iwh.statefarm.com

- State Farm Mutual Automobile Insurance Company -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number ec:53:af:0d:25:ae:6d:a3:00:00:00:00:50:e9:52:de was issued on by Entrust, Inc..

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State Farm Mutual Automobile Insurance Company

Organization: State Farm Mutual Automobile Insurance Company
State / Province: Illinois
Locality: Bloomington
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ec:53:af:0d:25:ae:6d:a3:00:00:00:00:50:e9:52:de
Serial Number (int): 314132318107807104626995706733091443422
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: dd:b7:ce:6d:4c:03:0b:f1:f2:56:78:17:32:07:82:96:4f:bb:c0:23
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): dd:a1:60:20:95:cc:72:71:1c:2b:8a:b9:97:f8:8b:23:e3:06:2b:ce
Fingerprint (sha256): 6e:22:6b:b3:c8:17:53:01:6f:08:4b:6b:57:42:1d:84:2f:db:cf:6b:0a:6d:eb:91:ec:af:27:bd:a3:ac:18:91

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate iwh.statefarm.com

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for iwh.statefarm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

iwh.statefarm.com
www.iwh.statefarm.com
www.statefarmevents.com
statefarmevents.com
www.lifeinsurance.statefarm.com
sfepi.com
www.homeinsurance.statefarm.com
homeinsurance.statefarm.com
homeloan.statefarm.com
www.homeloan.statefarm.com
www.sfepi.com
vehicleloan.statefarm.com
www.vehicleloan.statefarm.com
lifeinsurance.statefarm.com
teendriving.statefarm.com
events.statefarm.com
quotes.statefarm.com
quotestart.statefarm.com
www.neighborhoodofgood.statefarm.com
www.neighborhoodsessions.statefarm.com
neighborhoodofgood.statefarm.com
doverbay.statefarm.com
m.statefarm.com
my.statefarm.com
usersupport.statefarm.com
csutil.statefarm.com
styleguide.statefarm.com
media.statefarm.com
wifi.statefarm.com
goodneighbormagazine.statefarm.com
neighborhoodsessions.statefarm.com
cs.nextdoorchicago.com
www.sfembracelife.com
cscomp.statefarm.com
wifi.nextdoorchicago.com
neighborhoodofgood.com
www.neighborhoodofgood.com
coleschallenge.statefarm.com
becomeanagent.statefarm.com
jobs.statefarm.com
financialcoaching.statefarm.com
usersupport.statefarm.ca
m.statefarm.ca
gtld-nic.statefarm.com
espanol.statefarm.com
developer.statefarm.com
statefarminsurance.com
statefarmbank.com
sffinances.com
statefarm.net
texas.statefarm.com
mi.statefarm.com
statefarm.org
www.es.statefarm.com
www.espanol.statefarm.com
www.statefarm.net
www.sffinances.com
www.statefarm.org
www.statefarminsurance.com
www.statefarmbank.com
www.franchiseprograms.statefarm.com
franchiseprograms.statefarm.com
nic.statefarm

Other certificates including the domain name statefarm.com

(limited to 100 certificates)
claims-prep.test.statefarm.com
apps-prep.test.statefarm.com
iwh.statefarm.com
forlife.statefarm.com
ex90dev1vin2.statefarm.com
ildap.prod.statefarm.com
cebuatadm.statefarm.com
sflws13p1.tcisp.statefarm.com
securedatamgmt.statefarm.com
eBank.statefarm.com
rental.claims.test.statefarm.com
onlineapps-imaging.statefarm.com
checkout.hub.claims.statefarm.com
quotes.statefarm.com
arsondog.statefarm.com
sfrun.statefarm.com
cebuat.statefarm.com
cebuat.statefarm.com
b2b.statefarm.com
aexp.auto.statefarm.com
www.statefarm.com
services.tcidv.statefarm.com
online2.statefarm.com
edocuments.statefarm.com
www.neighborhoodofgood.statefarm.com
portfolio.statefarm.com
es.statefarm.com
hub.claims.sandbox.statefarm.com
utility-prep.test.statefarm.com
coleschallenge.statefarm.com
iwh.statefarm.com
services.statefarm.com
worlds22.statefarm.com
online3.statefarm.com
communication.statefarm.com
www-prep.test.statefarm.com
banksvc.statefarm.com
cebuat.statefarm.com
checkout.hub.claims.statefarm.com
commercialcard.statefarm.com
roadsideassistance.claims.test.statefarm.com
iwh.statefarm.com
bank.statefarm.com
sflsweb.statefarm.com
auth.statefarm.com
common.statefarm.com
opportunity.statefarm.com
api.claims.sandbox.c1.statefarm
cromsvcs-prep.test.statefarm.com
chat.statefarm.com
cebuat.statefarm.com
e.statefarm.com
auth.test.statefarm.com
base.statefarm.com
banksvc.statefarm.com
common.statefarm.com
fire.statefarm.com
vehicleloan.statefarm.com
developer.statefarm.com
iwh.statefarm.com
communication.statefarm.com
quotes.statefarm.com
b2cwa.tcidv.statefarm.com
photovideocapture.claims.test.statefarm.com
SECCTF.STATEFARM.COM
learningcenter.statefarm.com
assocmgmt-prep.test.statefarm.com
phase0-xx.test.statefarm.com
www.developer.statefarm.com
apps-prep.test.statefarm.com
sfvdiFrstBdom.statefarm.com
sfvdifrstbdom.tcisp.statefarm.com
sfmeet.statefarm.com
online4.tcidv.statefarm.com
banksvc-prep.test.statefarm.com
chat.statefarm.com
developer.statefarm.com
media-mfe.claims.sandbox.c1.statefarm
www.tcidv.statefarm.com
uc71bse1.opr.test.statefarm.org
statefarm.com
launch-dev.policy-view.test.statefarm.com
sfcmgtest.test.statefarm.com
health-prep.test.statefarm.com
forlife.statefarm.com
checkout.hub.claims.statefarm.com
expw-e53.statefarm.com
mft.statefarm.com
rating.statefarm.com
meetus.statefarm.com
franchiseprograms.statefarm.com
qaa-prep.test.statefarm.com
cdnlog.statefarm.com
cromsvcs.statefarm.com
rental.claims.sandbox.statefarm.com
iwh-staging.statefarm.com
mail71.tcisp.statefarm.com
www.statefarm.com
auth.test.statefarm.com
assocmgmt.statefarm.com

Certificate

The complete raw certificate details for iwh.statefarm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuohYKPNzBaRMC6L4F+zy
jGa9mm8etbXWlGeRdO67YCnWREtHMEn3GG9CJEXwzILBYwraGnCbyI2wPZiWhs5D
A7Nd++nomV1rp9M5VYajVBq854oRoYaP7lISg8Zo8y0IvKcimK5FCSgjCBw6vu0F
sx/fMzmCtivFA2x1vkXofpqrgl/475PIS/CwUrpa+dr8JsxPY+cYtVVjx37rw6Ki
30cJswkBTa6bSsOMxRyFVyL9jTUeBTgfw6S03X/4YfGIHSQ1pLm9aRcdtvOyu/eJ
6nam+4D5CnQ9fAJ0adjQc2aqsmrCXKQUtuVDwKqFnNLipTzfEy0h8P2bBD7+zaed
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314132318107807104626995706733091443422
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-25 13:44:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-05 14:14:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bloomington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State Farm Mutual Automobile Insurance Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'iwh.statefarm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23547558640773896277270865983230065208373459324756835672122805951951313490959169321590028418502085786847829698981532114232454383744006899983592462203484622931238885672471283876089511170599313053018222662729757855369346246618691997957433332242060632197324107057451925295638158386958238802495135597817318090614735189441723087870923217125200818189701468290374681650330425843762331457367762555105159239869268521883312439486613305905214110948871348651540540147744282026694159662552572341240926124251827747681869313940820077181773978818309631464098441145968116554905286511788408720691421202835982121169227760147757378543087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1552 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwh.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwh.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarmevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarmevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifeinsurance.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfepi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeinsurance.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeinsurance.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homeloan.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homeloan.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfepi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vehicleloan.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vehicleloan.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeinsurance.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teendriving.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotes.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotestart.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neighborhoodofgood.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neighborhoodsessions.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neighborhoodofgood.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doverbay.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usersupport.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csutil.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'styleguide.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifi.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodneighbormagazine.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neighborhoodsessions.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.nextdoorchicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sfembracelife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cscomp.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifi.nextdoorchicago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neighborhoodofgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neighborhoodofgood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coleschallenge.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'becomeanagent.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialcoaching.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usersupport.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.statefarm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtld-nic.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espanol.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarminsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarmbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sffinances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texas.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.es.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espanol.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sffinances.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarminsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarmbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.franchiseprograms.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'franchiseprograms.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nic.statefarm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ddb7ce6d4c030bf1f2567817320782964fbbc023
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a175da490e23714c033422af71d2b2126642059dd48d31881e0e4b57b7991bd10fa9dd90a902e8090884c3e37aece84de2835192c3c895a4353845f954a02ade7bd752337cc088a97d1c047b6667ede95f93e1fbe776c05e33e230c1f56c04b664f2224af72b98e475bfd7cdf4998e460d9a1f84f54289664d6a6871c68749388820d7637e9602bbdc259586cdd80280e82fea4e9b73b996b26d7bbb1ebf3cb60c0fb03419a2dfd07007eb1112f33b6f40f21eee8a8c07dce2c543464d58580186aab205f5d90c4c0c2cf9d21c3c5744c3fd287e617903d744f480b0e56cd64781a8ae3c1f5a24f184a715cdc4a0290da0d536d66d87fe814176a546d038d2dd