statefarm.com

- State Farm Mutual Automobile Insurance Company -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 26:eb:fd:c9:47:52:52:61:f2:15:4d:b1:cd:36:60:fd was issued on by Entrust, Inc..

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

State Farm Mutual Automobile Insurance Company

Organization: State Farm Mutual Automobile Insurance Company
State / Province: Illinois
Locality: Bloomington
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 26:eb:fd:c9:47:52:52:61:f2:15:4d:b1:cd:36:60:fd
Serial Number (int): 51736000998145833558152053975185514749
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: bf:a2:67:56:7b:bc:2a:1e:47:33:4e:5c:a9:46:04:a0:bc:bb:f9:a5
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 64:3a:d4:3d:8e:83:d3:70:c3:58:e2:bd:3d:e2:e9:d6:c4:4e:cc:b3
Fingerprint (sha256): 21:df:68:d8:63:d2:d9:34:91:a8:9c:52:70:dd:7d:9f:2d:2b:1e:a1:13:0d:05:09:7b:81:28:8b:42:b8:96:17

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate statefarm.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for statefarm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

statefarm.com
www.statefarm.com
ac1.st8fm.com
ac2.st8fm.com
alliance.statefarm.com
allianceapi.statefarm.com
aotp.nsg.statefarm.com
aotp.statefarm.com
apps.statefarm.com
assocmgmt.statefarm.com
auto.statefarm.com
bank.statefarm.com
b2b-prodb.statefarm.com
b2b.statefarm.com
base.statefarm.com
cc.st8farm.co
claims.statefarm.com
claimsassociate.statefarm.com
claimsb2b.statefarm.com
claimsvc.statefarm.com
codingcompetition.statefarm.com
collaboration.statefarm.com
collabsvcs.statefarm.com
common.statefarm.com
communication.statefarm.com
cromsvcs.statefarm.com
customer.statefarm.com
customersvc.statefarm.com
das.statefarm.com
digital.statefarm.com
edocuments.statefarm.com
es-prodb.statefarm.com
es.statefarm.com
financials.statefarm.com
fire.statefarm.com
health.statefarm.com
life.statefarm.com
motlisvcs.statefarm.com
oams.statefarm.com
online.statefarm.com
online2.statefarm.com
opportunity.statefarm.com
otds.statefarm.com
otdsfw.statefarm.com
portfolio.statefarm.com
proofing.statefarm.com
rating.statefarm.com
securedatasvc.statefarm.com
sf1-api.statefarm.com
sfgitlab.opr.statefarm.org
sflab.statefarm.com
st8farm.co
static1.st8fm.com
static2.st8fm.com
tcap.statefarm.com
tpapp.statefarm.com
utility.statefarm.com
vendrptsvc.statefarm.com
www-prodb.statefarm.com
daslmobileclaims.statefarm.com
ims.statefarm.com
agencymobility.statefarm.com
sfrumtl.statefarm.com
iwh.statefarm.com
arsondog.statefarm
corporatebusinessdev.statefarm.com
cscomp.statefarm.com
doverbay.statefarm.com
esg.statefarm.com
goodneighborcenter.statefarm.com
innovation.statefarm.com
media.statefarm.com
nic.statefarm
patents.statefarm.com
rdc.statefarm
techastra.statefarm
usersupport.statefarm.com
ventures.statefarm.com
wifi.statefarm.com
www.arsondog.statefarm
www.esg.statefarm.com
www.nic.statefarm
www.rdc.statefarm
www.techastra.statefarm

Other certificates including the domain name statefarm.com

(limited to 100 certificates)
claims-prep.test.statefarm.com
apps-prep.test.statefarm.com
iwh.statefarm.com
forlife.statefarm.com
ex90dev1vin2.statefarm.com
ildap.prod.statefarm.com
cebuatadm.statefarm.com
sflws13p1.tcisp.statefarm.com
securedatamgmt.statefarm.com
eBank.statefarm.com
rental.claims.test.statefarm.com
onlineapps-imaging.statefarm.com
checkout.hub.claims.statefarm.com
quotes.statefarm.com
arsondog.statefarm.com
sfrun.statefarm.com
cebuat.statefarm.com
cebuat.statefarm.com
b2b.statefarm.com
aexp.auto.statefarm.com
www.statefarm.com
services.tcidv.statefarm.com
online2.statefarm.com
edocuments.statefarm.com
www.neighborhoodofgood.statefarm.com
portfolio.statefarm.com
es.statefarm.com
hub.claims.sandbox.statefarm.com
utility-prep.test.statefarm.com
coleschallenge.statefarm.com
iwh.statefarm.com
services.statefarm.com
worlds22.statefarm.com
online3.statefarm.com
communication.statefarm.com
www-prep.test.statefarm.com
banksvc.statefarm.com
cebuat.statefarm.com
checkout.hub.claims.statefarm.com
commercialcard.statefarm.com
roadsideassistance.claims.test.statefarm.com
iwh.statefarm.com
bank.statefarm.com
sflsweb.statefarm.com
auth.statefarm.com
common.statefarm.com
opportunity.statefarm.com
api.claims.sandbox.c1.statefarm
cromsvcs-prep.test.statefarm.com
chat.statefarm.com
cebuat.statefarm.com
e.statefarm.com
auth.test.statefarm.com
base.statefarm.com
banksvc.statefarm.com
common.statefarm.com
fire.statefarm.com
vehicleloan.statefarm.com
developer.statefarm.com
iwh.statefarm.com
communication.statefarm.com
quotes.statefarm.com
b2cwa.tcidv.statefarm.com
photovideocapture.claims.test.statefarm.com
SECCTF.STATEFARM.COM
learningcenter.statefarm.com
assocmgmt-prep.test.statefarm.com
phase0-xx.test.statefarm.com
www.developer.statefarm.com
apps-prep.test.statefarm.com
sfvdiFrstBdom.statefarm.com
sfvdifrstbdom.tcisp.statefarm.com
sfmeet.statefarm.com
online4.tcidv.statefarm.com
banksvc-prep.test.statefarm.com
chat.statefarm.com
developer.statefarm.com
media-mfe.claims.sandbox.c1.statefarm
www.tcidv.statefarm.com
uc71bse1.opr.test.statefarm.org
statefarm.com
launch-dev.policy-view.test.statefarm.com
sfcmgtest.test.statefarm.com
health-prep.test.statefarm.com
forlife.statefarm.com
checkout.hub.claims.statefarm.com
expw-e53.statefarm.com
mft.statefarm.com
rating.statefarm.com
meetus.statefarm.com
franchiseprograms.statefarm.com
qaa-prep.test.statefarm.com
cdnlog.statefarm.com
cromsvcs.statefarm.com
rental.claims.sandbox.statefarm.com
iwh-staging.statefarm.com
mail71.tcisp.statefarm.com
www.statefarm.com
auth.test.statefarm.com
assocmgmt.statefarm.com

Certificate

The complete raw certificate details for statefarm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBgfxrs522KCGzP73Jvo
FEHhCpoEZv/oJVEv+Pt8vkiI7TMw0DBOqrndXtcP13ZuMR2DtHBUDKPJiLUx7Z1n
k4zrD9InHamq4OOVVO3eKg1VUKyIFGohLkJ2QaR7U4EriChAQwgbSOGve42JVyEx
jlYEXcfM7LMIKHnEwF4hxwBYOrl98RG3GbN0N05jQvAx0rgRLNT314frxZuVGk2k
8h77Xnn8vrnEToKtNw54TLCh+EGCAAqW/+P0nu96qHoF2HQXdQIxunlD9Co5e1ao
Eg4VhuQj5vJsZIsYFSMDn1XBcFe62sPTBYcXq0hg7bs/D74rsyQcsCOV5Fhwt2Vl
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 51736000998145833558152053975185514749
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 19:51:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-23 19:51:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bloomington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State Farm Mutual Automobile Insurance Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'statefarm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24249650603459563356773357170996191006556936524872058766779771539178418461002862112262370685680506488994450835520558080705448020880935373816517663853773153284015354122697040030629681552775675581830465576596563501534808850292242854303224161519038721643518997875595763717489894090280924437015201016365922664119454597072256367990983917830234569717701559297243520191413647655193565622584393557071307099167838083808374718929921585774712581349362553965462828282937853633044151904289053397869455246836032833512638755786835611304565496651400979127620296844210948951412344107843613061791332654970192115193654536855786942195031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bfa267567bbc2a1e47334e5ca94604a0bcbbf9a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1917 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ac1.st8fm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ac2.st8fm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliance.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allianceapi.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aotp.nsg.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aotp.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assocmgmt.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bank.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b-prodb.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'base.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc.st8farm.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimsassociate.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimsb2b.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimsvc.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codingcompetition.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaboration.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collabsvcs.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'common.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communication.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cromsvcs.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customersvc.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'das.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edocuments.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es-prodb.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financials.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fire.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motlisvcs.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oams.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online2.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opportunity.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otds.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otdsfw.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proofing.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rating.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedatasvc.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf1-api.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfgitlab.opr.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sflab.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st8farm.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.st8fm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.st8fm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcap.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpapp.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utility.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendrptsvc.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-prodb.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daslmobileclaims.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ims.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agencymobility.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfrumtl.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwh.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsondog.statefarm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporatebusinessdev.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cscomp.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doverbay.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esg.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodneighborcenter.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovation.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nic.statefarm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patents.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdc.statefarm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techastra.statefarm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usersupport.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventures.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifi.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arsondog.statefarm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esg.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nic.statefarm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rdc.statefarm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techastra.statefarm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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