www.greenmountaincoffee.com

- Green Mountain Coffee Roasters Inc. -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:e9:71 was issued on by GeoTrust, Inc..

With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Green Mountain Coffee Roasters Inc.

Company registration number: VVMw4ubhCGkBDyV-bXCXx6SrEiNZQP8q
Organization: Green Mountain Coffee Roasters Inc.
Organization unit: Akamai SAN SSL OV
State / Province: Vermont
Locality: Waterbury
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:e9:71
Serial Number (int): 190833
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: f6:28:8d:99:88:c2:ce:a3:ad:8d:e3:7c:a8:92:f5:96:6d:2e:7f:ad
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): a0:5d:02:e8:7b:ba:14:d6:eb:87:1f:39:63:c0:d1:e5:7c:6f:ed:f4
Fingerprint (sha256): 17:13:2b:85:95:db:62:c7:07:16:c8:38:b0:d8:86:66:b2:f5:8f:72:85:6e:08:14:6e:60:f5:4a:fc:75:1b:65

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate www.greenmountaincoffee.com

44

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.greenmountaincoffee.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

orders.greenmountaincoffee.com
ourstory.greenmountaincoffee.com
sblprd.greenmountaincoffee.com
sbluat.greenmountaincoffee.com
www.baristaprima.com
www.bigelowsinglecuptea.com
www.brewabetterday.com
www.brewabetteroffice.com
www.brewabetterstay.com
www.brewingabetterworldfoundation.org
www.brewmore.com
www.brewoverice.com
www.businesscoffeeexpress.com
www.cafeescapes.com
www.callcenter.keurig.com
www.cariboukcups.com
www.caribousinglecup.com
www.celestialseasoningssinglecuptea.com
www.coffeepeople.com
www.diedrich.com
www.donuthousecoffee.com
www.emerilscoffee.com
www.gloriajeanssinglecupcoffee.com
www.gmcrcanada.ca
www.gmcrwholesale.com
www.greenmountainnaturals.com
www.kahluasinglecupcoffee.com
www.keurig.ca
www.keurig.com
www.newmansownorganicscoffee.com
www.revvcoffee.com
www.swissmisssinglecup.com
www.timothys.com
www.tullys.com
www.vitaminburst.com
www.wellnessbrewed.com
1.shrd.gmcr.com
2.shrd.gmcr.com
www.baristaprima.ca
www.gmcrpartners.com
www.keuriggreenmountain.com
corp.keurig.ca
www.greenmountaincoffee.com
greenmountaincoffee.com

Other certificates including the domain name greenmountaincoffee.com

(limited to 100 certificates)
www.greenmountaincoffee.com
www.greenmountaincoffee.com
www.greenmountaincoffee.com
www.keurig.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.keurig.com
wvw.greenmountaincoffee.com
www.keurig.com
www.keurig.com
www.greenmountaincoffee.com
www.gmcr.com
www.greenmountaincoffee.com
www.greenmountaincoffee.com
orders.greenmountaincoffee.com
www.keurig.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.keurig.com
love.greenmountaincoffee.com
www.greenmountaincoffee.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.keurig.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.keurig.com
wvw.greenmountaincoffee.com
www.greenmountaincoffee.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
sample.greenmountaincoffee.com
www.greenmountaincoffee.com
preferences.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.greenmountaincoffee.com
www.keurig.com
www.gmcr.com
www.greenmountaincoffee.com
wvw.greenmountaincoffee.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.greenmountaincoffee.com
www.gmcr.com
wvw.greenmountaincoffee.com
www.keurig.com
www.greenmountaincoffee.com
www.greenmountaincoffee.com
www.gmcr.com
www.gmcr.com
www.gmcr.com
www.keurig.com
www.gmcr.com
www.gmcr.com
WWW.GREENMOUNTAINCOFFEE.COM
www.gmcr.com
www.greenmountaincoffee.com

Certificate

The complete raw certificate details for www.greenmountaincoffee.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLhXEFfVK+E1+JX9qdtR
ej67M1rdhJ8g5QkM6sjZgo6FgnCPlRlckaBty1jGzm8zM9ueNfNNe0VOXZyUYz81
Ep9UnCH2/wrqbIM9+1hC3CHFlhUGS4HbQEHg4qmmu7AFZb3pyNzMdBRmCu9R6GuI
3tX0/ZmCI+rL3JcDNuMprYsAWW8fH7jPtwYQKPNw3617GK6b0GohjOxxX256Unld
M2pgL3QTpPJNhecbIG9dZeb1YA8NRIWt2K1JFokdNIKAMLJ5N7oaHNfkSmxPHZJW
5pF9EgXe0JqmmQq/ouLSASqcwgRqZ1ZmOuW08d3VaDA6VHBH6i/KyDCLxEFl/E3a
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 190833
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-26 03:18:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-20 03:17:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VVMw4ubhCGkBDyV-bXCXx6SrEiNZQP8q'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vermont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waterbury'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Green Mountain Coffee Roasters Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.greenmountaincoffee.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23318749601619998236036895177649922342709144121925230922581627186586650559954426483379189952287117855557151186038188226388983340199642469997280002099198701079263667585723198919680322809519703323673858003201823145461379068424455010750222721997758096341627170702734882564886189793355184491144022349880686959892131222898027590508255589933528036996347818484156765058596547564619912676265421385043638266373819469591306316124404911762668667460156548151411260640977202597210651637453025314816943120349816638949569038125222228094786456918112128886616060775805263195791892011261025800953357770714378228057308470216479470377589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourstory.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sblprd.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbluat.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baristaprima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigelowsinglecuptea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewabetterday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewabetteroffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewabetterstay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewingabetterworldfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brewoverice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesscoffeeexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cafeescapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.callcenter.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cariboukcups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.caribousinglecup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.celestialseasoningssinglecuptea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coffeepeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diedrich.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donuthousecoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emerilscoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gloriajeanssinglecupcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmcrcanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmcrwholesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenmountainnaturals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kahluasinglecupcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keurig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newmansownorganicscoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.revvcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swissmisssinglecup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timothys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tullys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitaminburst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellnessbrewed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1.shrd.gmcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2.shrd.gmcr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baristaprima.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmcrpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keuriggreenmountain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corp.keurig.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenmountaincoffee.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6288d9988c2cea3ad8de37ca892f5966d2e7fad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0000683ec3a7e729adf251f958a49baa864aaf8bbfc414e001b017cf43ce163242db01ee6883b95617fd3d92d352640b3d1a9056ef5e5920725cebff9c1d2de310a9d4fef79421b7874b7a8981e488ab1bde4f293aa082695346f2c94b9bcc4b4c9941f835650496873312b728d0f4463a98d8e396a3373a177b1a15aa69a924eb8b9b4ca485a8666f30c2c4dcd5c1ddf7935237dfac702cf758f40fd11f741a66b214f49d31dc93e45061a05aa3b23bfb438b38d300b1f3f2bac43071633740adf64c5000b557b4c4396bc8c2abd42901910c9e71f6bae7ae11ef6ef15dd05d134006795deb3491da0eaea190a493afc36158d23a7009cff75cfae52028c6ac16