keyvalueservice.icloud.com

- Apple Inc. -

Issued by Apple IST CA 2 - G1

About this certificate

This digital certificate with serial number 6a:6b:89:d2:44:c3:b3:f4:85:ae:15:0a:1c:6b:d2:65 was issued on by Apple Inc..

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Apple Inc.

Organization: Apple Inc.
State / Province: California
Country: US

Apple Inc.

Organization: Apple Inc.
Organization unit: Certification Authority
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6a:6b:89:d2:44:c3:b3:f4:85:ae:15:0a:1c:6b:d2:65
Serial Number (int): 141456538666375708375330251714738246245
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 83:03:ec:8a:30:29:a2:6e:7f:b9:d3:78:3f:c0:a3:0d:fd:f2:f0:1c
AuthorityKeyId: d8:7a:94:44:7c:90:70:90:16:9e:dd:17:9c:01:44:03:86:d6:2a:29

Fingerprint (sha1): f1:66:5f:f7:d2:c7:54:02:56:f0:04:46:2d:df:b1:10:03:53:6c:7b
Fingerprint (sha256): 00:17:a1:55:d7:57:9d:ce:7a:ee:51:e9:08:31:84:63:24:e7:bb:62:2a:00:e5:f6:c3:60:03:ce:0b:33:b6:ff

Issuing Certificate URL: http://certs.apple.com/appleistca2g1.der

Revocation information

OCSP Server: http://ocsp.apple.com/ocsp03-appleistca2g122
CRL Distribution Point: http://crl.apple.com/appleistca2g1.crl

Check the revocation status for certificate keyvalueservice.icloud.com

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for keyvalueservice.icloud.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

13 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

p01-keyvalueservice-ic2.icloud.com
s01-keyvalueservice.icloud.com
p202-keyvalueservice-ic3.icloud.com
p03-keyvalueservice-ic3.icloud.com
p202-keyvalueservice.icloud.com
keyvalueservice-ic3.icloud.com
p02-keyvalueservice-ic2.icloud.com
p02-keyvalueservice-ic3.icloud.com
p04-keyvalueservice-ic2.icloud.com
p202-keyvalueservice-ic4.icloud.com
p04-keyvalueservice-ic1.icloud.com
p01-keyvalueservice-ic3.icloud.com
p04-keyvalueservice-ic4.icloud.com
p01-keyvalueservice-ic1.icloud.com
p02-keyvalueservice-ic4.icloud.com
keyvalueservice-ic2.icloud.com
keyvalueservice.icloud.com
p01-keyvalueservice.icloud.com
p200-keyvalueservice-ic3.icloud.com
p200-keyvalueservice.icloud.com
p03-keyvalueservice-ic4.icloud.com
p201-keyvalueservice-ic3.icloud.com
p200-keyvalueservice-ic1.icloud.com
p02-keyvalueservice-ic1.icloud.com
p03-keyvalueservice.icloud.com
p201-keyvalueservice.icloud.com
keyvalueservice-ic4.icloud.com
p04-keyvalueservice.icloud.com
keyvalueservice-ic1.icloud.com
p03-keyvalueservice-ic2.icloud.com
p03-keyvalueservice-ic1.icloud.com
p202-keyvalueservice-ic2.icloud.com
p01-keyvalueservice-ic4.icloud.com
p200-keyvalueservice-ic4.icloud.com
s02-keyvalueservice.icloud.com
p04-keyvalueservice-ic3.icloud.com
p201-keyvalueservice-ic1.icloud.com
p202-keyvalueservice-ic1.icloud.com
p201-keyvalueservice-ic2.icloud.com
p200-keyvalueservice-ic2.icloud.com
p02-keyvalueservice.icloud.com
p201-keyvalueservice-ic4.icloud.com

Other certificates including the domain name icloud.com

(limited to 100 certificates)
p09-mccgateway.icloud.com
keyvalueservice.icloud.com
ckdatabase.icloud.com
caldav.icloud.com
discussions-uat.apple.com
p101-ckdatabase.icloud.com
iwmb1.icloud.com
ckcoderouter.icloud.com
p203-sharedstreams-china.icloud.com
p301-fmipweb-china.icloud.com
p127-mcc.icloud.com
p101-iwmb6.icloud.com
prod-setup.icloud.com
cls-webdata.education.icloud.com
drivews.icloud.com
metrics.icloud.com
fmf-china.icloud.com
aolauth.icloud.com
ckdevice.icloud.com
mobilebackup-internal-china.icloud.com
calendarws.icloud.com
p301-iwmb3-china.icloud.com
iwmb.icloud.com
ckdatabasews.icloud.com
fmfweb.icloud.com
p301-ckdatabase-china.icloud.com
p203-escrowproxy-china.icloud.com
drive.icloud.com
p301-notesws.icloud.com
iwmb8.icloud.com
p301-iwmb-china.icloud.com
p101-quota-china.icloud.com
fmipweb.icloud.com
fmfmail.icloud.com
fmipweb-china.icloud.com
iwmb2.icloud.com
ubiquity.icloud.com
calendar.icloud.com
p101-sharedstreams-china.icloud.com
ckshare.icloud.com
fmipmobile.icloud.com
newspublisherapi.icloud.com
p101-iwmb7.icloud.com
ckcoderouter.icloud.com
iworkexportws.icloud.com
fmipalcweb.icloud.com
e3.icloud.com
photos.icloud.com
drivews.icloud.com
calendars-china.icloud.com
p301-docws-china.icloud.com
p101-docws.icloud.com
iwres.icloud.com
p25-cache.iwork.icloud.com
streams-china.icloud.com
p101-iwmb5-china.icloud.com
p101-fmfmobile.icloud.com
www.me.com
photos.icloud.com
calendars-china.icloud.com
probe.icloud.com
ubiquity.icloud.com
p01-mcc.icloud.com
p203-iwmb4-china.icloud.com
iworkpreviewapi.icloud.com
p101-escrowproxy.icloud.com
ckdevice-china.icloud.com
contactsws.icloud.com
p203-notesws-china.icloud.com
mail.icloud.com
p101-iwmb1-china.icloud.com
p101-iwres-china.icloud.com
iwmb0-china.icloud.com
p301-setup.icloud.com
calendars-china.icloud.com
p101-content.icloud.com
ckcoderouter-china.icloud.com
iwmb9-china.icloud.com
p301-drivews.icloud.com
p75-cache.iwork.icloud.com
p301-caldav-china.icloud.com
networkresponsivetest.icloud.com
uploadimagews.icloud.com
uploadimagews.icloud.com
discussions-uat.apple.com
statici.icloud.com
discussions-uat.apple.com
aolauth.icloud.com
contactsws.icloud.com
content.icloud.com
quota.icloud.com
discussions-uat.apple.com
calendars.icloud.com
acfeedbackws.icloud.com
fmipmail-china.icloud.com
ckshare.icloud.com
iworkthumbnailws.icloud.com
ckcoderouter-china.icloud.com
p101-fmfweb.icloud.com
ckcoderouter.icloud.com

Certificate

The complete raw certificate details for keyvalueservice.icloud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy5b7M1GOyeemqng75Vh
Slmfn+eKJ9OToCzobx5kD5uIKYwu7r1O4fGzc8rRNcQPtpnwiG0SQaee59y9v3na
7a02PrHjJDYQwDbijz9FxrF4GTFeE8BguA36CtH2qBuQRFeGxdAc8UaulLWbdbU6
V/En0l6eMW7go2BhtQyO7ecrOBk2Lo5mQSLqGaQGyblmv+v3pumjCszn0rYyDN+z
kPUvwUeVpZKCaZfu68F0OJTkenr7ycxIdznbFjZ71EJ10KQu2IfIonoIwHjFiVkc
p/nfqkOc5VkUL02EizcDxj6GEIE/bswrsaEnqyKB7/gKVOa7wFq+IsEa9NoFx/PJ
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 141456538666375708375330251714738246245
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple IST CA 2 - G1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-23 20:46:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-22 20:56:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'keyvalueservice.icloud.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23629423544039589652192487622046681373980913294853464784896358921077552699160198010925564728017466559091974258664444938474367048066991764951358488301271101504122803698397184362652540376813026465904954745198865632046398325662032870367521242002557361617635369757841076292448568118742175081781170105469260051287117512503010212288123203005290543160084830256869811243218549640268800585645508017050312313005989435414163294649798047066675848846594964893803063171960944317110663600935165021937378222034455277287643381099899812437972699827641706560588500453389701413601585013585869200523446555544968104980730932658082097121597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d87a94447c907090169edd179c01440386d62a29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/appleistca2g1.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-appleistca2g122'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1471 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p01-keyvalueservice-ic2.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's01-keyvalueservice.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p202-keyvalueservice-ic3.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p03-keyvalueservice-ic3.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p202-keyvalueservice.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keyvalueservice-ic3.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p02-keyvalueservice-ic2.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p02-keyvalueservice-ic3.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p04-keyvalueservice-ic2.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p202-keyvalueservice-ic4.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p04-keyvalueservice-ic1.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p01-keyvalueservice-ic3.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p04-keyvalueservice-ic4.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p01-keyvalueservice-ic1.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p02-keyvalueservice-ic4.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keyvalueservice-ic2.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keyvalueservice.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p01-keyvalueservice.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p200-keyvalueservice-ic3.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p200-keyvalueservice.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p03-keyvalueservice-ic4.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p201-keyvalueservice-ic3.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p200-keyvalueservice-ic1.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p02-keyvalueservice-ic1.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p03-keyvalueservice.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p201-keyvalueservice.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keyvalueservice-ic4.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p04-keyvalueservice.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keyvalueservice-ic1.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p03-keyvalueservice-ic2.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p03-keyvalueservice-ic1.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p202-keyvalueservice-ic2.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p01-keyvalueservice-ic4.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p200-keyvalueservice-ic4.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's02-keyvalueservice.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p04-keyvalueservice-ic3.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p201-keyvalueservice-ic1.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p202-keyvalueservice-ic1.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p201-keyvalueservice-ic2.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p200-keyvalueservice-ic2.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p02-keyvalueservice.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p201-keyvalueservice-ic4.icloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.5.11.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of any applicable terms and conditions of use and/or certification practice statements.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.apple.com/certificateauthority/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/appleistca2g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8303ec8a3029a26e7fb9d3783fc0a30dfdf2f01c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.6.27.15.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.6.27.11.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.6.27.7.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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