us-prod-merge.brandplatform.generalmills.com

- General Mills -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 0f:c6:f0:58:eb:03:20:54:2a:bd:5f:32:81:88:78:ad was issued on by Sectigo Limited.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

General Mills

Organization: General Mills
Organization unit: IS
Organization unit: Unified Communications
Address: 1 General Mills Blvd
Postal code: 55426
State / Province: Minnesota
Locality: Golden Valley
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:c6:f0:58:eb:03:20:54:2a:bd:5f:32:81:88:78:ad
Serial Number (int): 20971369537879568373978211198381357229
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 54:22:7b:8f:ac:d1:4f:2e:d5:fc:66:ba:f7:49:f4:39:32:c6:d2:01
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 86:16:b5:eb:ad:80:31:a7:69:28:fa:a5:14:b5:13:f5:84:99:fa:d1
Fingerprint (sha256): 38:95:5f:20:46:c9:29:ff:36:06:5b:9f:91:ef:75:a6:16:07:5c:d0:e6:52:6f:a5:e6:4a:67:18:7d:92:ad:e0

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate us-prod-merge.brandplatform.generalmills.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for us-prod-merge.brandplatform.generalmills.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

us-prod-merge.brandplatform.generalmills.com
boxtops4education-us-prod-merge.brandplatform.generalmills.com
cashforyoureducation-us-prod-merge.brandplatform.generalmills.com
oldelpaso-us-prod-merge.brandplatform.generalmills.com
shopriteformyschool-us-prod-merge.brandplatform.generalmills.com

Other certificates including the domain name generalmills.com

(limited to 100 certificates)
www.bettycrocker.com
admin.promoengine.generalmills.com
s2-sni.cloudinary.com
blog.generalmills.com
content.brandplatform.generalmills.com
vtech.generalmills.com
m.salesapps.generalmills.com
training.generalmills.com
careers.generalmills.com
careers.generalmills.com
gogiant.generalmills.com
content.brandplatform.generalmills.com
content.brandplatform.generalmills.com
s2-sni.cloudinary.com
content-q.brandplatform.generalmills.com
haagendazs-gr-qa.brandplatform.generalmills.com
careers.generalmills.com
s2-sni.cloudinary.com
s2-cloudinary-pin-sni.map.fastly.net
mojo.generalmills.com
ecustomdataretriever.api.generalmills.com
s2-sni.cloudinary.com
s2-sni.cloudinary.com
apis.generalmills.com
champions-content.generalmills.com
san-24-s12.tlsprovisioning.exacttarget.com
content.brandplatform.generalmills.com
boxtops4education-us-prod-staging.brandplatform.generalmills.com
onexmobile.generalmills.com
thefeed-content.generalmills.com
mojo.generalmills.com
www.bettycrocker.com
content.brandplatform.generalmills.com
haagendazs-sg-qa.brandplatform.generalmills.com
careers.generalmills.com
boxtops4education-us-qa-staging.brandplatform.generalmills.com
content.brandplatform.generalmills.com
boxtops4education-us-qa-staging.brandplatform.generalmills.com
blog.generalmills.com
workflow.digitallibrary.generalmills.com
cereals.generalmills.com
analytics.generalmills.com
*.generalmills.com
championshomepage.generalmills.com
admin.promoengine.generalmills.com
boxtops4education-us-prod-merge.brandplatform.generalmills.com
pa.generalmills.com
content-q.brandplatform.generalmills.com
boxtops4education-us-prod-staging.brandplatform.generalmills.com
gdp.generalmills.com
san-24-s12.tlsprovisioning.exacttarget.com
content.generalmills.com
ppm.generalmills.com
s2-cloudinary-pin-sni.map.fastly.net
generalmills.com
cview.generalmills.com
q.hdshops.generalmills.com
champions.generalmills.com
s2-sni.cloudinary.com
www.generalmills.com
generalmills.com
s2-sni.cloudinary.com
champions-q.generalmills.com
gmicertificates.generalmills.com
s2-sni.cloudinary.com
www.generalmills.com
haagendazs-mx-dev.brandplatform.generalmills.com
pa.generalmills.com
s2-sni.cloudinary.com
oldelpaso-us-qa.brandplatform.generalmills.com
investors.generalmills.com
careers.generalmills.com
haagendazs-fr-dev.brandplatform.generalmills.com
content.brandplatform.generalmills.com
*.generalmills.com
generalmills.com
*.generalmills.com
privacy.generalmills.com
admin.fruitsnackia.generalmills.com
content.brandplatform.generalmills.com
s2-sni.cloudinary.com
s2-sni.cloudinary.com
san-24-s12.tlsprovisioning.exacttarget.com
public.conxport.com
mojo-q.generalmills.com
haagendazs-de-qa.brandplatform.generalmills.com
haagendazs-es-qa.brandplatform.generalmills.com
s2-sni.cloudinary.com
content.brandplatform.generalmills.com
boxtops4education-us-prod-merge.brandplatform.generalmills.com
s2-sni.cloudinary.com
s2-cloudinary-pin-sni.map.fastly.net
s2-sni.cloudinary.com
blue.content.pillsbury.com
s2-sni.cloudinary.com
us-prod-merge.brandplatform.generalmills.com
champions-content.generalmills.com
secaccssl.generalmills.com
s2-cloudinary-pin-sni.map.fastly.net
champions-content.generalmills.com

Certificate

The complete raw certificate details for us-prod-merge.brandplatform.generalmills.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmedPdjCYTMCv3eL4BR5e
Tq6gl8z9YQ4qtMdY0aE62VkcNWNVELd6Llif10IvzD2Dh5L5Bl1T3ZXixPc0Zefj
EwP0Lamxdiw0hMSlIR4DDmn1sVQvZfpJz181w3WK2DoDlIiPG3H8YfFwDFoPwXYB
7X/FuAjWY/q88herZ7FSBb/R4Eoxrza2+wRgHjMVAslPTO/OlUE6MCE0rXXYcSH1
q0XCDz2Jmr6jfKAmBk7trnNmGvfV3jurxPjiH0X0nMjO8VkEpjOOo3Wse7jCGUYY
n1w+ROfavRUhJnzU3N26IESB+rokeICZYqGl4AAJEEaIMjIIPeJWVYI6zU8PGX4Z
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20971369537879568373978211198381357229
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55426'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Golden Valley'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1 General Mills Blvd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'General Mills'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'us-prod-merge.brandplatform.generalmills.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19428524067859635157594743338668791261959386088447334094326280294568334899121839989827238673789188873733239963714524892465167932490873239073762120653405266631693355742434477728576361515100022200928334929524093836223883841547895203153223319531679636992695879314658319548539621221807840646622186223979710975458478534545253916969714200277103674943723483426231802934155369985505688029002579822368473391616346422294199205787259175281527357568947451192807020186632872443747674465886356868624735843785326939419855067731118601209116086007314579605474055713023569055374385305791798286711114235841089345576881209449072037861703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54227b8facd14f2ed5fc66baf749f43932c6d201
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (303 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-prod-merge.brandplatform.generalmills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxtops4education-us-prod-merge.brandplatform.generalmills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashforyoureducation-us-prod-merge.brandplatform.generalmills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldelpaso-us-prod-merge.brandplatform.generalmills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopriteformyschool-us-prod-merge.brandplatform.generalmills.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016d08c6f3a80000040300473045022100baeb8dc9638581b1666a17c3f994126122f6c1bffd93a47d9bfd1cbdd148380302202e96a489320ccafc7d7a480df992dcbe72a61bf3f87d78e8bbc6ed1c8c713d820075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016d08c6f3c50000040300463044022067cdb79e97061862058720792be20dacab77c46f593fca5deec8cd2e7bcd707702204e720b7c332e2be841b55f4ce4fb39f6d8fb8f3e245fd04cdcbc3e22fb77e347
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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