iwh.statefarm.com

- State Farm Mutual Automobile Insurance Company -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number ce:c0:3c:bf:05:86:4b:50:00:00:00:00:50:ef:47:66 was issued on by Entrust, Inc..

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State Farm Mutual Automobile Insurance Company

Organization: State Farm Mutual Automobile Insurance Company
State / Province: Illinois
Locality: Bloomington
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ce:c0:3c:bf:05:86:4b:50:00:00:00:00:50:ef:47:66
Serial Number (int): 274819120207396392809736853689480464230
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: dd:b7:ce:6d:4c:03:0b:f1:f2:56:78:17:32:07:82:96:4f:bb:c0:23
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): da:8d:29:77:95:a2:fb:9d:e4:47:79:64:df:9b:7d:51:c2:3e:c7:27
Fingerprint (sha256): 1e:1d:10:25:90:ea:7d:c4:d4:01:1a:bc:3b:76:3a:2f:0d:09:6c:8b:ec:3e:93:29:80:fa:05:7a:52:18:70:3d

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate iwh.statefarm.com

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iwh.statefarm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

iwh.statefarm.com
www.iwh.statefarm.com
coleschallenge.statefarm.com
www.neighborhoodofgood.com
neighborhoodofgood.com
wifi.nextdoorchicago.com
cscomp.statefarm.com
www.sfembracelife.com
cs.nextdoorchicago.com
neighborhoodsessions.statefarm.com
goodneighbormagazine.statefarm.com
wifi.statefarm.com
media.statefarm.com
usersupport.statefarm.ca
styleguide.statefarm.com
csutil.statefarm.com
usersupport.statefarm.com
my.statefarm.com
m.statefarm.com
m.statefarm.ca
doverbay.statefarm.com
neighborhoodofgood.statefarm.com
www.neighborhoodsessions.statefarm.com
www.neighborhoodofgood.statefarm.com
quotestart.statefarm.com
quotes.statefarm.com
events.statefarm.com
teendriving.statefarm.com
lifeinsurance.statefarm.com
www.vehicleloan.statefarm.com
vehicleloan.statefarm.com
www.sfepi.com
www.homeloan.statefarm.com
homeloan.statefarm.com
homeinsurance.statefarm.com
www.homeinsurance.statefarm.com
sfepi.com
www.lifeinsurance.statefarm.com
statefarmevents.com
www.statefarmevents.com
becomeanagent.statefarm.com
jobs.statefarm.com
financialcoaching.statefarm.com
gtld-nic.statefarm.com
espanol.statefarm.com
developer.statefarm.com
statefarminsurance.com
statefarmbank.com
sffinances.com
statefarm.net
texas.statefarm.com
mi.statefarm.com
statefarm.org
www.es.statefarm.com
www.espanol.statefarm.com
www.statefarm.net
www.sffinances.com
www.statefarm.org
www.statefarminsurance.com
www.statefarmbank.com
www.franchiseprograms.statefarm.com
franchiseprograms.statefarm.com
nic.statefarm
www.gowithdoug.com
gowithdoug.com

Other certificates including the domain name statefarm.com

(limited to 100 certificates)
claims-prep.test.statefarm.com
apps-prep.test.statefarm.com
iwh.statefarm.com
forlife.statefarm.com
ex90dev1vin2.statefarm.com
ildap.prod.statefarm.com
cebuatadm.statefarm.com
sflws13p1.tcisp.statefarm.com
securedatamgmt.statefarm.com
eBank.statefarm.com
rental.claims.test.statefarm.com
onlineapps-imaging.statefarm.com
checkout.hub.claims.statefarm.com
quotes.statefarm.com
arsondog.statefarm.com
sfrun.statefarm.com
cebuat.statefarm.com
cebuat.statefarm.com
b2b.statefarm.com
aexp.auto.statefarm.com
www.statefarm.com
services.tcidv.statefarm.com
online2.statefarm.com
edocuments.statefarm.com
www.neighborhoodofgood.statefarm.com
portfolio.statefarm.com
es.statefarm.com
hub.claims.sandbox.statefarm.com
utility-prep.test.statefarm.com
coleschallenge.statefarm.com
iwh.statefarm.com
services.statefarm.com
worlds22.statefarm.com
online3.statefarm.com
communication.statefarm.com
www-prep.test.statefarm.com
banksvc.statefarm.com
cebuat.statefarm.com
checkout.hub.claims.statefarm.com
commercialcard.statefarm.com
roadsideassistance.claims.test.statefarm.com
iwh.statefarm.com
bank.statefarm.com
sflsweb.statefarm.com
auth.statefarm.com
common.statefarm.com
opportunity.statefarm.com
api.claims.sandbox.c1.statefarm
cromsvcs-prep.test.statefarm.com
chat.statefarm.com
cebuat.statefarm.com
e.statefarm.com
auth.test.statefarm.com
base.statefarm.com
banksvc.statefarm.com
common.statefarm.com
fire.statefarm.com
vehicleloan.statefarm.com
developer.statefarm.com
iwh.statefarm.com
communication.statefarm.com
quotes.statefarm.com
b2cwa.tcidv.statefarm.com
photovideocapture.claims.test.statefarm.com
SECCTF.STATEFARM.COM
learningcenter.statefarm.com
assocmgmt-prep.test.statefarm.com
phase0-xx.test.statefarm.com
www.developer.statefarm.com
apps-prep.test.statefarm.com
sfvdiFrstBdom.statefarm.com
sfvdifrstbdom.tcisp.statefarm.com
sfmeet.statefarm.com
online4.tcidv.statefarm.com
banksvc-prep.test.statefarm.com
chat.statefarm.com
developer.statefarm.com
media-mfe.claims.sandbox.c1.statefarm
www.tcidv.statefarm.com
uc71bse1.opr.test.statefarm.org
statefarm.com
launch-dev.policy-view.test.statefarm.com
sfcmgtest.test.statefarm.com
health-prep.test.statefarm.com
forlife.statefarm.com
checkout.hub.claims.statefarm.com
expw-e53.statefarm.com
mft.statefarm.com
rating.statefarm.com
meetus.statefarm.com
franchiseprograms.statefarm.com
qaa-prep.test.statefarm.com
cdnlog.statefarm.com
cromsvcs.statefarm.com
rental.claims.sandbox.statefarm.com
iwh-staging.statefarm.com
mail71.tcisp.statefarm.com
www.statefarm.com
auth.test.statefarm.com
assocmgmt.statefarm.com

Certificate

The complete raw certificate details for iwh.statefarm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuohYKPNzBaRMC6L4F+zy
jGa9mm8etbXWlGeRdO67YCnWREtHMEn3GG9CJEXwzILBYwraGnCbyI2wPZiWhs5D
A7Nd++nomV1rp9M5VYajVBq854oRoYaP7lISg8Zo8y0IvKcimK5FCSgjCBw6vu0F
sx/fMzmCtivFA2x1vkXofpqrgl/475PIS/CwUrpa+dr8JsxPY+cYtVVjx37rw6Ki
30cJswkBTa6bSsOMxRyFVyL9jTUeBTgfw6S03X/4YfGIHSQ1pLm9aRcdtvOyu/eJ
6nam+4D5CnQ9fAJ0adjQc2aqsmrCXKQUtuVDwKqFnNLipTzfEy0h8P2bBD7+zaed
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274819120207396392809736853689480464230
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-22 13:58:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-05 14:28:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bloomington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State Farm Mutual Automobile Insurance Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iwh.statefarm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23547558640773896277270865983230065208373459324756835672122805951951313490959169321590028418502085786847829698981532114232454383744006899983592462203484622931238885672471283876089511170599313053018222662729757855369346246618691997957433332242060632197324107057451925295638158386958238802495135597817318090614735189441723087870923217125200818189701468290374681650330425843762331457367762555105159239869268521883312439486613305905214110948871348651540540147744282026694159662552572341240926124251827747681869313940820077181773978818309631464098441145968116554905286511788408720691421202835982121169227760147757378543087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1588 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwh.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwh.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coleschallenge.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neighborhoodofgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neighborhoodofgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifi.nextdoorchicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cscomp.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfembracelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.nextdoorchicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neighborhoodsessions.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodneighbormagazine.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifi.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usersupport.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'styleguide.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csutil.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usersupport.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doverbay.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neighborhoodofgood.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neighborhoodsessions.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neighborhoodofgood.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotestart.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotes.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teendriving.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeinsurance.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vehicleloan.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vehicleloan.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfepi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeloan.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeloan.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeinsurance.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeinsurance.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfepi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifeinsurance.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarmevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarmevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'becomeanagent.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialcoaching.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtld-nic.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espanol.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarminsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarmbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sffinances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texas.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.es.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espanol.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sffinances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarminsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarmbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franchiseprograms.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchiseprograms.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nic.statefarm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gowithdoug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gowithdoug.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ddb7ce6d4c030bf1f2567817320782964fbbc023
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004fc9a83a09b14e197f216ba68dfcc1ac67d49b10f659007a37338dc0b26aed698a27c4febc5f6de60e46c25c8e11b3efc01fb9c601a6488145a12fa3006a65c6bf70cde0b15a5cc51afe341a6dc3451a88ed2e4a712e8e0cbedb364ad534580a55c0518c2b82f8eb72c7be03f59bd26604015ffcd182ed8936b7e26740f2d516b45e8187abdf5ab5918096f7631bfe000160af849dea3310c9f0c45a83ed7d05d97db53c5e5ae61187d744286dd26ef95a7d2dfbb8b191431eda7d9b90a54a2402cf351695eaf2cd0a0d76f64154361fdd7b48c1dd2df3054324e3bbd91b494237080ff4ebf78530e95db9dc408deff48c2898273dc808cdf16605f9cec2d394