www.greenmountaincoffee.com

- Green Mountain Coffee Roasters Inc. -

Issued by GeoTrust SSL CA - G4

About this certificate

This digital certificate with serial number 04:05 was issued on by GeoTrust Inc..

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Green Mountain Coffee Roasters Inc.

Organization: Green Mountain Coffee Roasters Inc.
Organization unit: Akamai SAN SSL OV
State / Province: Vermont
Locality: Waterbury
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:05
Serial Number (int): 1029
Serial Number lenght: 11 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: ac:32:ed:5a:c9:e0:de:30:9c:90:58:55:26:63:f6:72:a6:54:5f:e3

Fingerprint (sha1): 22:c7:25:88:cc:58:5f:d6:58:3c:28:05:37:bc:2e:bf:74:1c:1c:55
Fingerprint (sha256): 14:5f:90:7a:b2:41:15:40:72:58:71:f9:04:4c:60:cb:85:9b:8a:5c:0e:68:5c:17:c9:c3:ce:c1:af:fd:c9:99

Issuing Certificate URL: http://gw.symcb.com/gw.crt

Revocation information

OCSP Server: http://gw.symcd.com
CRL Distribution Point: http://gw.symcb.com/gw.crl

Check the revocation status for certificate www.greenmountaincoffee.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.greenmountaincoffee.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afh.keurig.ca
www.keurigkorea.com
connect.keurig.com
preferences.greenmountaincoffee.com
mpc.keurig.com
afh.keurig.com
corp.keurig.ca
www.keuriggreenmountain.com
www.gmcrpartners.com
www.baristaprima.ca
2.shrd.gmcr.com
1.shrd.gmcr.com
www.wellnessbrewed.com
www.vitaminburst.com
www.tullys.com
www.timothys.com
www.swissmisssinglecup.com
www.revvcoffee.com
www.newmansownorganicscoffee.com
www.keurig.com
www.keurig.ca
www.kahluasinglecupcoffee.com
www.greenmountainnaturals.com
www.gmcrwholesale.com
www.gmcrcanada.ca
www.gloriajeanssinglecupcoffee.com
www.emerilscoffee.com
www.donuthousecoffee.com
www.diedrich.com
www.coffeepeople.com
www.celestialseasoningssinglecuptea.com
www.caribousinglecup.com
www.cariboukcups.com
www.callcenter.keurig.com
www.cafeescapes.com
www.businesscoffeeexpress.com
www.brewoverice.com
www.brewmore.com
www.brewingabetterworldfoundation.org
www.brewabetterstay.com
www.brewabetteroffice.com
www.brewabetterday.com
www.bigelowsinglecuptea.com
www.baristaprima.com
sbluat.greenmountaincoffee.com
sblprd.greenmountaincoffee.com
ourstory.greenmountaincoffee.com
orders.greenmountaincoffee.com
www.greenmountaincoffee.com
greenmountaincoffee.com

Other certificates including the domain name greenmountaincoffee.com

(limited to 100 certificates)
www.greenmountaincoffee.com
www.greenmountaincoffee.com
www.greenmountaincoffee.com
www.keurig.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.keurig.com
wvw.greenmountaincoffee.com
www.keurig.com
www.keurig.com
www.greenmountaincoffee.com
www.gmcr.com
www.greenmountaincoffee.com
www.greenmountaincoffee.com
orders.greenmountaincoffee.com
www.keurig.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.keurig.com
love.greenmountaincoffee.com
www.greenmountaincoffee.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.keurig.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.keurig.com
wvw.greenmountaincoffee.com
www.greenmountaincoffee.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
sample.greenmountaincoffee.com
www.greenmountaincoffee.com
preferences.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.greenmountaincoffee.com
www.keurig.com
www.gmcr.com
www.greenmountaincoffee.com
wvw.greenmountaincoffee.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
wvw.greenmountaincoffee.com
www.keurig.com
www.greenmountaincoffee.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.keurig.com
www.gmcr.com
www.gmcr.com
WWW.GREENMOUNTAINCOFFEE.COM
www.gmcr.com
www.greenmountaincoffee.com

Certificate

The complete raw certificate details for www.greenmountaincoffee.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7Lj0u+PhC5P8m6NdPqW
fCO1+q7hupQCcKWyxgMPCDU5BHhIzU12y882CcOMUICUcNMEUB3QZdT2KBuP1szL
5qqT1qLud2zZKOOZwPO/JbGrH8RhkleVNQr1Qi/fbuR6xhjyhCgaytB9fx98UvGe
ro+ywBolnwrGaZQk6m6Evzm9jp3D1IR1mrcf9U4pv/fG269Z1GVMPSxSo49ZT3q/
U8Gd3ciP9jnPwZHascwQgkXHiGbO20Zx/dQfZ23jjp7mPfFgC+t3FE1Dfh/LSGLa
9K3wUgz9UYvygrXMESPT3t83s0mcDb4d7tfo97ggPZ3H3EEi3ghG1DErSj5kVFXD
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1029
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-11 03:13:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-14 11:28:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vermont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waterbury'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Green Mountain Coffee Roasters Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.greenmountaincoffee.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23694776944550061763972604044554091183305420010903665869458446501579576412138778551954215445386417202679971830587984811707004628126162567292687720686589478041645155625777548290785848843981053200856635557199103129876031759740375929776931753975988525273262621210267102400903771633743320531851977232247418354552916715632950333429533865246429510769445189848135217542616438118371672943863565000274386479482784384119238692682172706204907663239921937351813758588416763095061209135165494566060117010180259101949312012455235151437326726924437479065436284645013994465561964118364890434265798981571782122591070020561955972301713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ac32ed5ac9e0de309c9058552663f672a6545fe3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcb.com/gw.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1230 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afh.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keurigkorea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preferences.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpc.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afh.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corp.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keuriggreenmountain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmcrpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baristaprima.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2.shrd.gmcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1.shrd.gmcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellnessbrewed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitaminburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tullys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timothys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissmisssinglecup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.revvcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newmansownorganicscoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kahluasinglecupcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenmountainnaturals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmcrwholesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmcrcanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gloriajeanssinglecupcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emerilscoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donuthousecoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diedrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coffeepeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celestialseasoningssinglecuptea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caribousinglecup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cariboukcups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.callcenter.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cafeescapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesscoffeeexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewoverice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewingabetterworldfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewabetterstay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewabetteroffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewabetterday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigelowsinglecuptea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baristaprima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbluat.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sblprd.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourstory.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcb.com/gw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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