assocmgmt.statefarm.com

- State Farm Mutual Automobile Insurance Company -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number bc:2b:03:a9:d4:5a:4e:3b:00:00:00:00:54:cd:5a:42 was issued on by Entrust, Inc..

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State Farm Mutual Automobile Insurance Company

Company registration number: 37-0533100
Organization: State Farm Mutual Automobile Insurance Company
State / Province: Illinois
Locality: Bloomington
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): bc:2b:03:a9:d4:5a:4e:3b:00:00:00:00:54:cd:5a:42
Serial Number (int): 250118206274989452398460899203532806722
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 99:cf:e8:02:13:69:69:08:d7:29:95:9c:d7:98:64:16:1a:f9:0e:4b
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): b2:3a:5d:84:77:b2:66:da:c3:77:fa:d2:3c:aa:4f:f0:8e:14:ba:ea
Fingerprint (sha256): 0f:3e:19:1b:f0:f7:46:07:9b:24:69:96:99:1e:e4:51:17:58:b5:78:bf:f4:f8:6a:dc:c9:e4:fd:39:01:76:87

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate assocmgmt.statefarm.com

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assocmgmt.statefarm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assocmgmt.statefarm.com
www.assocmgmt.statefarm.com
sfcheckout-assocmgmt-app-prod-iscw.prod.statefarm.ca
sfbackout-assocmgmt-app-prod-iscw.prod.statefarm.ca
assocmgmt.statefarm.ca
sfcheckout-assocmgmt-app-prod-iscw.prod.statefarm.com
sfcheckout-assocmgmt-app-prod-isce.prod.statefarm.com
assocmgmt-appint-prod-isce.prod.statefarm.com
assocmgmt-appint-prod-iscw.prod.statefarm.com
sfbackout-assocmgmt-app-prod-iscw.prod.statefarm.com
sfbackout-assocmgmt-app-prod-iscc.prod.statefarm.com
sfbackout-assocmgmt-app-prod-isce.prod.statefarm.ca
sfcheckout-assocmgmt-app-prod-iscc.prod.statefarm.ca
assocmgmt-appint-prod-iscc.prod.statefarm.com
sfcheckout-assocmgmt-app-prod-isce.prod.statefarm.ca
sfbackout-assocmgmt-app-prod-isce.prod.statefarm.com
sfbackout-assocmgmt-app-prod-iscc.prod.statefarm.ca
sfcheckout-assocmgmt-app-prod-iscc.prod.statefarm.com
sfcheckout-assocmgmt.statefarm.ca
sfbackout-assocmgmt.statefarm.ca
sfcheckout-assocmgmt.statefarm.com
sfbackout-assocmgmt.statefarm.com
hashtag-assocmgmt.statefarm.com
assocmgmt-appext-prod-isce.statefarm.com
assocmgmt-appext-prod-iscc.statefarm.com
assocmgmt-appext-prod-iscw.statefarm.com

Other certificates including the domain name statefarm.com

(limited to 100 certificates)
claims-prep.test.statefarm.com
apps-prep.test.statefarm.com
iwh.statefarm.com
forlife.statefarm.com
ex90dev1vin2.statefarm.com
ildap.prod.statefarm.com
cebuatadm.statefarm.com
sflws13p1.tcisp.statefarm.com
securedatamgmt.statefarm.com
eBank.statefarm.com
onlineapps-imaging.statefarm.com
checkout.hub.claims.statefarm.com
quotes.statefarm.com
arsondog.statefarm.com
sfrun.statefarm.com
cebuat.statefarm.com
cebuat.statefarm.com
b2b.statefarm.com
aexp.auto.statefarm.com
www.statefarm.com
services.tcidv.statefarm.com
online2.statefarm.com
edocuments.statefarm.com
www.neighborhoodofgood.statefarm.com
portfolio.statefarm.com
es.statefarm.com
hub.claims.sandbox.statefarm.com
utility-prep.test.statefarm.com
coleschallenge.statefarm.com
iwh.statefarm.com
worlds22.statefarm.com
online3.statefarm.com
communication.statefarm.com
www-prep.test.statefarm.com
banksvc.statefarm.com
cebuat.statefarm.com
checkout.hub.claims.statefarm.com
commercialcard.statefarm.com
roadsideassistance.claims.test.statefarm.com
iwh.statefarm.com
bank.statefarm.com
sflsweb.statefarm.com
auth.statefarm.com
common.statefarm.com
opportunity.statefarm.com
api.claims.sandbox.c1.statefarm
cromsvcs-prep.test.statefarm.com
chat.statefarm.com
cebuat.statefarm.com
e.statefarm.com
base.statefarm.com
banksvc.statefarm.com
common.statefarm.com
fire.statefarm.com
vehicleloan.statefarm.com
developer.statefarm.com
iwh.statefarm.com
communication.statefarm.com
quotes.statefarm.com
b2cwa.tcidv.statefarm.com
photovideocapture.claims.test.statefarm.com
SECCTF.STATEFARM.COM
learningcenter.statefarm.com
assocmgmt-prep.test.statefarm.com
phase0-xx.test.statefarm.com
www.developer.statefarm.com
apps-prep.test.statefarm.com
sfvdiFrstBdom.statefarm.com
sfvdifrstbdom.tcisp.statefarm.com
sfmeet.statefarm.com
online4.tcidv.statefarm.com
banksvc-prep.test.statefarm.com
chat.statefarm.com
developer.statefarm.com
www.tcidv.statefarm.com
statefarm.com
launch-dev.policy-view.test.statefarm.com
sfcmgtest.test.statefarm.com
health-prep.test.statefarm.com
forlife.statefarm.com
checkout.hub.claims.statefarm.com
mft.statefarm.com
rating.statefarm.com
meetus.statefarm.com
franchiseprograms.statefarm.com
qaa-prep.test.statefarm.com
cdnlog.statefarm.com
cromsvcs.statefarm.com
iwh-staging.statefarm.com
mail71.tcisp.statefarm.com
www.statefarm.com
auth.test.statefarm.com
assocmgmt.statefarm.com
dvntservice.test.statefarm.com
findjobs.statefarm.com
becomeanagent.statefarm.com
tcixx.statefarm.com
access.tcidv.statefarm.com
test.statefarm.com
mvp.statefarm.com

Certificate

The complete raw certificate details for assocmgmt.statefarm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD1DXRqpA9Hsirk6V3Tn
Q68mK2Zi7Xb4fkR+MF1+3FKGGBp99V5NoU8tIK7aa1J0fzPWougAzcVGnHq+PZcI
UWxS0syvLer3tEckKnLtWsU/RwArNfoYbKiHnSSqNdLwMqhQ54vNDX2EnTq71Qxl
kb6XJx2tEEsDLmbyodK+6knBAuKihGlwy5N1JNdyfcWglLK0g6bY6PMaN4KwzCwC
+qwd6ZEcDBTz0EVm8AvYrYwLFvgs/Kfn4XoCwVpAkOOITTdMbDdGL94+M0kfRZyt
5YEZ0yujcVF5r1XNfYwC1bcdMirQn8T/VSfMzvdQzicV6tIzfq8mEZ0nA8q0CSJt
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 250118206274989452398460899203532806722
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-20 14:24:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-19 14:54:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bloomington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State Farm Mutual Automobile Insurance Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '37-0533100'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assocmgmt.statefarm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25782824193058655365219997931236945207336551658614975082388705503228899542506778387666038610387488305599086805036876792026004394882492763459088025831630166506963493456621060452446252182130068636407763033561046582372376868414945594110183813395237598510413141811663552827329818387411478939557141000509548680936851045713524339504423968374382923063344782435767020144920186566200974694782183178248483344898230000411393968807961829492805376501672790159895608132266577164310396642040731787397502261957141627416302315576435717202622467509925676025473673357958503626176750901397640142829359559583000651596615057122843584261629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1170 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assocmgmt.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assocmgmt.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-assocmgmt-app-prod-iscw.prod.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-assocmgmt-app-prod-iscw.prod.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assocmgmt.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-assocmgmt-app-prod-iscw.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-assocmgmt-app-prod-isce.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assocmgmt-appint-prod-isce.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assocmgmt-appint-prod-iscw.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-assocmgmt-app-prod-iscw.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-assocmgmt-app-prod-iscc.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-assocmgmt-app-prod-isce.prod.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-assocmgmt-app-prod-iscc.prod.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assocmgmt-appint-prod-iscc.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-assocmgmt-app-prod-isce.prod.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-assocmgmt-app-prod-isce.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-assocmgmt-app-prod-iscc.prod.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-assocmgmt-app-prod-iscc.prod.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-assocmgmt.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-assocmgmt.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-assocmgmt.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-assocmgmt.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hashtag-assocmgmt.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assocmgmt-appext-prod-isce.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assocmgmt-appext-prod-iscc.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assocmgmt-appext-prod-iscw.statefarm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							01e2007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015b8bdbd4b10000040300483046022100e04af4918a9738a7f4518b467a15a15272a20c8231ce620789b78835a0e72cd9022100d20781b22d6982ca8a55f8cbbf37049fc3b76ef394f11486bbbb97e93d3e39750076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000015b8bdbd7090000040300473045022100c379ac6454c7173456e069575928c383f4cadf030b9cd9ec1c392ecdf6abf9d4022077caa969f7a7650b23241850deb48b7df856adc8fb16abb2c9dfc6a0dd6eded1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015b8bdbd83700000403004830460221008ce5855f3ac3189221883d0e2f1c38f7fd659a672aa0bf2b9db0417e1b7d0d81022100d0f02e960649c749acf7f65687e47d6afa38f25a1446a07ae1830606a28f4097007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015b8bdbd9280000040300473045022100a9c7d908eca49b1498d29d2ac8acfcce537da16ba1f64fbc8e823c3011061827022018c520d25408b3faa9a385b221fccf12412f5755ba9dae978ef81ac9e0a15ad3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99cfe80213696908d729959cd79864161af90e4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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