iwhrdir.statefarm.com

- State Farm Mutual Automobile Insurance Company -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 1e:12:71:cb:1f:73:5e:bf:bc:e2:06:cc:b9:6a:0b:d6 was issued on by Entrust, Inc..

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State Farm Mutual Automobile Insurance Company

Organization: State Farm Mutual Automobile Insurance Company
State / Province: Illinois
Locality: Bloomington
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:12:71:cb:1f:73:5e:bf:bc:e2:06:cc:b9:6a:0b:d6
Serial Number (int): 39972609222336815331951534082108296150
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: b0:29:1c:02:a2:53:e3:9c:92:9c:3d:ac:96:39:ce:0f:98:65:cb:d2
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 35:ad:f0:df:32:ba:fd:67:d7:0d:43:49:ac:c5:2d:05:72:48:98:ea
Fingerprint (sha256): 17:c5:24:5f:c5:61:39:e2:6e:96:00:2b:32:97:8c:5a:8a:80:11:21:a4:8d:e6:0e:0e:4a:8b:31:0f:21:ae:66

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate iwhrdir.statefarm.com

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iwhrdir.statefarm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

iwhrdir.statefarm.com
becomeanagent.statefarm.com
coleschallenge.statefarm.com
www.es.statefarm.com
mi.statefarm.com
espanol.statefarm.com
www.espanol.statefarm.com
financialcoaching.statefarm.com
www.franchiseprograms.statefarm.com
franchiseprograms.statefarm.com
homeinsurance.statefarm.com
www.homeinsurance.statefarm.com
homeloan.statefarm.com
www.homeloan.statefarm.com
lifeinsurance.statefarm.com
www.lifeinsurance.statefarm.com
quotestart.statefarm.com
quotes.statefarm.com
statefarmevents.com
www.statefarmevents.com
teendriving.statefarm.com
vehicleloan.statefarm.com
www.vehicleloan.statefarm.com
sfepi.com
www.sfepi.com
www.statefarm.net
statefarm.net
www.statefarm.org
www.statefarminsurance.com
statefarminsurance.com
texas.statefarm.com
m.statefarm.com
statefarmbank.com
www.statefarmbank.com
sffinances.com
www.sffinances.com
sponsorships.statefarm
statefarmbrandcenter.com
www.statefarmbrandcenter.com
forlife.statefarm.com
100forgood.statefarm.com
sfgiftcard.com
www.100forgood.statefarm.com
www.sfgiftcard.com
findjobs.statefarm.com
meetus.statefarm.com
developer.statefarm.com
driven.goodneighbors.com
firedogs.goodneighbors.com
goodneighbors.com
my.statefarm.com
savingleilani.goodneighbors.com
www.driven.goodneighbors.com
www.firedogs.goodneighbors.com
www.goodneighbors.com
www.savingleilani.goodneighbors.com
neighborhoodofgood.com
www.neighborhoodofgood.com

Other certificates including the domain name statefarm.com

(limited to 100 certificates)
claims-prep.test.statefarm.com
apps-prep.test.statefarm.com
iwh.statefarm.com
forlife.statefarm.com
ex90dev1vin2.statefarm.com
ildap.prod.statefarm.com
cebuatadm.statefarm.com
sflws13p1.tcisp.statefarm.com
securedatamgmt.statefarm.com
eBank.statefarm.com
rental.claims.test.statefarm.com
onlineapps-imaging.statefarm.com
checkout.hub.claims.statefarm.com
quotes.statefarm.com
arsondog.statefarm.com
sfrun.statefarm.com
cebuat.statefarm.com
cebuat.statefarm.com
b2b.statefarm.com
aexp.auto.statefarm.com
www.statefarm.com
services.tcidv.statefarm.com
online2.statefarm.com
edocuments.statefarm.com
www.neighborhoodofgood.statefarm.com
portfolio.statefarm.com
es.statefarm.com
hub.claims.sandbox.statefarm.com
utility-prep.test.statefarm.com
coleschallenge.statefarm.com
iwh.statefarm.com
services.statefarm.com
worlds22.statefarm.com
online3.statefarm.com
communication.statefarm.com
www-prep.test.statefarm.com
banksvc.statefarm.com
cebuat.statefarm.com
checkout.hub.claims.statefarm.com
commercialcard.statefarm.com
roadsideassistance.claims.test.statefarm.com
iwh.statefarm.com
bank.statefarm.com
sflsweb.statefarm.com
auth.statefarm.com
common.statefarm.com
opportunity.statefarm.com
api.claims.sandbox.c1.statefarm
cromsvcs-prep.test.statefarm.com
chat.statefarm.com
cebuat.statefarm.com
e.statefarm.com
auth.test.statefarm.com
base.statefarm.com
banksvc.statefarm.com
common.statefarm.com
fire.statefarm.com
vehicleloan.statefarm.com
developer.statefarm.com
iwh.statefarm.com
communication.statefarm.com
quotes.statefarm.com
b2cwa.tcidv.statefarm.com
photovideocapture.claims.test.statefarm.com
SECCTF.STATEFARM.COM
learningcenter.statefarm.com
assocmgmt-prep.test.statefarm.com
phase0-xx.test.statefarm.com
www.developer.statefarm.com
apps-prep.test.statefarm.com
sfvdiFrstBdom.statefarm.com
sfvdifrstbdom.tcisp.statefarm.com
sfmeet.statefarm.com
online4.tcidv.statefarm.com
banksvc-prep.test.statefarm.com
chat.statefarm.com
developer.statefarm.com
media-mfe.claims.sandbox.c1.statefarm
www.tcidv.statefarm.com
uc71bse1.opr.test.statefarm.org
statefarm.com
launch-dev.policy-view.test.statefarm.com
sfcmgtest.test.statefarm.com
health-prep.test.statefarm.com
forlife.statefarm.com
checkout.hub.claims.statefarm.com
expw-e53.statefarm.com
mft.statefarm.com
rating.statefarm.com
meetus.statefarm.com
franchiseprograms.statefarm.com
qaa-prep.test.statefarm.com
cdnlog.statefarm.com
cromsvcs.statefarm.com
rental.claims.sandbox.statefarm.com
iwh-staging.statefarm.com
mail71.tcisp.statefarm.com
www.statefarm.com
auth.test.statefarm.com
assocmgmt.statefarm.com

Certificate

The complete raw certificate details for iwhrdir.statefarm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0u7FxztetNuoCA3jI/wt
/Gyk265QnTD7FK80+xuTZervhBrcjs9BFIdi7CevKSyrhk8EN2Sh2DR4SWElqb1J
Y1n/8hi/y/bzxJV+vHQWZAVkZFwE4yAsYb0YjNmOQyYmZWB5WS9biyYTvSAmz7Ff
h9Eiy751NlvgJ2XOu71dA2kWvnuCA3xFLdpiueuuwixXF0EtaFfhfKuerW0VKZtj
YtVqaEGjK03dPVRsSUJPgTBUxPM/Hy2n3w34pytpChemuxmAM0NQg0GakFhgp8R6
2tnkk+DCfXwVj+BkDc/sPSAmEYjvt8J2b4FTvxgi0TOZT0pemOwnOxuSwOsErxHs
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 39972609222336815331951534082108296150
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-08 14:51:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-24 14:51:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bloomington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State Farm Mutual Automobile Insurance Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iwhrdir.statefarm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26627787186121344703558170624204810646647845599903940278984468200150745912080481276147556383569728207755621367659847705031204447727832910156762704869242774792774667807654325076041751756882063280834270817218088283562400159282272385126958216675370635678012847012070995566141819793554836436020136387659383441579260181090466902756738405597497266561128498596549140007086414358540489237518201167546660766296539688041621385765558051330797479315022239525842867054190825523433977712740476310935432999206521175515128330673598372030695818402960673610599546436380259586715073869342025424074776137084725986276184185657066196692121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0291c02a253e39c929c3dac9639ce0f9865cbd2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1445 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwhrdir.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'becomeanagent.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coleschallenge.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.es.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espanol.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espanol.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialcoaching.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franchiseprograms.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchiseprograms.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeinsurance.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeinsurance.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeloan.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeloan.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeinsurance.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifeinsurance.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotestart.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotes.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarmevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarmevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teendriving.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vehicleloan.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vehicleloan.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfepi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfepi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarminsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarminsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texas.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarmbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarmbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sffinances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sffinances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsorships.statefarm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarmbrandcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarmbrandcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forlife.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '100forgood.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfgiftcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.100forgood.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfgiftcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findjobs.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetus.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'driven.goodneighbors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firedogs.goodneighbors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodneighbors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savingleilani.goodneighbors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.driven.goodneighbors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firedogs.goodneighbors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodneighbors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savingleilani.goodneighbors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neighborhoodofgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neighborhoodofgood.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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