www.bettycrocker.com

- General Mills Inc. -

Issued by USERTrust Legacy Secure Server CA

About this certificate

This digital certificate with serial number 44:30:08:16:a5:32:77:1c:9a:e0:29:7d:f8:cc:b9:63 was issued on by The USERTRUST Network.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

General Mills Inc.

Organization: General Mills Inc.
Organization unit: Akamai SAN SSL OV
Organization unit: Akamai SAN SSL OV
State / Province: MINNESOTA
Locality: Minneapolis
Country: US

The USERTRUST Network

Organization: The USERTRUST Network
State / Province: UT
Locality: Salt Lake City
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 44:30:08:16:a5:32:77:1c:9a:e0:29:7d:f8:cc:b9:63
Serial Number (int): 90636898016006391011590091406461155683
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: a0:39:85:08:1e:eb:2a:35:b1:0e:53:22:cf:2d:39:65:6e:87:ff:06
AuthorityKeyId: af:a4:40:af:9f:16:fe:ab:31:fd:fb:d5:97:8b:f5:91:a3:24:86:16

Fingerprint (sha1): a3:2d:e2:c9:9c:52:d9:fc:67:90:a0:8f:94:92:d7:17:e5:e9:c7:15
Fingerprint (sha256): 3b:50:d8:bc:1a:a9:e6:9d:01:ee:99:81:24:c5:62:fb:1e:6c:2b:27:59:41:df:08:07:a0:f0:42:0c:6e:63:bd

Issuing Certificate URL: http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl

Check the revocation status for certificate www.bettycrocker.com

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bettycrocker.com

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bettycrocker.com
honeydefender.millsberry.com
quick-dish.tablespoon.com
rock-ur-party.tablespoon.com
taste-for-adventure.tablespoon.com
www.betterathome.com
www.boxtops4education.com
www.cheerios.com
www.eatbetteramerica.com
www.generalmills.com
www.haagen-dazs.com.cn
www.haagendazs.com.cn
www.honeydefender.com
www.luckycharmsfun.com
www.naturevalley.com
www.pillsbury.com
www.quericavida.com
www.tablespoon.com
www.yoplait.com

Other certificates including the domain name bettycrocker.com

(limited to 100 certificates)
www.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
qa-askbetty.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
content.bettycrocker.com
askbetty.bettycrocker.com
qa-askbetty.bettycrocker.com
sdc.bettycrocker.com
*.emails.bettycrocker.com
www.bettycrocker.com
askbetty.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
san-20-s12.tlsprovisioning.exacttarget.com
www.generalmills.com
san-21-s12.tlsprovisioning.exacttarget.com
www.generalmills.com
askbetty.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
recipe.bettycrocker.com
recipe.bisquick.bettycrocker.com
blue.content.pillsbury.com
san-20-s12.tlsprovisioning.exacttarget.com
content.bettycrocker.com
www.bettycrocker.com
www.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
www.generalmills.com
communityadmin.bettycrocker.com
blue.content.pillsbury.com
bettycrocker.com
www.generalmills.com
content.bettycrocker.com
www.bettycrocker.com
admin-askbetty.bettycrocker.com
www.generalmills.com
bettycrocker.com
qa-askbetty.bettycrocker.com
blue.content.bettycrocker.com
login.bettycrocker.com
bettycrocker.com
recipe.bettycrocker.com
login.bettycrocker.com
login.bettycrocker.com
red.bettycrocker.com
click.email.bettycrocker.com
content.bettycrocker.com
login.bettycrocker.com
store.bettycrocker.com
san-20-s12.tlsprovisioning.exacttarget.com
www.generalmills.com
admin-askbetty.bettycrocker.com
www.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
san-20-s12.tlsprovisioning.exacttarget.com
san-20-s12.tlsprovisioning.exacttarget.com
discountmagazineoffer.bettycrocker.com
red.bettycrocker.com
www.bettycrocker.com
qaadmin-askbetty.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
www.bettycrocker.com
recipe.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
login.q.bettycrocker.com
askbetty.bettycrocker.com
data.bettycrocker.com
www.generalmills.com
qaadmin-askbetty.bettycrocker.com
www.bettycrocker.com
register.bettycrocker.com

www.generalmills.com
www.bettycrocker.com
red.bettycrocker.com
blue.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
blue.content.lifemadedelicious.ca
www.bettycrocker.com
bettycrocker.com
blue.content.pillsbury.com
content.bettycrocker.com
www.generalmills.com
d.blue.tablespoon.com
san-21-s12.tlsprovisioning.exacttarget.com
san-20-s12.tlsprovisioning.exacttarget.com
san-20-s12.tlsprovisioning.exacttarget.com
www.generalmills.com
content.bettycrocker.com
login.q.bettycrocker.com
san-20-s12.tlsprovisioning.exacttarget.com
register.bettycrocker.com
qaadmin-askbetty.bettycrocker.com
qa-askbetty.bettycrocker.com
qa-askbetty.bettycrocker.com
q.bettycrocker.com
san-20-s12.tlsprovisioning.exacttarget.com
q.blue.bettycrocker.com
store.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
recipe.bisquick.bettycrocker.com

Certificate

The complete raw certificate details for www.bettycrocker.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDW+7nPCShUXbQgfmTMTDAldS4D
V4CCOkAPfZOVPALI3jEf+8ewRK4dq5awCr2k++oeMfNy3FSrkBvcjX8mVai33xu6
I2HghMU5rHZNkJgQ9kqDnEXgovfVZKJoxE9H51x/AAU5L2S7mFFadUwflxVUHrtE
GfV6MMQWjSIPeXok3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 90636898016006391011590091406461155683
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The USERTRUST Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USERTrust Legacy Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-10-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-10-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MINNESOTA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minneapolis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'General Mills Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bettycrocker.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 150966410019602501732026908488095556796217304125053162768570693477281607151721914870854818573401875994992177457601334320247094292915306563210062922405250665635199120500463519942929656628700511007819469203958128560464168731867427429930986982346831204215711478867142859158478198729762179548888826497615928108253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName afa440af9f16feab31fdfbd5978bf591a3248616
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a03985081eeb2a35b10e5322cf2d39656e87ff06
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (457 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bettycrocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honeydefender.millsberry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quick-dish.tablespoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rock-ur-party.tablespoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taste-for-adventure.tablespoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betterathome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boxtops4education.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheerios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eatbetteramerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generalmills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haagen-dazs.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haagendazs.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honeydefender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luckycharmsfun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturevalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pillsbury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quericavida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tablespoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yoplait.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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