statefarm.com

- State Farm Mutual Automobile Insurance Company -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 54:34:3c:da:71:2e:ba:c3:d2:39:05:6c:cf:fc:2c:a0 was issued on by Entrust, Inc..

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

State Farm Mutual Automobile Insurance Company

Organization: State Farm Mutual Automobile Insurance Company
State / Province: Illinois
Locality: Bloomington
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 54:34:3c:da:71:2e:ba:c3:d2:39:05:6c:cf:fc:2c:a0
Serial Number (int): 111926385333920690240397729722177170592
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: fd:c4:70:90:da:f9:30:d7:a9:79:5b:a6:6a:74:10:e7:89:36:be:37
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): df:26:94:9a:9f:d6:be:7e:6e:46:ac:95:df:27:36:26:d5:f4:ed:6b
Fingerprint (sha256): 78:eb:01:2d:de:d6:d0:9d:d3:3b:1b:18:ce:5c:2a:a2:c8:0c:82:6b:6c:54:27:f1:1b:23:0f:f3:8c:85:65:b1

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate statefarm.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for statefarm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

statefarm.com
www.statefarm.com
ac1.st8fm.com
ac2.st8fm.com
agencymobility.statefarm.com
alliance.statefarm.com
allianceapi.statefarm.com
aotp.nsg.statefarm.com
aotp.statefarm.com
apps.statefarm.com
arsondog.statefarm.com
assocmgmt.statefarm.com
auto.statefarm.com
b2b.statefarm.com
b2b-prodb.statefarm.com
bank.statefarm.com
base.statefarm.com
cc.st8farm.co
claims.statefarm.com
claimsassociate.statefarm.com
claimsb2b.statefarm.com
claimsvc.statefarm.com
codingcompetition.statefarm.com
collaboration.statefarm.com
collabsvcs.statefarm.com
common.statefarm.com
communication.statefarm.com
content.statefarm.com
corporatebusinessdev.statefarm.com
cromsvcs.statefarm.com
cscomp.statefarm.com
customer.statefarm.com
customersvc.statefarm.com
das.statefarm.com
daslmobileclaims.statefarm.com
digital.statefarm.com
doverbay.statefarm.com
edocuments.statefarm.com
es.statefarm.com
esg.statefarm.com
es-prodb.statefarm.com
financials.statefarm.com
fire.statefarm.com
goodneighborcenter.statefarm.com
health.statefarm.com
impact.statefarm.com
ims.statefarm.com
innovation.statefarm.com
iwh.statefarm.com
life.statefarm.com
media.statefarm.com
motlisvcs.statefarm.com
nic.statefarm
oams.statefarm.com
online.statefarm.com
online2.statefarm.com
opportunity.statefarm.com
otds.statefarm.com
otdsfw.statefarm.com
patents.statefarm.com
portfolio.statefarm.com
proofing.statefarm.com
rating.statefarm.com
rdc.statefarm
securedatasvc.statefarm.com
sf1-api.statefarm.com
sfgitlab.opr.statefarm.org
sflab.statefarm.com
sfrumtl.statefarm.com
st8farm.co
static1.st8fm.com
static2.st8fm.com
tcap.statefarm.com
techastra.statefarm
tpapp.statefarm.com
usersupport.statefarm.com
utility.statefarm.com
vendrptsvc.statefarm.com
ventures.statefarm.com
wifi.statefarm.com
www.arsondog.statefarm
www.esg.statefarm.com
www.nic.statefarm
www.rdc.statefarm
www.techastra.statefarm
www-prodb.statefarm.com

Other certificates including the domain name statefarm.com

(limited to 100 certificates)
claims-prep.test.statefarm.com
apps-prep.test.statefarm.com
iwh.statefarm.com
forlife.statefarm.com
ex90dev1vin2.statefarm.com
ildap.prod.statefarm.com
cebuatadm.statefarm.com
sflws13p1.tcisp.statefarm.com
securedatamgmt.statefarm.com
eBank.statefarm.com
rental.claims.test.statefarm.com
onlineapps-imaging.statefarm.com
checkout.hub.claims.statefarm.com
quotes.statefarm.com
arsondog.statefarm.com
sfrun.statefarm.com
cebuat.statefarm.com
cebuat.statefarm.com
b2b.statefarm.com
aexp.auto.statefarm.com
www.statefarm.com
services.tcidv.statefarm.com
online2.statefarm.com
edocuments.statefarm.com
www.neighborhoodofgood.statefarm.com
portfolio.statefarm.com
es.statefarm.com
hub.claims.sandbox.statefarm.com
utility-prep.test.statefarm.com
coleschallenge.statefarm.com
iwh.statefarm.com
services.statefarm.com
worlds22.statefarm.com
online3.statefarm.com
communication.statefarm.com
www-prep.test.statefarm.com
banksvc.statefarm.com
cebuat.statefarm.com
checkout.hub.claims.statefarm.com
commercialcard.statefarm.com
roadsideassistance.claims.test.statefarm.com
iwh.statefarm.com
bank.statefarm.com
sflsweb.statefarm.com
auth.statefarm.com
common.statefarm.com
opportunity.statefarm.com
api.claims.sandbox.c1.statefarm
cromsvcs-prep.test.statefarm.com
chat.statefarm.com
cebuat.statefarm.com
e.statefarm.com
auth.test.statefarm.com
base.statefarm.com
banksvc.statefarm.com
common.statefarm.com
fire.statefarm.com
vehicleloan.statefarm.com
developer.statefarm.com
iwh.statefarm.com
communication.statefarm.com
quotes.statefarm.com
b2cwa.tcidv.statefarm.com
photovideocapture.claims.test.statefarm.com
SECCTF.STATEFARM.COM
learningcenter.statefarm.com
assocmgmt-prep.test.statefarm.com
phase0-xx.test.statefarm.com
www.developer.statefarm.com
apps-prep.test.statefarm.com
sfvdiFrstBdom.statefarm.com
sfvdifrstbdom.tcisp.statefarm.com
sfmeet.statefarm.com
online4.tcidv.statefarm.com
banksvc-prep.test.statefarm.com
chat.statefarm.com
developer.statefarm.com
media-mfe.claims.sandbox.c1.statefarm
www.tcidv.statefarm.com
uc71bse1.opr.test.statefarm.org
statefarm.com
launch-dev.policy-view.test.statefarm.com
sfcmgtest.test.statefarm.com
health-prep.test.statefarm.com
forlife.statefarm.com
checkout.hub.claims.statefarm.com
expw-e53.statefarm.com
mft.statefarm.com
rating.statefarm.com
meetus.statefarm.com
franchiseprograms.statefarm.com
qaa-prep.test.statefarm.com
cdnlog.statefarm.com
cromsvcs.statefarm.com
rental.claims.sandbox.statefarm.com
iwh-staging.statefarm.com
mail71.tcisp.statefarm.com
www.statefarm.com
auth.test.statefarm.com
assocmgmt.statefarm.com

Certificate

The complete raw certificate details for statefarm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiMg4V4WxBb+bIRSKznx
hlBGDCzWj7Asj/FsO3ElK3K/ZYKL9d3VzgIbmEVUyPjri5ic5P2C/k1jYTu1OLvH
Xx/o86fC90JtbkbkY7YdHPfz/DoSi3XchyhoQciyNGdK+UcM+T+3/8SVwpAdNoee
4sGJ6sFouMxJYqtnpp8rUGs5lWEWqr4UJkWRT+c1MOEgW0YJSwF9wLiFJbZW5e8t
bM4XADTyNCBIQZ/e0tNlrGHTrWnUQOdeCTPduP+vSJ3f+0tzd6KnrMdiL2jGAWVl
cblSaBVQHb9yd3dnCxKjjQwowswHFsYVA8sqEFbCeYLrIM6MnK1zPVJEM2btPaf4
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 111926385333920690240397729722177170592
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-22 15:25:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-22 15:25:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bloomington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State Farm Mutual Automobile Insurance Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'statefarm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20972881103173229892414002699994745871943288501549776599697798249571445430385194932788651146512973640106572964760822181097593271327884077859115485246779445324098274504731673429362706852765208399395033927290382944289830477355598435508548919626988246080008493526081889018597071974327785580693282785177136306027199448352663176921956717056732176902457212825309648653714818343667159598166768120579459534060092924995882208707052372039045209846572719556959004838964872813923819584773040625498326965867897786710252107682616898253454837487799515938030907776317871730267647795951886612765385752707203254063973366541407259981831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fdc47090daf930d7a9795ba66a7410e78936be37
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1966 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ac1.st8fm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ac2.st8fm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agencymobility.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alliance.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allianceapi.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aotp.nsg.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aotp.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arsondog.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assocmgmt.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b-prodb.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bank.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'base.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc.st8farm.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimsassociate.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimsb2b.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimsvc.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codingcompetition.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collaboration.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collabsvcs.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'common.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communication.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporatebusinessdev.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cromsvcs.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cscomp.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customersvc.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'das.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daslmobileclaims.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doverbay.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edocuments.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esg.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es-prodb.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financials.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fire.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodneighborcenter.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impact.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ims.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovation.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwh.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motlisvcs.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nic.statefarm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oams.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online2.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opportunity.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otds.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otdsfw.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patents.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portfolio.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proofing.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rating.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdc.statefarm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securedatasvc.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf1-api.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfgitlab.opr.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sflab.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfrumtl.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st8farm.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.st8fm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.st8fm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcap.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techastra.statefarm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpapp.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usersupport.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utility.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendrptsvc.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventures.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wifi.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arsondog.statefarm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esg.statefarm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nic.statefarm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rdc.statefarm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techastra.statefarm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-prodb.statefarm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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