www.greenmountaincoffee.com

- Green Mountain Coffee Roasters Inc. -

Issued by GeoTrust SSL CA - G4

About this certificate

This digital certificate with serial number 03:96 was issued on by GeoTrust Inc..

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Green Mountain Coffee Roasters Inc.

Organization: Green Mountain Coffee Roasters Inc.
Organization unit: Akamai SAN SSL OV
State / Province: Vermont
Locality: Waterbury
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:96
Serial Number (int): 918
Serial Number lenght: 10 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: ac:32:ed:5a:c9:e0:de:30:9c:90:58:55:26:63:f6:72:a6:54:5f:e3

Fingerprint (sha1): d4:a1:e5:32:56:d2:1e:62:a5:ec:c1:42:65:41:57:e6:eb:5f:4b:6d
Fingerprint (sha256): 07:87:c5:a7:7c:92:63:c2:6f:27:e0:d0:c5:e8:90:53:76:d3:41:4d:71:b5:23:9e:95:0c:c5:c2:a3:66:d3:16

Issuing Certificate URL: http://gw.symcb.com/gw.crt

Revocation information

OCSP Server: http://gw.symcd.com
CRL Distribution Point: http://gw.symcb.com/gw.crl

Check the revocation status for certificate www.greenmountaincoffee.com

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.greenmountaincoffee.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

connect.keurig.com
preferences.greenmountaincoffee.com
mpc.keurig.com
afh.keurig.com
corp.keurig.ca
www.keuriggreenmountain.com
www.gmcrpartners.com
www.baristaprima.ca
2.shrd.gmcr.com
1.shrd.gmcr.com
www.wellnessbrewed.com
www.vitaminburst.com
www.tullys.com
www.timothys.com
www.swissmisssinglecup.com
www.revvcoffee.com
www.newmansownorganicscoffee.com
www.keurig.com
www.keurig.ca
www.kahluasinglecupcoffee.com
www.greenmountainnaturals.com
www.gmcrwholesale.com
www.gmcrcanada.ca
www.gloriajeanssinglecupcoffee.com
www.emerilscoffee.com
www.donuthousecoffee.com
www.diedrich.com
www.coffeepeople.com
www.celestialseasoningssinglecuptea.com
www.caribousinglecup.com
www.cariboukcups.com
www.callcenter.keurig.com
www.cafeescapes.com
www.businesscoffeeexpress.com
www.brewoverice.com
www.brewmore.com
www.brewingabetterworldfoundation.org
www.brewabetterstay.com
www.brewabetteroffice.com
www.brewabetterday.com
www.bigelowsinglecuptea.com
www.baristaprima.com
sbluat.greenmountaincoffee.com
sblprd.greenmountaincoffee.com
ourstory.greenmountaincoffee.com
orders.greenmountaincoffee.com
www.greenmountaincoffee.com
greenmountaincoffee.com

Other certificates including the domain name greenmountaincoffee.com

(limited to 100 certificates)
www.greenmountaincoffee.com
www.greenmountaincoffee.com
www.greenmountaincoffee.com
www.keurig.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.keurig.com
wvw.greenmountaincoffee.com
www.keurig.com
www.keurig.com
www.greenmountaincoffee.com
www.gmcr.com
www.greenmountaincoffee.com
www.greenmountaincoffee.com
orders.greenmountaincoffee.com
www.keurig.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.keurig.com
love.greenmountaincoffee.com
www.greenmountaincoffee.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.keurig.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.keurig.com
wvw.greenmountaincoffee.com
www.greenmountaincoffee.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
sample.greenmountaincoffee.com
www.greenmountaincoffee.com
preferences.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.greenmountaincoffee.com
www.keurig.com
www.gmcr.com
www.greenmountaincoffee.com
wvw.greenmountaincoffee.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
wvw.greenmountaincoffee.com
www.keurig.com
www.greenmountaincoffee.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.keurig.com
www.gmcr.com
www.gmcr.com
WWW.GREENMOUNTAINCOFFEE.COM
www.gmcr.com
www.greenmountaincoffee.com

Certificate

The complete raw certificate details for www.greenmountaincoffee.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslAZG1Bqcoao60VkyB5P
rwaxfZehCpHK9fYG2Cyq+QtqRfpwXX8U452buUSoGsE/sSMSYXql5PIY39rjZqGo
CpLCd/jsHQi1z/cssRFaSKIiRJuFpNnqNRMxYznUmVi9+m1XJzlamTPkq7sajGYy
kWbwBijbCFWjMOOLhTTuGvPmVViezMpn3jTKLlzM0K9Z3sUnGCf62L5fzfIBRqJH
NZfqJsdJZ1Ym36/JwART2Nl1qIEniT9hAL4AStQ3cPMP/ohVwNjOEp/wQJnrWrFd
vEnYdBi5mtBcqGHflCkmUGjdiUAnHND5BfyMiPl9+OMxTJZWacKtapEwU783zg1i
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 918
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-29 09:00:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-01 01:31:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vermont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waterbury'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Green Mountain Coffee Roasters Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.greenmountaincoffee.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22509916115874110174836553724714373975267939054121216791201444256666405810385132368231886542711645062837474920974675267107425735275909961966579175758863524720063496528160819958308941107917231439228445755534318513358803491181890560668396845533086664277745711566990178642390992986232685322294620661796243520058410931353817337871757898880719028501508418035933183418907557539859094063081546039081854544373480012824323604442168776963920154848659089757589218869604287243030677020853962923433398124284959517804347177487453050296412363226635700306058865190723564169109044720203605840048896621363493271488014201880167358226957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ac32ed5ac9e0de309c9058552663f672a6545fe3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcb.com/gw.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1194 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preferences.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpc.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afh.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corp.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keuriggreenmountain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmcrpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baristaprima.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2.shrd.gmcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1.shrd.gmcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellnessbrewed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitaminburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tullys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timothys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissmisssinglecup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.revvcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newmansownorganicscoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kahluasinglecupcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenmountainnaturals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmcrwholesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmcrcanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gloriajeanssinglecupcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emerilscoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donuthousecoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diedrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coffeepeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celestialseasoningssinglecuptea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caribousinglecup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cariboukcups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.callcenter.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cafeescapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesscoffeeexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewoverice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewingabetterworldfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewabetterstay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewabetteroffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewabetterday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigelowsinglecuptea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baristaprima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbluat.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sblprd.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourstory.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcb.com/gw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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