGVmYXJt
LmNhgillZG9jdW1lbnRzLXN5c3QtcGhhc2UwLnRlc3Quc3RhdGVmYXJtLmNvbYIo
ZWRvY3VtZW50cy1zeXN0LXBoYXNlMC50ZXN0LnN0YXRlZmFybS5jYYIkdHBhcHAt
c3lzdC1waGFzZTAudGVzdC5zdGF0ZWZhcm0uY29tgiN0cGFwcC1zeXN0LXBoYXNl
MC50ZXN0LnN0YXRlZmFybS5jYTAfBgNVHSMEGDAWgBQe8auJBvhJDwEzd+4Ueu4Z
fJMoTTAdBgNVHQ4EFgQUXNUH+NLnUZw/yUqrZOirgiM7rw0wCQYDVR0TBAIwADAN
BgkqhkiG9w0BAQUFAAOCAQEAYeG1e0fsRkAnztgprEp88uPqHJXLNQYgNFXnAdUc
uKUtSW1N7QeDtrkF/cBJMJufvE+FyLjLx9O/3dekySQBUH3M08ofdEvCkAApJVZY
arhajgLmQ0n8pxCaIy/6t4/GF5gW0oCsSmh4mhlfxEMWVvdAaxBREoG0wKPUBQmc
4/8qV/nrXHPDzahlbeRsLD2fnLa0eV9ngRNRcmF9egw3jxiaalUxtt+iBbtvYV8g
UdrYF1qFiGAgfnA2JHXsJBWjRSWc6ybFFYf+u8eL+4g6k5yVyG3kqVLJmgaEOLik
iMsPMIKkOJES6BgjvxSnf0rFU7UC3TiqLZMG+udwUz/Qmg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxNwuR/HtKdhW5h/hqUF
Q4vLDbMjxB/9v80Yxt+339ehWu0+8R1EtjKBf+4B3mpxu7ZNd38Pdi/Rto3nqnRF
IKnlJP0y4w8oSDxe1tC+L5tGqjytanEpKpv+CouW9EyGINGpgun0oTgN/p7q491n
MArbk7A+v3scx9QTWQX3tdFcqdm8wm1TMlrH90EK4aIgKMs8byv8cW1eFAsix9Cm
q/TOVoDQzP5kmG4qUvKIfxspi2AXdxhqAUWdzMmkHD266ABgQhxCBY6B05Ixr5Fd
E/D12cRaZwh6OuKFGfy/zIZtta0dD2IgR7geVMxBmUISjV8yXWLKJAGrGqO+dXQk
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277102331
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-02-18 20:10:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-19 12:31:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bloomington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State Farm Mutual Automobile Insurance Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'phase0-xx.test.statefarm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22606242970358016911919657801049908894318746595060130291482885661377478767543127911583556194040740014345612659854628363766678872295533531631158738349037959940797586891248611963475166726855078309302414260384159907878330745226184046176714005577387232962370418322594482791932151592981096408048934526702849926601682863469865829796410955392758272160649288537484972151017551872132127081118362610431195416789413434013314066747425555297680579587113101440928576215351873740741368865356903122530596083057584812532915265021515311178995004596594018878243431813407705872919114752693530185275931048645062624669569446127516207293561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1526 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phase0-xx.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-syst-phase0.test.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-syst-phase0.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es-syst-phase0.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkapppd-syst-phase0.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparkapppd-syst-phase0.test.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qaa-syst-phase0.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qaa-syst-phase0.test.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proofing-syst.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proofing-syst.test.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proofing-syst-phase0.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proofing-syst-phase0.test.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life-syst-phase0.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life-syst-phase0.test.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financials-syst-phase0.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financials-syst-phase0.test.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'common-syst-phase0.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'common-syst-phase0.test.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'base-syst-phase0.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'base-syst-phase0.test.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps-syst-phase0.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps-syst-phase0.test.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto-syst-phase0.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto-syst-phase0.test.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-syst-phase0.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-syst-phase0.test.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fire-syst-phase0.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fire-syst-phase0.test.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bank-syst-phase0.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bank-syst-phase0.test.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health-syst-phase0.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health-syst-phase0.test.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mutualfunds-syst-phase0.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mutualfunds-syst-phase0.test.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims-syst-phase0.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims-syst-phase0.test.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edocuments-syst-phase0.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edocuments-syst-phase0.test.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpapp-syst-phase0.test.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpapp-syst-phase0.test.statefarm.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5cd507f8d2e7519c3fc94aab64e8ab82233baf0d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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