www.bettycrocker.com

- General Mills Inc. -

Issued by USERTrust Legacy Secure Server CA

About this certificate

This digital certificate with serial number 8c:a0:c3:66:67:ff:de:33:d0:cc:55:0f:3f:d2:80:57 was issued on by The USERTRUST Network.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

General Mills Inc.

Organization: General Mills Inc.
Organization unit: Akamai SAN SSL OV
Organization unit: Akamai SAN SSL OV
State / Province: MINNESOTA
Locality: Minneapolis
Country: US

The USERTRUST Network

Organization: The USERTRUST Network
State / Province: UT
Locality: Salt Lake City
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 8c:a0:c3:66:67:ff:de:33:d0:cc:55:0f:3f:d2:80:57
Serial Number (int): 186926650090585364574581883425155874903
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 7a:4a:5c:75:1c:c6:f8:98:6e:c2:11:12:b9:6e:8a:09:fd:eb:7b:54
AuthorityKeyId: af:a4:40:af:9f:16:fe:ab:31:fd:fb:d5:97:8b:f5:91:a3:24:86:16

Fingerprint (sha1): 38:2a:c5:bf:ae:02:df:1a:69:52:80:88:9a:86:6b:39:dd:17:43:e8
Fingerprint (sha256): 3b:8d:4d:f9:17:46:97:92:bd:5d:6c:09:14:fd:6b:48:08:37:8e:51:d1:c5:d5:3f:ab:b1:47:ad:d6:38:4d:2e

Issuing Certificate URL: http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl

Check the revocation status for certificate www.bettycrocker.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bettycrocker.com

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bettycrocker.com
honeydefender.millsberry.com
quick-dish.tablespoon.com
rock-ur-party.tablespoon.com
taste-for-adventure.tablespoon.com
www.betterathome.com
www.boxtops4education.com
www.cheerios.com
www.eatbetteramerica.com
www.generalmills.com
www.haagen-dazs.com.cn
www.haagendazs.com.cn
www.honeydefender.com
www.livebetteramerica.com
www.luckycharmsfun.com
www.naturevalley.com
www.pillsbury.com
www.quericavida.com
www.tablespoon.com
www.yoplait.com

Other certificates including the domain name bettycrocker.com

(limited to 100 certificates)
www.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
qa-askbetty.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
content.bettycrocker.com
askbetty.bettycrocker.com
qa-askbetty.bettycrocker.com
sdc.bettycrocker.com
*.emails.bettycrocker.com
www.bettycrocker.com
askbetty.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
san-20-s12.tlsprovisioning.exacttarget.com
www.generalmills.com
san-21-s12.tlsprovisioning.exacttarget.com
www.generalmills.com
askbetty.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
recipe.bettycrocker.com
recipe.bisquick.bettycrocker.com
blue.content.pillsbury.com
san-20-s12.tlsprovisioning.exacttarget.com
content.bettycrocker.com
www.bettycrocker.com
www.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
www.generalmills.com
communityadmin.bettycrocker.com
blue.content.pillsbury.com
bettycrocker.com
www.generalmills.com
content.bettycrocker.com
www.bettycrocker.com
admin-askbetty.bettycrocker.com
www.generalmills.com
bettycrocker.com
qa-askbetty.bettycrocker.com
blue.content.bettycrocker.com
login.bettycrocker.com
bettycrocker.com
recipe.bettycrocker.com
login.bettycrocker.com
login.bettycrocker.com
red.bettycrocker.com
click.email.bettycrocker.com
content.bettycrocker.com
login.bettycrocker.com
store.bettycrocker.com
san-20-s12.tlsprovisioning.exacttarget.com
www.generalmills.com
admin-askbetty.bettycrocker.com
www.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
san-20-s12.tlsprovisioning.exacttarget.com
san-20-s12.tlsprovisioning.exacttarget.com
discountmagazineoffer.bettycrocker.com
red.bettycrocker.com
www.bettycrocker.com
qaadmin-askbetty.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
www.bettycrocker.com
recipe.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
login.q.bettycrocker.com
askbetty.bettycrocker.com
data.bettycrocker.com
www.generalmills.com
qaadmin-askbetty.bettycrocker.com
www.bettycrocker.com
register.bettycrocker.com

www.generalmills.com
www.bettycrocker.com
red.bettycrocker.com
blue.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
blue.content.lifemadedelicious.ca
www.bettycrocker.com
bettycrocker.com
blue.content.pillsbury.com
content.bettycrocker.com
www.generalmills.com
d.blue.tablespoon.com
san-21-s12.tlsprovisioning.exacttarget.com
san-20-s12.tlsprovisioning.exacttarget.com
san-20-s12.tlsprovisioning.exacttarget.com
www.generalmills.com
content.bettycrocker.com
login.q.bettycrocker.com
san-20-s12.tlsprovisioning.exacttarget.com
register.bettycrocker.com
qaadmin-askbetty.bettycrocker.com
qa-askbetty.bettycrocker.com
qa-askbetty.bettycrocker.com
q.bettycrocker.com
san-20-s12.tlsprovisioning.exacttarget.com
q.blue.bettycrocker.com
store.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
recipe.bisquick.bettycrocker.com

Certificate

The complete raw certificate details for www.bettycrocker.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCvfPqk4qI7g4tUPi0FG/x1Lp3h
UcPpm4IMSqyUQkWXzuaOCJhOeaAqetpvzh3qardc1pHzMw/s3jRTcZ36fw6AA6A7
KlkfA3G74dNoZi2fEE9KdLfIpO7+GvUM0EUr9v6nGIUbJ7V0dTeL5zzTiXodz68v
BpNu/xI8OH2fI8yTIQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 186926650090585364574581883425155874903
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The USERTRUST Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USERTrust Legacy Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-07-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MINNESOTA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minneapolis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'General Mills Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bettycrocker.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 123232004506168256318932447357081064966518765253324198950484583368078545539029488854694122135213287018991139013802359487027021452622904190563228016771641577674942292869978229766487433332440698723483590083184775790725022717022556338140341528513988896966867766831331191644603523137037180284002595909291387687713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName afa440af9f16feab31fdfbd5978bf591a3248616
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a4a5c751cc6f8986ec21112b96e8a09fdeb7b54
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bettycrocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honeydefender.millsberry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quick-dish.tablespoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rock-ur-party.tablespoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taste-for-adventure.tablespoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betterathome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boxtops4education.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheerios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eatbetteramerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generalmills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haagen-dazs.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haagendazs.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honeydefender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livebetteramerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luckycharmsfun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturevalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pillsbury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quericavida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tablespoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yoplait.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002d14d0c16ae4e42c4150dea48d2001074c71263782e1c5574f2b2c0778ea2d5c6f4d573b8a66035be500bd38535bacc584c8cba856139769c22336a5d10f43c679df4c8b9152a10546fa631a64f9b82aa94573cd76679b628e727b93889459c6e9d24fc457d2a6cc22dff4b7258309950145cd8fc3eeb6f7878563a2e46c5bbef7a8f55d2d175fc2a8ec6723485ba9fa84883fa19b4a3a90881de0924aa3ccdcfde12e787398c99c7ebb14353c38c26f4d148dcaf39023c53062eed3b09980124310e9f7167e59bc09dce504bc6b8829aeede0c368df3af69be5dbe28e030c3e4c2623125b579725d5e630d3906d4b88cce63b4b78783df1cddfe08dfbfa8e19