www-xx.test.statefarm.com

Issued by Entrust Certification Authority - L1M

About this certificate


This digital certificate with serial number 54:3f:f4:e6 was issued on by Entrust, Inc. .

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present

State Farm Mutual Automobile Insurance Company

Company registration number: 37-0533100
Organization: State Farm Mutual Automobile Insurance Company
State / Province: Illinois
Locality: Bloomington
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
State / Province: Illinois
Locality: Bloomington
Country: US

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 54:3f:f4:e6
Serial Number (int): 1413477606
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: b2:fd:ff:1b:ef:c8:66:de:05:05:26:34:34:d3:b4:23:d3:4c:3a:fb
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 25:ce:ce:81:06:96:1b:80:88:85:6d:70:5c:28:e4:aa:db:c0:b9:c2
Fingerprint (sha256): b9:80:63:2c:ad:7c:09:dd:d3:5a:87:d9:45:d9:1f:42:b4:94:a2:eb:fd:29:ff:67:32:ea:4a:a1:c4:0c:33:98

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for the current certificate on www-xx.test.statefarm.com
29
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www-xx.test.statefarm.com
sfcheckout-www-app-prep-isce.test.statefarm.ca
www-app-prep-iscc.statefarm.ca
sfcheckout-es-app-prep-isce.test.statefarm.com
sfbackout-www-app-prep-iscc.test.statefarm.com
sfbackout-www-app-prep-isce.test.statefarm.ca
sfcheckout-www-app-prep-iscw.test.statefarm.ca
www-prep.test.statefarm.com
sfcheckout-www-app-prep-iscc.test.statefarm.com
es-prep.test.statefarm.com
sfbackout-www-app-prep-isce.test.statefarm.com
sfbackout-es-app-prep-isce.test.statefarm.com
sfbackout-www-app-prep-iscw.test.statefarm.ca
sfcheckout-www-app-prep-iscc.test.statefarm.ca
origin-www-prep.test.statefarm.com
sfbackout-es-app-prep-iscc.test.statefarm.com
www-prep.test.statefarm.ca
www-app-prep-isce.statefarm.ca
www-app-prep-isce.test.statefarm.com
www-app-prep-iscw.statefarm.ca
sfbackout-www-app-prep-iscc.test.statefarm.ca
sfcheckout-es-app-prep-iscc.test.statefarm.com
www-app-prep-iscc.test.statefarm.com
sfbackout-es-app-prep-iscw.test.statefarm.com
sfbackout-www-app-prep-iscw.test.statefarm.com
sfcheckout-www-app-prep-iscw.test.statefarm.com
www-app-prep-iscw.test.statefarm.com
sfcheckout-www-app-prep-isce.test.statefarm.com
sfcheckout-es-app-prep-iscw.test.statefarm.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIKeTCCCWGgAwIBAgIEVD/05jANBgkqhkiG9w0BAQsFADCBujELMAkGA1UEBhMC VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50 cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDE0IEVudHJ1c3Qs IEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwGA1UEAxMlRW50cnVz dCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxTTAeFw0xNTAxMjkxODIwMDZa Fw0xNzA0MzAxMTUzMjNaMIH3MQswCQYDVQQGEwJVUzERMA8GA1UECBMISWxsaW5v aXMxFDASBgNVBAcTC0Jsb29taW5ndG9uMRMwEQYLKwYBBAGCNzwCAQMTAlVTMRkw FwYLKwYBBAGCNzwCAQITCElsbGlub2lzMTcwNQYDVQQKEy5TdGF0ZSBGYXJtIE11 dHVhbCBBdXRvbW9iaWxlIEluc3VyYW5jZSBDb21wYW55MR0wGwYDVQQPExRQcml2 YXRlIE9yZ2FuaXphdGlvbjETMBEGA1UEBRMKMzctMDUzMzEwMDEiMCAGA1UEAxMZ d3d3LXh4LnRlc3Quc3RhdGVmYXJtLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANRGjAvEKHx+pnvsdLxjcFWy2KzYKwHhlFHvfAO9qTByNpibrx4t zAkWHcQ6jUnqlabS/GL/lI4Mu+IbyZNfzNCKJZmfDTe6xh+cEvcINUR1iXtRIj0z 8TvenfPXsD7UiGemqTYjk2Py+GLzHoH0rX1/DmZE2PPgD7bNcKA3ZEMEKSNCnIij Lf5z6CzUpO9PP3vHzXyR12K65EjgG2WEGhBs3uNgzxnCDJGqoukBN+1kI9Ee2Yg7 qFKGlZq7KeKYRFF/aAIJdjywsg0F740pmy2ZNxBjyEbrmYI+j4g/wef8emxtTKAt rPHk3h0xUV2Vyjh54INTP6M6DxeXjQ3i5D0CAwEAAaOCBkYwggZCMBMGCisGAQQB 1nkCBAMBAf8EAgUAMIIE0AYDVR0RBIIExzCCBMOCGXd3dy14eC50ZXN0LnN0YXRl ZmFybS5jb22CLnNmY2hlY2tvdXQtd3d3LWFwcC1wcmVwLWlzY2UudGVzdC5zdGF0 ZWZhcm0uY2GCHnd3dy1hcHAtcHJlcC1pc2NjLnN0YXRlZmFybS5jYYIuc2ZjaGVj a291dC1lcy1hcHAtcHJlcC1pc2NlLnRlc3Quc3RhdGVmYXJtLmNvbYIuc2ZiYWNr b3V0LXd3dy1hcHAtcHJlcC1pc2NjLnRlc3Quc3RhdGVmYXJtLmNvbYItc2ZiYWNr b3V0LXd3dy1hcHAtcHJlcC1pc2NlLnRlc3Quc3RhdGVmYXJtLmNhgi5zZmNoZWNr b3V0LXd3dy1hcHAtcHJlcC1pc2N3LnRlc3Quc3RhdGVmYXJtLmNhght3d3ctcHJl cC50ZXN0LnN0YXRlZmFybS5jb22CL3NmY2hlY2tvdXQtd3d3LWFwcC1wcmVwLWlz Y2MudGVzdC5zdGF0ZWZhcm0uY29tghplcy1wcmVwLnRlc3Quc3RhdGVmYXJtLmNv bYIuc2ZiYWNrb3V0LXd3dy1hcHAtcHJlcC1pc2NlLnRlc3Quc3RhdGVmYXJtLmNv bYItc2ZiYWNrb3V0LWVzLWFwcC1wcmVwLWlzY2UudGVzdC5zdGF0ZWZhcm0uY29t gi1zZmJhY2tvdXQtd3d3LWFwcC1wcmVwLWlzY3cudGVzdC5zdGF0ZWZhcm0uY2GC LnNmY2hlY2tvdXQtd3d3LWFwcC1wcmVwLWlzY2MudGVzdC5zdGF0ZWZhcm0uY2GC Im9yaWdpbi13d3ctcHJlcC50ZXN0LnN0YXRlZmFybS5jb22CLXNmYmFja291dC1l cy1hcHAtcHJlcC1pc2NjLnRlc3Quc3RhdGVmYXJtLmNvbYIad3d3LXByZXAudGVz dC5zdGF0ZWZhcm0uY2GCHnd3dy1hcHAtcHJlcC1pc2NlLnN0YXRlZmFybS5jYYIk d3d3LWFwcC1wcmVwLWlzY2UudGVzdC5zdGF0ZWZhcm0uY29tgh53d3ctYXBwLXBy ZXAtaXNjdy5zdGF0ZWZhcm0uY2GCLXNmYmFja291dC13d3ctYXBwLXByZXAtaXNj Yy50ZXN0LnN0YXRlZmFybS5jYYIuc2ZjaGVja291dC1lcy1hcHAtcHJlcC1pc2Nj LnRlc3Quc3RhdGVmYXJtLmNvbYIkd3d3LWFwcC1wcmVwLWlzY2MudGVzdC5zdGF0 ZWZhcm0uY29tgi1zZmJhY2tvdXQtZXMtYXBwLXByZXAtaXNjdy50ZXN0LnN0YXRl ZmFybS5jb22CLnNmYmFja291dC13d3ctYXBwLXByZXAtaXNjdy50ZXN0LnN0YXRl ZmFybS5jb22CL3NmY2hlY2tvdXQtd3d3LWFwcC1wcmVwLWlzY3cudGVzdC5zdGF0 ZWZhcm0uY29tgiR3d3ctYXBwLXByZXAtaXNjdy50ZXN0LnN0YXRlZmFybS5jb22C L3NmY2hlY2tvdXQtd3d3LWFwcC1wcmVwLWlzY2UudGVzdC5zdGF0ZWZhcm0uY29t gi5zZmNoZWNrb3V0LWVzLWFwcC1wcmVwLWlzY3cudGVzdC5zdGF0ZWZhcm0uY29t MAsGA1UdDwQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwaAYI KwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5l dDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMW0tY2hhaW4y NTYuY2VyMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQv bGV2ZWwxbS5jcmwwQQYDVR0gBDowODA2BgpghkgBhvpsCgECMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly93d3cuZW50cnVzdC5uZXQvcnBhMB8GA1UdIwQYMBaAFMP30LUq MK2vDZEhcDlU3byJcMc6MB0GA1UdDgQWBBSy/f8b78hm3gUFJjQ007Qj00w6+zAJ BgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQBqr6p3it8r417u2+PNEbt/6l7X jdrEks8B/YXpwOWpH02MBO+GxhX9no+0Je0mkcNZL8Zt9f4UmkDr+WzeQ1NZNZW/ O0eNmv1GugI/w0O5/OkclzeQPe3zEyP4fy3/86b+mrfINhH5zZJMfHBU5NzRo8du Jl8fhYwpa68Lu3VX9Z/57D6+4+QJ1QAm8KB27aX3ncLveSLH3aiggfvANaw45XHe 5AQE1jDATKpNddFcEnWJt72I9V3myZKhuUB0YHQrg77uTvbrBdp/u49+CJ9ibF7+ dEQR8Au1jlPM+UBwjKxE5oyBm23mXAp5yGI7etG9k1U7SsQn6SoscmK5ylU9 -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EaMC8QofH6me+x0vGNw VbLYrNgrAeGUUe98A72pMHI2mJuvHi3MCRYdxDqNSeqVptL8Yv+Ujgy74hvJk1/M 0IolmZ8NN7rGH5wS9wg1RHWJe1EiPTPxO96d89ewPtSIZ6apNiOTY/L4YvMegfSt fX8OZkTY8+APts1woDdkQwQpI0KciKMt/nPoLNSk708/e8fNfJHXYrrkSOAbZYQa EGze42DPGcIMkaqi6QE37WQj0R7ZiDuoUoaVmrsp4phEUX9oAgl2PLCyDQXvjSmb LZk3EGPIRuuZgj6PiD/B5/x6bG1MoC2s8eTeHTFRXZXKOHngg1M/ozoPF5eNDeLk PQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1413477606 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-29 18:20:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-30 11:53:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bloomington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State Farm Mutual Automobile Insurance Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '37-0533100' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-xx.test.statefarm.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26797308701965767928186939359102687672587435625304928200508316171974430708341867692474157914497290027408413531320851080411767897807119579793630590385336022580327596238874611416563004954933757222359321107365340920368292665300832281094284230906643679602009454490645476172419901203211378514917587565720247517802785893587241979995487296057338760124372443470314778841409510138024114968570718986181399847096149323964905992257552344680493562834098224469219277798254521437281683284361703788829813466638347914961034257817345003059315209977251267944526253701864310539013797422363722735929714585219480616126731431176565810193469 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1223 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-xx.test.statefarm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-www-app-prep-isce.test.statefarm.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-app-prep-iscc.statefarm.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-es-app-prep-isce.test.statefarm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-www-app-prep-iscc.test.statefarm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-www-app-prep-isce.test.statefarm.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-www-app-prep-iscw.test.statefarm.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-prep.test.statefarm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-www-app-prep-iscc.test.statefarm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es-prep.test.statefarm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-www-app-prep-isce.test.statefarm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-es-app-prep-isce.test.statefarm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-www-app-prep-iscw.test.statefarm.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-www-app-prep-iscc.test.statefarm.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-www-prep.test.statefarm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-es-app-prep-iscc.test.statefarm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-prep.test.statefarm.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-app-prep-isce.statefarm.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-app-prep-isce.test.statefarm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-app-prep-iscw.statefarm.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-www-app-prep-iscc.test.statefarm.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-es-app-prep-iscc.test.statefarm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-app-prep-iscc.test.statefarm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-es-app-prep-iscw.test.statefarm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbackout-www-app-prep-iscw.test.statefarm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-www-app-prep-iscw.test.statefarm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-app-prep-iscw.test.statefarm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-www-app-prep-isce.test.statefarm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcheckout-es-app-prep-iscw.test.statefarm.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b2fdff1befc866de0505263434d3b423d34c3afb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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