champions-content.generalmills.com

- General Mills -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 73:69:5e:36:d9:47:18:6c:0e:16:98:4a:fe:84:d1:f1 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

General Mills

Organization: General Mills
Organization unit: IS
Organization unit: InstantSSL
Address: 1 General Mills Blvd
Postal code: 55426
State / Province: MN
Locality: Golden Valley
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 73:69:5e:36:d9:47:18:6c:0e:16:98:4a:fe:84:d1:f1
Serial Number (int): 153408321577479197506711228770484015601
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 16:0d:ce:3f:d0:eb:37:ee:45:61:6d:64:98:8d:94:0f:7e:da:8d:d2
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): c1:40:65:96:c2:26:2b:29:69:70:61:03:fa:9a:4f:71:44:67:f6:d2
Fingerprint (sha256): 3a:1f:37:39:32:a5:17:59:f8:89:10:71:24:cf:ec:52:9f:09:e3:b3:43:54:c2:73:18:6c:af:3d:da:c2:14:f2

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate champions-content.generalmills.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for champions-content.generalmills.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

champions-content.generalmills.com
www.champions-content.generalmills.com

Other certificates including the domain name generalmills.com

(limited to 100 certificates)
www.bettycrocker.com
admin.promoengine.generalmills.com
s2-sni.cloudinary.com
blog.generalmills.com
content.brandplatform.generalmills.com
vtech.generalmills.com
m.salesapps.generalmills.com
training.generalmills.com
careers.generalmills.com
careers.generalmills.com
gogiant.generalmills.com
content.brandplatform.generalmills.com
content.brandplatform.generalmills.com
s2-sni.cloudinary.com
content-q.brandplatform.generalmills.com
haagendazs-gr-qa.brandplatform.generalmills.com
careers.generalmills.com
s2-sni.cloudinary.com
s2-cloudinary-pin-sni.map.fastly.net
mojo.generalmills.com
ecustomdataretriever.api.generalmills.com
s2-sni.cloudinary.com
s2-sni.cloudinary.com
apis.generalmills.com
champions-content.generalmills.com
san-24-s12.tlsprovisioning.exacttarget.com
content.brandplatform.generalmills.com
boxtops4education-us-prod-staging.brandplatform.generalmills.com
onexmobile.generalmills.com
thefeed-content.generalmills.com
mojo.generalmills.com
www.bettycrocker.com
content.brandplatform.generalmills.com
haagendazs-sg-qa.brandplatform.generalmills.com
careers.generalmills.com
boxtops4education-us-qa-staging.brandplatform.generalmills.com
content.brandplatform.generalmills.com
boxtops4education-us-qa-staging.brandplatform.generalmills.com
blog.generalmills.com
workflow.digitallibrary.generalmills.com
cereals.generalmills.com
analytics.generalmills.com
*.generalmills.com
championshomepage.generalmills.com
admin.promoengine.generalmills.com
boxtops4education-us-prod-merge.brandplatform.generalmills.com
pa.generalmills.com
content-q.brandplatform.generalmills.com
boxtops4education-us-prod-staging.brandplatform.generalmills.com
gdp.generalmills.com
san-24-s12.tlsprovisioning.exacttarget.com
content.generalmills.com
ppm.generalmills.com
s2-cloudinary-pin-sni.map.fastly.net
generalmills.com
cview.generalmills.com
q.hdshops.generalmills.com
champions.generalmills.com
s2-sni.cloudinary.com
www.generalmills.com
generalmills.com
s2-sni.cloudinary.com
champions-q.generalmills.com
gmicertificates.generalmills.com
s2-sni.cloudinary.com
www.generalmills.com
haagendazs-mx-dev.brandplatform.generalmills.com
pa.generalmills.com
s2-sni.cloudinary.com
oldelpaso-us-qa.brandplatform.generalmills.com
investors.generalmills.com
careers.generalmills.com
haagendazs-fr-dev.brandplatform.generalmills.com
content.brandplatform.generalmills.com
*.generalmills.com
generalmills.com
*.generalmills.com
privacy.generalmills.com
admin.fruitsnackia.generalmills.com
content.brandplatform.generalmills.com
s2-sni.cloudinary.com
s2-sni.cloudinary.com
san-24-s12.tlsprovisioning.exacttarget.com
public.conxport.com
mojo-q.generalmills.com
haagendazs-de-qa.brandplatform.generalmills.com
haagendazs-es-qa.brandplatform.generalmills.com
s2-sni.cloudinary.com
content.brandplatform.generalmills.com
boxtops4education-us-prod-merge.brandplatform.generalmills.com
s2-sni.cloudinary.com
s2-cloudinary-pin-sni.map.fastly.net
s2-sni.cloudinary.com
blue.content.pillsbury.com
s2-sni.cloudinary.com
us-prod-merge.brandplatform.generalmills.com
champions-content.generalmills.com
secaccssl.generalmills.com
s2-cloudinary-pin-sni.map.fastly.net
champions-content.generalmills.com

Certificate

The complete raw certificate details for champions-content.generalmills.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TxqwzakBoqgz2Vgg8TF
QtB1+Kgmug4RB3lkrcNZVRoplTMYCjepce2uRKI0d+bzQGeQkQlHs6GbdIlZ/XkA
0WDcGma9mn2toQvJf5/Px6z1Jy7Go08sVdLedrjfkLeDs4Idd8DgCWiVEgGGGtmO
9oK+rHjN2lKdDjcNHdNo3JWBVnCiqxlxyIe2IR3QqxDm62GO9CT3WpSu3AVTX4t8
TnUiBAJ+1MUVS0sOzSSt/8MB7d81tUAbTVFSyvpYa3djpQLNjA1WrxYBFVvRNkUG
NVYmPXeQwBxLDFbbvZ2kb2bZG1Mz1yyAdujh60gIvkJtqCONJB7g7i4gbh9PRe6j
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 153408321577479197506711228770484015601
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '55426'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Golden Valley'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1 General Mills Blvd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'General Mills'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InstantSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'champions-content.generalmills.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30453224250237185365034039677052367191710996656288995513741870634761744140702586752501381222628680448982537974857214085597012309223967693318248604305397725776003768635919818583367168785548254131886009726727538178702784221932234017797899724427293561084232599083651730797061614560458136601230206802327675720144684069882755948446364991294862343045170785453478076858102507170551008138421258407648755912560833659688476296341607577510105280325477294381883613678458535756323717501601137308199731509424698785877158321920427981081306193724649375129096702424753984724359806512895802941720439171416069511439733949579006644757249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							160dce3fd0eb37ee45616d64988d940f7eda8dd2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'champions-content.generalmills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.champions-content.generalmills.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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