iwhrdir.statefarm.com

- State Farm Mutual Automobile Insurance Company -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 26:db:99:78:60:ef:d4:17:a1:f1:fd:7f:4d:7e:cd:f4 was issued on by Entrust, Inc..

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State Farm Mutual Automobile Insurance Company

Organization: State Farm Mutual Automobile Insurance Company
State / Province: Illinois
Locality: Bloomington
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 26:db:99:78:60:ef:d4:17:a1:f1:fd:7f:4d:7e:cd:f4
Serial Number (int): 51650889597895286629664114004608339444
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: b0:29:1c:02:a2:53:e3:9c:92:9c:3d:ac:96:39:ce:0f:98:65:cb:d2
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 43:37:5d:51:d2:2c:5e:d8:d9:b8:4d:3b:15:6a:d3:23:2f:35:82:d0
Fingerprint (sha256): 3d:53:71:f3:12:76:d6:34:d8:0a:c3:9e:45:7f:13:81:18:a6:24:94:ba:73:ea:f8:08:e0:2a:b1:b3:9f:25:eb

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate iwhrdir.statefarm.com

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iwhrdir.statefarm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

iwhrdir.statefarm.com
becomeanagent.statefarm.com
coleschallenge.statefarm.com
www.es.statefarm.com
mi.statefarm.com
espanol.statefarm.com
www.espanol.statefarm.com
financialcoaching.statefarm.com
www.franchiseprograms.statefarm.com
franchiseprograms.statefarm.com
homeinsurance.statefarm.com
www.homeinsurance.statefarm.com
homeloan.statefarm.com
www.homeloan.statefarm.com
jobs.statefarm.com
lifeinsurance.statefarm.com
www.lifeinsurance.statefarm.com
quotestart.statefarm.com
quotes.statefarm.com
statefarmevents.com
www.statefarmevents.com
teendriving.statefarm.com
vehicleloan.statefarm.com
www.vehicleloan.statefarm.com
sfepi.com
www.sfepi.com
www.statefarm.net
statefarm.net
www.statefarm.org
statefarm.org
www.statefarminsurance.com
statefarminsurance.com
texas.statefarm.com
m.statefarm.com
statefarmbank.com
www.statefarmbank.com
sffinances.com
www.sffinances.com
sponsorships.statefarm
statefarmbrandcenter.com
www.statefarmbrandcenter.com
forlife.statefarm.com
100forgood.statefarm.com
sfgiftcard.com
www.100forgood.statefarm.com
www.sfgiftcard.com
findjobs.statefarm.com
meetus.statefarm.com
developer.statefarm.com
driven.goodneighbors.com
firedogs.goodneighbors.com
goodneighbors.com
my.statefarm.com
savingleilani.goodneighbors.com
www.driven.goodneighbors.com
www.firedogs.goodneighbors.com
www.goodneighbors.com
www.savingleilani.goodneighbors.com

Other certificates including the domain name statefarm.com

(limited to 100 certificates)
claims-prep.test.statefarm.com
apps-prep.test.statefarm.com
iwh.statefarm.com
forlife.statefarm.com
ex90dev1vin2.statefarm.com
ildap.prod.statefarm.com
cebuatadm.statefarm.com
sflws13p1.tcisp.statefarm.com
securedatamgmt.statefarm.com
eBank.statefarm.com
rental.claims.test.statefarm.com
onlineapps-imaging.statefarm.com
checkout.hub.claims.statefarm.com
quotes.statefarm.com
arsondog.statefarm.com
sfrun.statefarm.com
cebuat.statefarm.com
cebuat.statefarm.com
b2b.statefarm.com
aexp.auto.statefarm.com
www.statefarm.com
services.tcidv.statefarm.com
online2.statefarm.com
edocuments.statefarm.com
www.neighborhoodofgood.statefarm.com
portfolio.statefarm.com
es.statefarm.com
hub.claims.sandbox.statefarm.com
utility-prep.test.statefarm.com
coleschallenge.statefarm.com
iwh.statefarm.com
services.statefarm.com
worlds22.statefarm.com
online3.statefarm.com
communication.statefarm.com
www-prep.test.statefarm.com
banksvc.statefarm.com
cebuat.statefarm.com
checkout.hub.claims.statefarm.com
commercialcard.statefarm.com
roadsideassistance.claims.test.statefarm.com
iwh.statefarm.com
bank.statefarm.com
sflsweb.statefarm.com
auth.statefarm.com
common.statefarm.com
opportunity.statefarm.com
api.claims.sandbox.c1.statefarm
cromsvcs-prep.test.statefarm.com
chat.statefarm.com
cebuat.statefarm.com
e.statefarm.com
auth.test.statefarm.com
base.statefarm.com
banksvc.statefarm.com
common.statefarm.com
fire.statefarm.com
vehicleloan.statefarm.com
developer.statefarm.com
iwh.statefarm.com
communication.statefarm.com
quotes.statefarm.com
b2cwa.tcidv.statefarm.com
photovideocapture.claims.test.statefarm.com
SECCTF.STATEFARM.COM
learningcenter.statefarm.com
assocmgmt-prep.test.statefarm.com
phase0-xx.test.statefarm.com
www.developer.statefarm.com
apps-prep.test.statefarm.com
sfvdiFrstBdom.statefarm.com
sfvdifrstbdom.tcisp.statefarm.com
sfmeet.statefarm.com
online4.tcidv.statefarm.com
banksvc-prep.test.statefarm.com
chat.statefarm.com
developer.statefarm.com
media-mfe.claims.sandbox.c1.statefarm
www.tcidv.statefarm.com
uc71bse1.opr.test.statefarm.org
statefarm.com
launch-dev.policy-view.test.statefarm.com
sfcmgtest.test.statefarm.com
health-prep.test.statefarm.com
forlife.statefarm.com
checkout.hub.claims.statefarm.com
expw-e53.statefarm.com
mft.statefarm.com
rating.statefarm.com
meetus.statefarm.com
franchiseprograms.statefarm.com
qaa-prep.test.statefarm.com
cdnlog.statefarm.com
cromsvcs.statefarm.com
rental.claims.sandbox.statefarm.com
iwh-staging.statefarm.com
mail71.tcisp.statefarm.com
www.statefarm.com
auth.test.statefarm.com
assocmgmt.statefarm.com

Certificate

The complete raw certificate details for iwhrdir.statefarm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0u7FxztetNuoCA3jI/wt
/Gyk265QnTD7FK80+xuTZervhBrcjs9BFIdi7CevKSyrhk8EN2Sh2DR4SWElqb1J
Y1n/8hi/y/bzxJV+vHQWZAVkZFwE4yAsYb0YjNmOQyYmZWB5WS9biyYTvSAmz7Ff
h9Eiy751NlvgJ2XOu71dA2kWvnuCA3xFLdpiueuuwixXF0EtaFfhfKuerW0VKZtj
YtVqaEGjK03dPVRsSUJPgTBUxPM/Hy2n3w34pytpChemuxmAM0NQg0GakFhgp8R6
2tnkk+DCfXwVj+BkDc/sPSAmEYjvt8J2b4FTvxgi0TOZT0pemOwnOxuSwOsErxHs
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 51650889597895286629664114004608339444
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-14 18:48:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-24 18:48:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bloomington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State Farm Mutual Automobile Insurance Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iwhrdir.statefarm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26627787186121344703558170624204810646647845599903940278984468200150745912080481276147556383569728207755621367659847705031204447727832910156762704869242774792774667807654325076041751756882063280834270817218088283562400159282272385126958216675370635678012847012070995566141819793554836436020136387659383441579260181090466902756738405597497266561128498596549140007086414358540489237518201167546660766296539688041621385765558051330797479315022239525842867054190825523433977712740476310935432999206521175515128330673598372030695818402960673610599546436380259586715073869342025424074776137084725986276184185657066196692121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0291c02a253e39c929c3dac9639ce0f9865cbd2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1428 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwhrdir.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'becomeanagent.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coleschallenge.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.es.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espanol.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espanol.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialcoaching.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franchiseprograms.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchiseprograms.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeinsurance.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeinsurance.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeloan.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeloan.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeinsurance.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifeinsurance.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotestart.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotes.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarmevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarmevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teendriving.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vehicleloan.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vehicleloan.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfepi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfepi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarminsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarminsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texas.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarmbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarmbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sffinances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sffinances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsorships.statefarm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarmbrandcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarmbrandcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forlife.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '100forgood.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfgiftcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.100forgood.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfgiftcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findjobs.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetus.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'driven.goodneighbors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firedogs.goodneighbors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodneighbors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'savingleilani.goodneighbors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.driven.goodneighbors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firedogs.goodneighbors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodneighbors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savingleilani.goodneighbors.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00469c36a460d513d52d06a1474fa18442635c4a8c72473684296746beebc1e623f7da5264be7e15d5260064bb90584385d8a20027dbde2a8a95aa913b90016444be8588896c9f1656b03c3692d7e09ba4de2d2207ab784c9051e6c102e9b666cda2c6cc196a4d57a930a6b3e9b56390e450cca25b917bb998bffc2ec14b0afeb0c7e87d93bfa55dcebf13ea53d5d99500ade5029da126cc8208884823c35eda2e94998cece3737549e6fa4f497719bdd7ba427dc32477b3de12d3fe8e91faa999ebdb730e6b15d2b183f0a02c0fa6319d102ccb69befe33a7c5de1983d249d91a1650ec671c3abfb684c5fbef9664d98b82faca2008fb594a66c6979deec31eef