p101-ckdatabase.icloud.com

- Apple Inc. -

Issued by Apple IST CA 2 - G1

About this certificate

This digital certificate with serial number 2b:b9:0e:5d:0c:f5:c8:e0:d1:a9:ac:a1:64:1b:a4:9b was issued on by Apple Inc..

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Apple Inc.

Organization: Apple Inc.
State / Province: California
Country: US

Apple Inc.

Organization: Apple Inc.
Organization unit: Certification Authority
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2b:b9:0e:5d:0c:f5:c8:e0:d1:a9:ac:a1:64:1b:a4:9b
Serial Number (int): 58117670063544846160247944520708891803
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 96:09:87:d9:92:3b:63:eb:b5:5e:c8:b2:da:71:25:55:26:aa:e5:27
AuthorityKeyId: d8:7a:94:44:7c:90:70:90:16:9e:dd:17:9c:01:44:03:86:d6:2a:29

Fingerprint (sha1): 20:b9:8e:df:03:87:df:c9:73:58:95:40:02:60:bd:ce:cc:bf:eb:b0
Fingerprint (sha256): 00:46:7b:c5:30:92:13:5a:6c:3a:c4:f4:53:b0:dc:91:37:2f:3c:7c:62:81:7a:51:a4:ae:ac:c5:37:91:85:67

Issuing Certificate URL: http://certs.apple.com/appleistca2g1_bc.cer
Issuing Certificate URL: http://certs.apple.com/appleistca2g1.der

Revocation information

OCSP Server: http://ocsp.apple.com/ocsp03-appleistca2g129
CRL Distribution Point: http://crl.apple.com/appleistca2g1.crl

Check the revocation status for certificate p101-ckdatabase.icloud.com

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for p101-ckdatabase.icloud.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication

Extensions

13 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

p134-ckdatabase.icloud.com
p116-ckdatabase.icloud.com
p122-ckdatabase.icloud.com
p107-ckdatabase.icloud.com
p126-ckdatabase.icloud.com
p132-ckdatabase.icloud.com
p103-ckdatabase.icloud.com
p121-ckdatabase.icloud.com
p140-ckdatabase.icloud.com
p142-ckdatabase.icloud.com
p113-ckdatabase.icloud.com
p128-ckdatabase.icloud.com
p112-ckdatabase.icloud.com
p102-ckdatabase.icloud.com
p130-ckdatabase.icloud.com
p139-ckdatabase.icloud.com
p129-ckdatabase.icloud.com
p141-ckdatabase.icloud.com
p135-ckdatabase.icloud.com
p110-ckdatabase.icloud.com
p118-ckdatabase.icloud.com
p109-ckdatabase.icloud.com
p137-ckdatabase.icloud.com
p138-ckdatabase.icloud.com
p119-ckdatabase.icloud.com
p114-ckdatabase.icloud.com
p106-ckdatabase.icloud.com
p104-ckdatabase.icloud.com
p120-ckdatabase.icloud.com
p123-ckdatabase.icloud.com
p108-ckdatabase.icloud.com
p117-ckdatabase.icloud.com
p125-ckdatabase.icloud.com
p136-ckdatabase.icloud.com
p127-ckdatabase.icloud.com
p131-ckdatabase.icloud.com
p111-ckdatabase.icloud.com
p101-ckdatabase.icloud.com
p124-ckdatabase.icloud.com
p133-ckdatabase.icloud.com
p105-ckdatabase.icloud.com
p115-ckdatabase.icloud.com

Other certificates including the domain name icloud.com

(limited to 100 certificates)
p09-mccgateway.icloud.com
keyvalueservice.icloud.com
ckdatabase.icloud.com
caldav.icloud.com
discussions-uat.apple.com
p101-ckdatabase.icloud.com
iwmb1.icloud.com
ckcoderouter.icloud.com
p203-sharedstreams-china.icloud.com
p301-fmipweb-china.icloud.com
p127-mcc.icloud.com
p101-iwmb6.icloud.com
prod-setup.icloud.com
cls-webdata.education.icloud.com
drivews.icloud.com
metrics.icloud.com
fmf-china.icloud.com
aolauth.icloud.com
ckdevice.icloud.com
mobilebackup-internal-china.icloud.com
calendarws.icloud.com
p301-iwmb3-china.icloud.com
iwmb.icloud.com
ckdatabasews.icloud.com
fmfweb.icloud.com
p301-ckdatabase-china.icloud.com
p203-escrowproxy-china.icloud.com
drive.icloud.com
p301-notesws.icloud.com
iwmb8.icloud.com
p301-iwmb-china.icloud.com
p101-quota-china.icloud.com
fmipweb.icloud.com
fmfmail.icloud.com
fmipweb-china.icloud.com
iwmb2.icloud.com
ubiquity.icloud.com
calendar.icloud.com
p101-sharedstreams-china.icloud.com
ckshare.icloud.com
fmipmobile.icloud.com
newspublisherapi.icloud.com
p101-iwmb7.icloud.com
ckcoderouter.icloud.com
iworkexportws.icloud.com
fmipalcweb.icloud.com
e3.icloud.com
photos.icloud.com
drivews.icloud.com
calendars-china.icloud.com
p301-docws-china.icloud.com
p101-docws.icloud.com
iwres.icloud.com
p25-cache.iwork.icloud.com
streams-china.icloud.com
p101-iwmb5-china.icloud.com
p101-fmfmobile.icloud.com
www.me.com
photos.icloud.com
calendars-china.icloud.com
probe.icloud.com
ubiquity.icloud.com
p01-mcc.icloud.com
p203-iwmb4-china.icloud.com
iworkpreviewapi.icloud.com
p101-escrowproxy.icloud.com
ckdevice-china.icloud.com
contactsws.icloud.com
p203-notesws-china.icloud.com
mail.icloud.com
p101-iwmb1-china.icloud.com
p101-iwres-china.icloud.com
iwmb0-china.icloud.com
p301-setup.icloud.com
calendars-china.icloud.com
p101-content.icloud.com
ckcoderouter-china.icloud.com
iwmb9-china.icloud.com
p301-drivews.icloud.com
p75-cache.iwork.icloud.com
p301-caldav-china.icloud.com
networkresponsivetest.icloud.com
uploadimagews.icloud.com
uploadimagews.icloud.com
discussions-uat.apple.com
statici.icloud.com
discussions-uat.apple.com
aolauth.icloud.com
contactsws.icloud.com
content.icloud.com
quota.icloud.com
discussions-uat.apple.com
calendars.icloud.com
acfeedbackws.icloud.com
fmipmail-china.icloud.com
ckshare.icloud.com
iworkthumbnailws.icloud.com
ckcoderouter-china.icloud.com
p101-fmfweb.icloud.com
ckcoderouter.icloud.com

Certificate

The complete raw certificate details for p101-ckdatabase.icloud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEkvawfT+lhMOtePFQLZMWryayZc/k
Hp9RMK7wjABRiVpBDgJmSFp9mhJ3Gn9qFj7m1/DYjjdEvl2vzE856JVRnQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 58117670063544846160247944520708891803
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple IST CA 2 - G1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-17 18:33:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 18:43:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'p101-ckdatabase.icloud.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000492f6b07d3fa584c3ad78f1502d9316af26b265cfe41e9f5130aef08c0051895a410e0266485a7d9a12771a7f6a163ee6d7f0d88e3744be5dafcc4f39e895519d
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d87a94447c907090169edd179c01440386d62a29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (172 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/appleistca2g1_bc.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/appleistca2g1.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-appleistca2g129'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1180 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p134-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p116-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p122-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p107-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p126-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p132-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p103-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p121-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p140-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p142-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p113-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p128-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p112-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p102-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p130-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p139-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p129-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p141-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p135-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p110-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p118-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p109-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p137-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p138-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p119-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p114-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p106-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p104-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p120-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p123-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p108-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p117-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p125-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p136-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p127-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p131-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p111-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p101-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p124-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p133-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p105-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p115-ckdatabase.icloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (255 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.5.11.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.apple.com/certificateauthority/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of any applicable terms and conditions of use and/or certification practice statements.'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/appleistca2g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							960987d9923b63ebb55ec8b2da71255526aae527
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.6.27.7.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.6.27.15.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.6.27.11.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							01df007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000185c10b75ac0000040300473045022100bd46c4356cdb7b932c598c5d422167b6fe63ee2330fe479d221240f81170dd08022079ecd38c8a5b76de13d0f33b1add52a20258d22f5cb5defb43b0038730ebfed5007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000185c10b75c4000004030047304502205bf54485062d685bbbbad9cd0492ec0104f4f4f118afc489d4e4fa00f979ae37022100f54e35de5778154f4297761137c9a38b4c372fd12eca45b1496901fdd65d5b0f0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185c10b75ef000004030046304402203612bebbfd2d36e41f05d2fad8d5ff1ac86ad44bf016703e54bf409a541c2807022048955a9aa2ac006ce2f26f1d93562853eea0576cf7b3bd6027719ecd59d219b4007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000185c10b75a10000040300473045022100f4b92ce8f964303f782eb044ffa2051eac9ab6b76064a04c891255408f27fd13022002213f9eb0435be3b804f66b977757df48413d8f109b6f7578d31c49774af47b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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