GuestInternet2.opr.statefarm.org

- State Farm Mutual Automobile Insurance Company -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 64:97:aa:f8:ff:78:03:73:39:f5:19:06:9e:ba:ea:cc was issued on by Entrust, Inc..

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

State Farm Mutual Automobile Insurance Company

Organization: State Farm Mutual Automobile Insurance Company
State / Province: Illinois
Locality: Bloomington
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 64:97:aa:f8:ff:78:03:73:39:f5:19:06:9e:ba:ea:cc
Serial Number (int): 133710304141411035479264642062362536652
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: e0:d7:c4:03:41:f0:6e:62:a9:63:63:af:49:82:05:71:6a:b8:6d:81
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): fa:22:dd:0d:99:68:0e:0d:07:4c:3f:c3:02:ca:8e:cc:05:57:6a:db
Fingerprint (sha256): 14:64:bb:3a:62:d5:03:69:58:c0:e1:01:70:4e:0b:71:b8:94:80:51:32:74:38:2d:80:a1:48:50:cb:70:0e:8f

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate GuestInternet2.opr.statefarm.org

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for GuestInternet2.opr.statefarm.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

GuestInternet2.opr.statefarm.org
ap31ise-apsn01.opr.statefarm.org
ap31ise-apsn02.opr.statefarm.org
ap31ise-apsn03.opr.statefarm.org
ap31ise-apsn04.opr.statefarm.org
ap31ise-apsn05.opr.statefarm.org
ap31ise-apsn06.opr.statefarm.org
ap31ise-apsn07.opr.statefarm.org
ap31ise-apsn08.opr.statefarm.org
ap31ise-bpsn01.opr.statefarm.org
ap31ise-bpsn02.opr.statefarm.org
ap31ise-bpsn03.opr.statefarm.org
ap31ise-bpsn04.opr.statefarm.org
ap31ise-bpsn05.opr.statefarm.org
ap31ise-bpsn06.opr.statefarm.org
ap31ise-bpsn07.opr.statefarm.org
ap31ise-bpsn08.opr.statefarm.org

Other certificates including the domain name statefarm.org

(limited to 100 certificates)
ex90dev1vin2.statefarm.com
SFHumanaTest.statefarm.org
servicejourney.env2.pcmngd01.test.ic1.statefarm
sfmeet.statefarm.com
uc71bse1.opr.test.statefarm.org
expw-e53.statefarm.com
mft.statefarm.com
wtsfk9c5.opr.system.test.statefarm.org
test.statefarm.com
vcse-rdc.statefarm.com
sfpcinfra-sbx-mc.pcmngd02.test.ic1.statefarm
GuestInternet2.opr.statefarm.org
testcenterdev.statefarm.com
iwhrdir.statefarm.com
fcm.cfpa.test.ic1.statefarm
access-o.statefarm.com
WPSFCP7Y.opr.statefarm.org
access-o.statefarm.com
iwhrdir.statefarm.com
iwh.statefarm.com
sfmeet.statefarm.com
wtsfk88b.unitopr.unitint.test.statefarm.org
credentialretrieval.appquote.test.ic1.statefarm
sfap71pkiaasedmpoc.opr.test.statefarm.org
test.statefarm.com
sf-accenture-sops.opr.statefarm.org
statefarm.com
smft.tcidv.statefarm.com
smft.tcidv.statefarm.com
*.paasutil.test.ic1.statefarm
ap71ucegw2.opr.test.statefarm.org
sfgitlab.opr.test.statefarm.org
vcse-rdc.statefarm.com
sf.venfi.statefarm.org
WTSD6BYH.UNITOPR.UNITINT.TEST.STATEFARM.ORG
sf-velocloud-public.statefarm.com
requestdelete.appquote.test.ic1.statefarm
WTSFK88B.unitopr.unitint.test.statefarm.org
servicejourney.env6.pcmngd01.test.ic1.statefarm
quoteretrievalsvc.appquote.ic1.statefarm
guestcert-w.wg-iscw.statefarm.org
Guestinternet2.opr.statefarm.org
servicejourney.env8.pcmngd01.test.ic1.statefarm
iwh.statefarm.com
guestinternet-sim.opr.statefarm.org
iwh.statefarm.com
*.paasutil.test.ic1.statefarm
iwhrdir.statefarm.com
iwhrdir.statefarm.com
sf-accenture-sops.opr.statefarm.org
access.tcisp.statefarm.com
access-r-ng.statefarm.com
WTSFK88F.unitopr.unitint.test.statefarm.org
SFHumana.statefarm.org
WPSFCP7W.opr.statefarm.org
keith22.test.statefarm.org
guestinternet-dev.opr.statefarm.org
WTSFK876.unitopr.unitint.test.statefarm.org
uc71bse2.opr.test.statefarm.org
portal.opr.statefarm.org
expw-e56.statefarm.com
sfap95cr001.opr.test.statefarm.org
xnexsvr1t0.opr.statefarm.org
maven-nexus.opr.statefarm.org
sfmediacenter.createsvc.ic1.statefarm
sf-attsdwan2.opr.statefarm.org
xnexsvr1p0.opr.statefarm.org
access-r.statefarm.com
xdocker1pq.opr.statefarm.org
appretrieval.sys.appquote.test.ic1.statefarm
xnexsvr1t0.opr.test.statefarm.org
guestcert-corp.wg-corp.statefarm.org
maven.nexus.opr.statefarm.org
WPSFCP7R.opr.statefarm.org
wtsfk879.unitopr.unitint.test.statefarm.org
nexus.opr.test.statefarm.org
devchat.opr.test.statefarm.org
keith.test.statefarm.org
sfap71pkiaasedmpoc.opr.test.statefarm.org
ui.bundle.test.c1.statefarm
WTSFK879.unitopr.unitint.test.statefarm.org
*.paasutil.test.ic1.statefarm
iwh.statefarm.com
guestcert-corp.wg-corp.statefarm.org
statefarm.com
test.statefarm.com
*.statefarm.org
azure.sync.statefarm.org
iwh.statefarm.com
iwh.statefarm.com
vault.opr.statefarm.org
fai.cfpa.test.ic1.statefarm
iwh.statefarm.com
WPSFCP7Z.opr.statefarm.org
sfap95cr101.opr.test.statefarm.org
ui.bundle.c1.statefarm
statefarm.com
lt00es00.opr.statefarm.org
keith.test5.statefarm.org
statefarm.com

Certificate

The complete raw certificate details for GuestInternet2.opr.statefarm.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtk9NLZg3Nh3nzkNoKeea
LV3YzFAi/7FCJ/VJjutr7avrShnTbjf1bws4SJTMRbkLhvnQveZQFgBPWF/s4BW7
7bEt0cdvlwhI2PEKnzdRCcIH3dXjmymSjLfe/pluJ4cHUo7FaI82RoIdBMJLpcOq
SVQj8QAOG+hLLAnXZx7zhHoTHU/FowQ++YdoCc5qYazYRs8eKrczXPPVsHSqptAW
2QsBWaZ30F0yqK6ugq0iy7jCXkPjmJZcEb20n7cOsGh3LHT4JJWJoE1m0LtfGnLA
SKdfAy75RSxbw41CKbEVhoOKStRHa0W/Sr1oR9vpzl2AJaBwLlEctIxX2dRJZ8cT
OSvJb0e+4wtERehsFdK38rFrsVlK/oC+YLBQxMTVPa6nby0QaU0Yh+2IgKzgAK7F
oWSUJByTJh2mlGGjyJrLRkUgKM499BGyT4eTYso82yASTIV0D2weX//s4Kr6706h
xrMDpt/G+yDp3saouF3TjDwgcgedmyPbjz9l2B38SXUvxyEZig/M2ojYZQ1GbdAV
NJtJqH59YnikRck7c9HKck61YG4Ax2NtArTgfQKT+4+j0OEgOvLT0ULGx27JKIG6
DirqkC8CIuJ9NiuGiy+4VkljGYt4R3NMbKFwUu16jzCrUOTVHV2y//ky3nrbpkCB
KpIoiCm2ltro/cGhcqOr16ECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 133710304141411035479264642062362536652
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 18:41:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-06 18:41:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bloomington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State Farm Mutual Automobile Insurance Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GuestInternet2.opr.statefarm.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 743758977411299173577951910283857076072952131285453847601778808182876527505365806748868545802881791165460014369429224284101414921521373754479626632792812162927456751313512833203855269126063718819993304870870502366702735500558279786480067154790800323604132837687454826456895165324066099811629719648541520256014133280415821949587454263544669934346615861694115911550283786423401001025431566110780292849811079141019042691651556036303166675648603621978682197188805980579334208768637711608804765878838713445535920687259300128703268535566683006266039377621940452802635706791581668865350745756310871263188935311233763479867699411140805105068151239386979728528022836150353241222715164179202501286340248785681047192590344817905194883823427350128946560236789787814383369038216176187635014032998450228467621053335288001263077998781161323774567737280672747338197823776211510266441784463747509750917701694368586043941502021904817895312134920981273115784288814109416105214585767216421710553328576933244655243933378441167435644919504644117317280988283903789929963629948213525581633753834965713382611127683886694699177045016168482350378020812735727810098366667309813601204616092691868825257459843956580679447442901620063546224233548336042395579439009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0d7c40341f06e62a96363af498205716ab86d81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (582 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'GuestInternet2.opr.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap31ise-apsn01.opr.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap31ise-apsn02.opr.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap31ise-apsn03.opr.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap31ise-apsn04.opr.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap31ise-apsn05.opr.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap31ise-apsn06.opr.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap31ise-apsn07.opr.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap31ise-apsn08.opr.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap31ise-bpsn01.opr.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap31ise-bpsn02.opr.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap31ise-bpsn03.opr.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap31ise-bpsn04.opr.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap31ise-bpsn05.opr.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap31ise-bpsn06.opr.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap31ise-bpsn07.opr.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ap31ise-bpsn08.opr.statefarm.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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