www.greenmountaincoffee.com

- Green Mountain Coffee Roasters Inc. -

Issued by USERTrust Legacy Secure Server CA

About this certificate

This digital certificate with serial number fe:90:93:c0:49:9f:cb:b0:8d:a9:96:6e:a9:7e:d5:a0 was issued on by The USERTRUST Network.

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Green Mountain Coffee Roasters Inc.

Organization: Green Mountain Coffee Roasters Inc.
Organization unit: Akamai SAN SSL OV
Organization unit: Akamai SAN SSL OV
State / Province: VERMONT
Locality: Waterbury
Country: US

The USERTRUST Network

Organization: The USERTRUST Network
State / Province: UT
Locality: Salt Lake City
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fe:90:93:c0:49:9f:cb:b0:8d:a9:96:6e:a9:7e:d5:a0
Serial Number (int): 338374598425802173249888273987985659296
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c7:eb:9b:b4:c0:d0:19:8f:36:c4:35:d4:6a:2d:47:18:9f:bf:fe:f0
AuthorityKeyId: af:a4:40:af:9f:16:fe:ab:31:fd:fb:d5:97:8b:f5:91:a3:24:86:16

Fingerprint (sha1): 25:52:8a:fd:ea:f1:90:d7:83:fd:81:5a:b2:68:e1:78:a7:83:d4:93
Fingerprint (sha256): 12:6f:61:09:ee:b9:84:99:1f:25:ed:f2:00:b2:ce:eb:e1:b2:14:97:00:cc:f9:01:5f:5c:8a:06:4f:6c:2d:65

Issuing Certificate URL: http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl

Check the revocation status for certificate www.greenmountaincoffee.com

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.greenmountaincoffee.com

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.greenmountaincoffee.com
orders.greenmountaincoffee.com
ourstory.greenmountaincoffee.com
sblprd.greenmountaincoffee.com
sbluat.greenmountaincoffee.com
www.baristaprima.com
www.bigelowsinglecuptea.com
www.brewabetteroffice.com
www.brewabetterstay.com
www.brewingabetterworldfoundation.org
www.brewmore.com
www.brewoverice.com
www.businesscoffeeexpress.com
www.cafeescapes.com
www.callcenter.keurig.com
www.cariboukcups.com
www.caribousinglecup.com
www.celestialseasoningssinglecuptea.com
www.coffeepeople.com
www.diedrich.com
www.donuthousecoffee.com
www.emerilscoffee.com
www.gloriajeanssinglecupcoffee.com
www.gmcrcanada.ca
www.gmcrwholesale.com
www.greenmountainnaturals.com
www.kahluasinglecupcoffee.com
www.keurig.ca
www.keurig.com
www.newmansownorganicscoffee.com
www.revvcoffee.com
www.swissmisssinglecup.com
www.timothys.com
www.tullys.com
www.vitaminburst.com
www.wellnessbrewed.com

Other certificates including the domain name greenmountaincoffee.com

(limited to 100 certificates)
www.greenmountaincoffee.com
www.greenmountaincoffee.com
www.greenmountaincoffee.com
www.keurig.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.keurig.com
wvw.greenmountaincoffee.com
www.keurig.com
www.keurig.com
www.greenmountaincoffee.com
www.gmcr.com
www.greenmountaincoffee.com
www.greenmountaincoffee.com
orders.greenmountaincoffee.com
www.keurig.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.keurig.com
love.greenmountaincoffee.com
www.greenmountaincoffee.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.keurig.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.keurig.com
wvw.greenmountaincoffee.com
www.greenmountaincoffee.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
sample.greenmountaincoffee.com
www.greenmountaincoffee.com
preferences.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.greenmountaincoffee.com
www.keurig.com
www.gmcr.com
www.greenmountaincoffee.com
wvw.greenmountaincoffee.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
wvw.greenmountaincoffee.com
www.keurig.com
www.greenmountaincoffee.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.keurig.com
www.gmcr.com
www.gmcr.com
WWW.GREENMOUNTAINCOFFEE.COM
www.gmcr.com
www.greenmountaincoffee.com

Certificate

The complete raw certificate details for www.greenmountaincoffee.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC2Anl8qW+boho9vC0XGl5HW0k6
uae5YLEqVvTCiMjIOeNJe+iZ+BKKfZoNLzFhd2+bA2g+2JsCUonsIg0KdjFZVHfB
IHeYf4AZonaah0VdluFnjzPaB0Gjp3/qS1EioP5+RSuJCqtvqHzh8SLzvgUqCy/p
u92sxm77glujQOJ/qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338374598425802173249888273987985659296
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The USERTRUST Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USERTrust Legacy Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-08-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-02-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VERMONT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waterbury'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Green Mountain Coffee Roasters Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.greenmountaincoffee.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 127811534173923728465895922029244281387373520646933021861891282791439137762039626211553059235053724322289699984485486658224342469534039481475806715498850806414515624844133941935740373213715622209413470436885673408830401682123457904506195073376152633818673696394288195849926569100873024604694581066249867001771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName afa440af9f16feab31fdfbd5978bf591a3248616
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7eb9bb4c0d0198f36c435d46a2d47189fbffef0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (934 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourstory.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sblprd.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbluat.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baristaprima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigelowsinglecuptea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewabetteroffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewabetterstay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewingabetterworldfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewoverice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesscoffeeexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cafeescapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.callcenter.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cariboukcups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caribousinglecup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celestialseasoningssinglecuptea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coffeepeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diedrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donuthousecoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emerilscoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gloriajeanssinglecupcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmcrcanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmcrwholesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenmountainnaturals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kahluasinglecupcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newmansownorganicscoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.revvcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissmisssinglecup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timothys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tullys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitaminburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellnessbrewed.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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