www.bettycrocker.com

- General Mills Inc. -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:dc:82 was issued on by GeoTrust, Inc..

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

General Mills Inc.

Company registration number: 3x-da4KLmW/ixg6AakTU21kec-9vMfhK
Organization: General Mills Inc.
Organization unit: Akamai SAN SSL OV
State / Province: Minnesota
Locality: Minneapolis
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:dc:82
Serial Number (int): 187522
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 44:45:ff:7e:53:07:4d:16:6a:c0:27:5e:e2:e0:03:38:9d:86:52:c8
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 0f:10:c4:f0:52:a2:3e:08:dc:55:bf:3f:db:cd:b5:dc:d7:b6:77:0b
Fingerprint (sha256): a0:40:b9:3e:fa:97:77:62:4e:ae:4c:b0:e7:6e:87:15:03:b1:77:1c:09:2d:46:da:91:1d:14:18:4d:b3:33:16

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate www.bettycrocker.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bettycrocker.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.boxtops4education.com
www.cheerios.com
www.generalmills.com
www.haagen-dazs.com.cn
www.haagendazs.com.cn
www.honeydefender.com
www.livebetteramerica.com
www.naturevalley.com
www.pillsbury.com
www.yoplait.com
www.quericavida.com
www.tablespoon.com
www.vivredelicieusement.ca
www.lifemadedelicious.ca
www.bettycrocker.com
bettycrocker.com

Other certificates including the domain name bettycrocker.com

(limited to 100 certificates)
www.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
qa-askbetty.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
content.bettycrocker.com
askbetty.bettycrocker.com
qa-askbetty.bettycrocker.com
sdc.bettycrocker.com
*.emails.bettycrocker.com
www.bettycrocker.com
askbetty.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
san-20-s12.tlsprovisioning.exacttarget.com
www.generalmills.com
san-21-s12.tlsprovisioning.exacttarget.com
www.generalmills.com
askbetty.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
recipe.bettycrocker.com
recipe.bisquick.bettycrocker.com
blue.content.pillsbury.com
san-20-s12.tlsprovisioning.exacttarget.com
content.bettycrocker.com
www.bettycrocker.com
www.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
www.generalmills.com
communityadmin.bettycrocker.com
blue.content.pillsbury.com
bettycrocker.com
www.generalmills.com
content.bettycrocker.com
www.bettycrocker.com
admin-askbetty.bettycrocker.com
www.generalmills.com
bettycrocker.com
qa-askbetty.bettycrocker.com
blue.content.bettycrocker.com
login.bettycrocker.com
bettycrocker.com
recipe.bettycrocker.com
login.bettycrocker.com
login.bettycrocker.com
red.bettycrocker.com
click.email.bettycrocker.com
content.bettycrocker.com
login.bettycrocker.com
store.bettycrocker.com
san-20-s12.tlsprovisioning.exacttarget.com
www.generalmills.com
admin-askbetty.bettycrocker.com
www.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
san-20-s12.tlsprovisioning.exacttarget.com
san-20-s12.tlsprovisioning.exacttarget.com
discountmagazineoffer.bettycrocker.com
red.bettycrocker.com
www.bettycrocker.com
qaadmin-askbetty.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
www.bettycrocker.com
recipe.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
login.q.bettycrocker.com
askbetty.bettycrocker.com
data.bettycrocker.com
www.generalmills.com
qaadmin-askbetty.bettycrocker.com
www.bettycrocker.com
register.bettycrocker.com

www.generalmills.com
www.bettycrocker.com
red.bettycrocker.com
blue.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
blue.content.lifemadedelicious.ca
www.bettycrocker.com
bettycrocker.com
blue.content.pillsbury.com
content.bettycrocker.com
www.generalmills.com
d.blue.tablespoon.com
san-21-s12.tlsprovisioning.exacttarget.com
san-20-s12.tlsprovisioning.exacttarget.com
san-20-s12.tlsprovisioning.exacttarget.com
www.generalmills.com
content.bettycrocker.com
login.q.bettycrocker.com
san-20-s12.tlsprovisioning.exacttarget.com
register.bettycrocker.com
qaadmin-askbetty.bettycrocker.com
qa-askbetty.bettycrocker.com
qa-askbetty.bettycrocker.com
q.bettycrocker.com
san-20-s12.tlsprovisioning.exacttarget.com
q.blue.bettycrocker.com
store.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
recipe.bisquick.bettycrocker.com

Certificate

The complete raw certificate details for www.bettycrocker.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnKl/uO15Lfo6ZTgz+TY
fG4Xko7bahJVycSO0zmSNnIHjqYXKyEHv18amtfrshm2wI8mG6NP9Ipmog8W8WcI
UKqAcK0o9tixAnJFcRcmY0q6iw1q9kMd2TnNYlbsQUjYT+ksMtjBca5hroQF7uD8
Amvex+/sh1U7R31Dmc5UtljnbNU+hLvAP0DbME574r8ZF0Z+k9REiFW98Fzh6Qes
kUcYIBhYYiuxyrVhW6xH6v9K2ZYiFaCLhcqs+0WzIMVqBv8zjNgxGojGaAE10KPZ
GYDPUzQcbrsO14v9MPGXm6TkJBaJty9PlvC2oRQXOixb3n9yG8c7rSOwlcdw85o0
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 187522
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-04 02:42:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-30 16:16:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3x-da4KLmW/ixg6AakTU21kec-9vMfhK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minneapolis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'General Mills Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bettycrocker.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24546766406688428940115305780518543245460812926967811417110720236422108307625182024891244238073823907831654290430797643111301417655932420157569157489553863568162075878580459853478520652421570173610061462192314780578695144184108139273918570558920402473532234677193755549139531869720705320559046451467792089642394664403197159639333790097524565313414795986225695697712936782059645676098981597825246857870187869871893784049491478229047238883194084272449580055773792999251681698931753597226420610928667477958695960512744229571164088971785025112269264458722147314796986841453788556419907053704690024652196768577385607607377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boxtops4education.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheerios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generalmills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haagen-dazs.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haagendazs.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honeydefender.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livebetteramerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naturevalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pillsbury.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yoplait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quericavida.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tablespoon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vivredelicieusement.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifemadedelicious.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bettycrocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettycrocker.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4445ff7e53074d166ac0275ee2e003389d8652c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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