www.mykeurig.com

- Keurig Green Mountain, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:b5:b9:e9:dd:d9:7f:2a:10:cd:05:43:4b:ac:b7:a6 was issued on by DigiCert Inc.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Keurig Green Mountain, Inc.

Organization: Keurig Green Mountain, Inc.
State / Province: Vermont
Locality: Waterbury
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:b5:b9:e9:dd:d9:7f:2a:10:cd:05:43:4b:ac:b7:a6
Serial Number (int): 20881996442766207866831055198276597670
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 83:fd:88:d7:9d:09:81:8e:61:8a:b2:71:47:1e:a9:36:66:ba:4b:ba
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 5b:d4:54:82:c4:5b:f9:e6:8e:2e:dd:74:b8:ad:fd:14:2d:32:94:94
Fingerprint (sha256): 15:fc:04:45:09:ed:9d:ce:f7:54:0e:61:de:e0:27:1d:01:41:ce:e4:b0:01:fe:aa:79:0a:5c:5c:a8:e4:21:fc

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate www.mykeurig.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mykeurig.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mykeurig.com
www3-qa-gcp.keurig.com
www3-qa-gcp.keurig.ca
www3-ist-gcp.keurig.ca
www3-ci-gcp.keurig.com
www3-ci-gcp.keurig.ca
www2-qa-gcp.keurig.com
www2-qa-gcp.keurig.ca
www2-ci-gcp.keurig.com
www2-ci-gcp.keurig.ca
www1-qa-gcp.keurig.com
www1-qa-gcp.keurig.ca
www1-ci-gcp.keurig.com
www1-ci-gcp.keurig.ca
www.keurigdrpepper.ca
www-prdwest-gcp.keurig.com
www-prdwest-gcp.keurig.ca
www-prdcentral-gcp.keurig.com
www-prdcentral-gcp.keurig.ca
www-ci1-gke.keurig.com
www-ci1-gke.keurig.ca
support.keurigdrpepper.com
support.keurig.ca
support.commercial.keurig.com
support-test.keurigdrpepper.com
support-test.keurig.ca
support-test.commercial.keurig.com
sbluatint.keurig.com
rts-krgreg-gcp.keurig.com
rts-krgprd-gcp.keurig.com
rts-krgdev-gcp.keurig.com
qr.keurig.com
mykeurig.com
my.keurig.com
my-stg.keurig.com
my-ist1.keurig.com
mgmt3-qa-gcp.keurig.com
mgmt3-qa-gcp.keurig.ca
mgmt3-ist-gcp.keurig.ca
mgmt3-commercial-qa-gcp.keurig.com
mgmt3-commercial-ist-gcp.keurig.com
mgmt3-commercial-ci-gcp.keurig.com
mgmt3-ci-gcp.keurig.com
mgmt3-ci-gcp.keurig.ca
mgmt2-qa-gcp.keurig.com
mgmt2-qa-gcp.keurig.ca
mgmt2-commercial-qa-gcp.keurig.com
mgmt2-commercial-ist-gcp.keurig.com
mgmt2-commercial-ci-gcp.keurig.com
mgmt2-ci-gcp.keurig.com
mgmt2-ci-gcp.keurig.ca
mgmt1-qa-gcp.keurig.com
mgmt1-qa-gcp.keurig.ca
mgmt1-commercial-qa-gcp.keurig.com
mgmt1-commercial-ist-gcp.keurig.com
mgmt1-commercial-ci-gcp.keurig.com
mgmt1-ci-gcp.keurig.com
mgmt1-ci-gcp.keurig.ca
mgmt-prdwest-gcp.keurig.com
mgmt-prdwest-gcp.keurig.ca
mgmt-prdcentral-gcp.keurig.com
mgmt-prdcentral-gcp.keurig.ca
mgmt-commercial-stg-gcp.keurig.com
mgmt-commercial-prod-gcp.keurig.com
mgmt-commercial-perf-gcp.keurig.com
mgmt-commercial-ci1-gke.keurig.com
mgmt-ci1-gke.keurig.com
mgmt-ci1-gke.keurig.ca
keurigdrpepper.ca
feedapi3-ist-gcp.keurig.com
feedapi-prdwest-gcp.keurig.com
feedapi-prdcentral-gcp.keurig.com
commercial3-qa-gcp.keurig.com
commercial3-ist-gcp.keurig.com
commercial3-ci-gcp.keurig.com
commercial2-qa-gcp.keurig.com
commercial2-ist-gcp.keurig.com
commercial2-ci-gcp.keurig.com
commercial1-qa-gcp.keurig.com
commercial1-ist-gcp.keurig.com
commercial1-ci-gcp.keurig.com
commercial.keurig.com
commercial-stg-gcp.keurig.com
commercial-perf-gcp.keurig.com
commercial-ci1-gke.keurig.com
careers.keurigdrpepper.com
applaunch.keurig.com
apidev.keurig.com
api.keurig.com
api-dep.keurig.com
api-dep-s.keurig.com
api-dep-prdwest.keurig.com
api-dep-perf.keurig.com
api-dep-dr.keurig.com
api-dep-d.keurig.com
afhsupport.keurig.com
afhsupport-test.keurig.com

Other certificates including the domain name mykeurig.com

(limited to 100 certificates)
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.gmcr.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.gmcr.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.gmcr.com
www.gmcr.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.gmcr.com
www.mykeurig.com
www.gmcr.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.gmcr.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.gmcr.com
www.mykeurig.com
www.gmcr.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.gmcr.com
www.mykeurig.com
mykeurig.com
mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.gmcr.com
www.mykeurig.com
www.mykeurig.com
www.gmcr.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.gmcr.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com
www.mykeurig.com

Certificate

The complete raw certificate details for www.mykeurig.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEe5/RR2iZg7F+JNyS4uS2Cj0Lp0WJ
W3vJyOfbnlkWlQ3++L4eyw9gLaZURhopdfi7PrXc2MEpdAMg3IqmehQgFw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20881996442766207866831055198276597670
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vermont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waterbury'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Keurig Green Mountain, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mykeurig.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00047b9fd147689983b17e24dc92e2e4b60a3d0ba745895b7bc9c8e7db9e5916950dfef8be1ecb0f602da654461a2975f8bb3eb5dcd8c129740320dc8aa67a142017
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83fd88d79d09818e618ab271471ea93666ba4bba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2622 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mykeurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3-qa-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3-qa-gcp.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3-ist-gcp.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3-ci-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3-ci-gcp.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2-qa-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2-qa-gcp.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2-ci-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2-ci-gcp.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1-qa-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1-qa-gcp.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1-ci-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1-ci-gcp.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keurigdrpepper.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-prdwest-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-prdwest-gcp.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-prdcentral-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-prdcentral-gcp.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ci1-gke.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ci1-gke.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.keurigdrpepper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.commercial.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-test.keurigdrpepper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-test.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-test.commercial.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbluatint.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rts-krgreg-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rts-krgprd-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rts-krgdev-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qr.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mykeurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-stg.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-ist1.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt3-qa-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt3-qa-gcp.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt3-ist-gcp.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt3-commercial-qa-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt3-commercial-ist-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt3-commercial-ci-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt3-ci-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt3-ci-gcp.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt2-qa-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt2-qa-gcp.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt2-commercial-qa-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt2-commercial-ist-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt2-commercial-ci-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt2-ci-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt2-ci-gcp.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt1-qa-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt1-qa-gcp.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt1-commercial-qa-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt1-commercial-ist-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt1-commercial-ci-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt1-ci-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt1-ci-gcp.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt-prdwest-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt-prdwest-gcp.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt-prdcentral-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt-prdcentral-gcp.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt-commercial-stg-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt-commercial-prod-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt-commercial-perf-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt-commercial-ci1-gke.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt-ci1-gke.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgmt-ci1-gke.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keurigdrpepper.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedapi3-ist-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedapi-prdwest-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feedapi-prdcentral-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercial3-qa-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercial3-ist-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercial3-ci-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercial2-qa-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercial2-ist-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercial2-ci-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercial1-qa-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercial1-ist-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercial1-ci-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercial.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercial-stg-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercial-perf-gcp.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercial-ci1-gke.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.keurigdrpepper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applaunch.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidev.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dep.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dep-s.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dep-prdwest.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dep-perf.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dep-dr.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dep-d.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afhsupport.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afhsupport-test.keurig.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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