p301-fmipweb-china.icloud.com

- Apple Inc. -

Issued by Apple IST CA 2 - G1

About this certificate

This digital certificate with serial number 60:c6:54:f0:2c:b5:63:d6:89:4a:6e:17:8f:45:13:c6 was issued on by Apple Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Apple Inc.

Organization: Apple Inc.
State / Province: California
Country: US

Apple Inc.

Organization: Apple Inc.
Organization unit: Certification Authority
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 60:c6:54:f0:2c:b5:63:d6:89:4a:6e:17:8f:45:13:c6
Serial Number (int): 128635685124344157310238457431926838214
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 28:03:47:77:a2:2d:48:65:99:f4:be:03:14:24:e7:23:aa:4b:72:3b
AuthorityKeyId: d8:7a:94:44:7c:90:70:90:16:9e:dd:17:9c:01:44:03:86:d6:2a:29

Fingerprint (sha1): ba:6b:d1:28:11:4c:2c:cc:cd:f3:29:25:39:24:7b:21:a4:51:ad:14
Fingerprint (sha256): 00:a8:fe:5a:ee:ce:ec:cd:0a:c8:70:23:db:c3:04:f3:5f:6b:49:0a:f6:de:c4:a7:fe:ef:71:01:6e:2b:2e:83

Issuing Certificate URL: http://certs.apple.com/appleistca2g1_bc.cer
Issuing Certificate URL: http://certs.apple.com/appleistca2g1.der

Revocation information

OCSP Server: http://ocsp.apple.com/ocsp03-appleistca2g129
CRL Distribution Point: http://crl.apple.com/appleistca2g1.crl

Check the revocation status for certificate p301-fmipweb-china.icloud.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for p301-fmipweb-china.icloud.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication

Extensions

13 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

p301-fmipweb-china.icloud.com
p302-fmipweb-china.icloud.com
p303-fmipweb-china.icloud.com
p304-fmipweb-china.icloud.com
p305-fmipweb-china.icloud.com
p306-fmipweb-china.icloud.com

Other certificates including the domain name icloud.com

(limited to 100 certificates)
p09-mccgateway.icloud.com
keyvalueservice.icloud.com
ckdatabase.icloud.com
caldav.icloud.com
discussions-uat.apple.com
p101-ckdatabase.icloud.com
iwmb1.icloud.com
ckcoderouter.icloud.com
p203-sharedstreams-china.icloud.com
p301-fmipweb-china.icloud.com
p127-mcc.icloud.com
p101-iwmb6.icloud.com
prod-setup.icloud.com
cls-webdata.education.icloud.com
drivews.icloud.com
metrics.icloud.com
fmf-china.icloud.com
aolauth.icloud.com
ckdevice.icloud.com
mobilebackup-internal-china.icloud.com
calendarws.icloud.com
p301-iwmb3-china.icloud.com
iwmb.icloud.com
ckdatabasews.icloud.com
fmfweb.icloud.com
p301-ckdatabase-china.icloud.com
p203-escrowproxy-china.icloud.com
drive.icloud.com
p301-notesws.icloud.com
iwmb8.icloud.com
p301-iwmb-china.icloud.com
p101-quota-china.icloud.com
fmipweb.icloud.com
fmfmail.icloud.com
fmipweb-china.icloud.com
iwmb2.icloud.com
ubiquity.icloud.com
calendar.icloud.com
p101-sharedstreams-china.icloud.com
ckshare.icloud.com
fmipmobile.icloud.com
newspublisherapi.icloud.com
p101-iwmb7.icloud.com
ckcoderouter.icloud.com
iworkexportws.icloud.com
fmipalcweb.icloud.com
e3.icloud.com
photos.icloud.com
drivews.icloud.com
calendars-china.icloud.com
p301-docws-china.icloud.com
p101-docws.icloud.com
iwres.icloud.com
p25-cache.iwork.icloud.com
streams-china.icloud.com
p101-iwmb5-china.icloud.com
p101-fmfmobile.icloud.com
www.me.com
photos.icloud.com
calendars-china.icloud.com
probe.icloud.com
ubiquity.icloud.com
p01-mcc.icloud.com
p203-iwmb4-china.icloud.com
iworkpreviewapi.icloud.com
p101-escrowproxy.icloud.com
ckdevice-china.icloud.com
contactsws.icloud.com
p203-notesws-china.icloud.com
mail.icloud.com
p101-iwmb1-china.icloud.com
p101-iwres-china.icloud.com
iwmb0-china.icloud.com
p301-setup.icloud.com
calendars-china.icloud.com
p101-content.icloud.com
ckcoderouter-china.icloud.com
iwmb9-china.icloud.com
p301-drivews.icloud.com
p75-cache.iwork.icloud.com
p301-caldav-china.icloud.com
networkresponsivetest.icloud.com
uploadimagews.icloud.com
uploadimagews.icloud.com
discussions-uat.apple.com
statici.icloud.com
discussions-uat.apple.com
aolauth.icloud.com
contactsws.icloud.com
content.icloud.com
quota.icloud.com
discussions-uat.apple.com
calendars.icloud.com
acfeedbackws.icloud.com
fmipmail-china.icloud.com
ckshare.icloud.com
iworkthumbnailws.icloud.com
ckcoderouter-china.icloud.com
p101-fmfweb.icloud.com
ckcoderouter.icloud.com

Certificate

The complete raw certificate details for p301-fmipweb-china.icloud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHTjCCBjagAwIBAgIQYMZU8Cy1Y9aJSm4Xj0UTxjANBgkqhkiG9w0BAQsFADBi
MRwwGgYDVQQDExNBcHBsZSBJU1QgQ0EgMiAtIEcxMSAwHgYDVQQLExdDZXJ0aWZp
Y2F0aW9uIEF1dGhvcml0eTETMBEGA1UEChMKQXBwbGUgSW5jLjELMAkGA1UEBhMC
VVMwHhcNMjMxMTAxMDgwNjI5WhcNMjQxMTMwMDgwNjI4WjBfMQswCQYDVQQGEwJV
UzETMBEGA1UECAwKQ2FsaWZvcm5pYTETMBEGA1UECgwKQXBwbGUgSW5jLjEmMCQG
A1UEAwwdcDMwMS1mbWlwd2ViLWNoaW5hLmljbG91ZC5jb20wWTATBgcqhkjOPQIB
BggqhkjOPQMBBwNCAARIlu3KXB3LYadDIXGCLpS6EYtexEbHge+tF8cF3Owust5+
X0whyu+tLhuWeqDWq8kls6r52AoJ5p0axjn4Xr5eo4IEzDCCBMgwDAYDVR0TAQH/
BAIwADAfBgNVHSMEGDAWgBTYepREfJBwkBae3RecAUQDhtYqKTCBuQYIKwYBBQUH
AQEEgawwgakwNwYIKwYBBQUHMAKGK2h0dHA6Ly9jZXJ0cy5hcHBsZS5jb20vYXBw
bGVpc3RjYTJnMV9iYy5jZXIwNAYIKwYBBQUHMAKGKGh0dHA6Ly9jZXJ0cy5hcHBs
ZS5jb20vYXBwbGVpc3RjYTJnMS5kZXIwOAYIKwYBBQUHMAGGLGh0dHA6Ly9vY3Nw
LmFwcGxlLmNvbS9vY3NwMDMtYXBwbGVpc3RjYTJnMTI5MIHFBgNVHREEgb0wgbqC
HXAzMDEtZm1pcHdlYi1jaGluYS5pY2xvdWQuY29tgh1wMzAyLWZtaXB3ZWItY2hp
bmEuaWNsb3VkLmNvbYIdcDMwMy1mbWlwd2ViLWNoaW5hLmljbG91ZC5jb22CHXAz
MDQtZm1pcHdlYi1jaGluYS5pY2xvdWQuY29tgh1wMzA1LWZtaXB3ZWItY2hpbmEu
aWNsb3VkLmNvbYIdcDMwNi1mbWlwd2ViLWNoaW5hLmljbG91ZC5jb20wYgYDVR0g
BFswWTBJBgZngQwBAgIwPzA9BggrBgEFBQcCARYxaHR0cHM6Ly93d3cuYXBwbGUu
Y29tL2NlcnRpZmljYXRlYXV0aG9yaXR5L3B1YmxpYzAMBgoqhkiG92NkBQsEMBMG
A1UdJQQMMAoGCCsGAQUFBwMBMDcGA1UdHwQwMC4wLKAqoCiGJmh0dHA6Ly9jcmwu
YXBwbGUuY29tL2FwcGxlaXN0Y2EyZzEuY3JsMB0GA1UdDgQWBBQoA0d3oi1IZZn0
vgMUJOcjqktyOzAOBgNVHQ8BAf8EBAMCB4AwEQYLKoZIhvdjZAYbBwIEAgUAMBEG
CyqGSIb3Y2QGGw8CBAIFADARBgsqhkiG92NkBhsLAgQCBQAwggH3BgorBgEEAdZ5
AgQCBIIB5wSCAeMB4QB3AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRu
AAABi4n0mBgAAAQDAEgwRgIhAIJfj2McjVLGwOoDDWtX7AdoccMYHx26cTrXKpyL
BHI5AiEA7YyJArAeg2xCZL7mlP9CPQbYCz5xz/k49odqahnin1QAdgBIsONr2qZH
NA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYuJ9JgGAAAEAwBHMEUCIQCtZWEa
G9O71DIKxcr4Zx5JVQvzD1VxeC/vz0HjnNt2pgIgKH+yZL1naxqi/FQpqir0O3Xg
ZxbJCJDjgUU83YzSK0cAdQDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7
qwAAAYuJ9JgbAAAEAwBGMEQCIHqCrkpqKZQlzeu9h+C0O9Fy3uhPEG6neF3q75dI
1ZduAiBaMbXBnAYyenriaDkuTj3lA+9xPPBmw3RWFY+1Ln1dnAB3AO7N0GTV2xrO
xVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABi4n0mA0AAAQDAEgwRgIhALxJjoQh
mGR1SV1sjc+XUL89xwe9J+q5f6g+LbHwWs4KAiEA/JmtEglDDsKSbwV5OUbPwEX6
eEhvbNnBDjW2E6lzHNAwDQYJKoZIhvcNAQELBQADggEBAJPPbUYzy9C8s74RJSDG
vpzRoUrGy/CqHApnKhvvYe3XAiWeNggjqstJ12Ox/bY2tlE/bKoo8XqFQKT+Adjb
DhnpAM9OgF3eN8Xb7wxBM4rRYDDz9cGs0c9ZZc5mWvWsfjN6mbgWLMEaJCWWmFyf
FELJ33jMuJXUTpf1YBj0Imphjkf/BpWejWqHVeaXaCrY8bHa58uNMxBrAUztsx7T
9PIpAl4hH0d3Xm/x9aun3P+qJfYAgVAt5/7CateehfqWTYzKp2H56AtijERjUenh
04ujOPMETeRF8XUglLkqgXaoW0dRCZt1JQXUHU2ONzPYfM/ssgpYbK7+dK1ks9Or
6ek=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAESJbtylwdy2GnQyFxgi6UuhGLXsRG
x4HvrRfHBdzsLrLefl9MIcrvrS4blnqg1qvJJbOq+dgKCeadGsY5+F6+Xg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 128635685124344157310238457431926838214
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple IST CA 2 - G1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 08:06:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-30 08:06:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'p301-fmipweb-china.icloud.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00044896edca5c1dcb61a7432171822e94ba118b5ec446c781efad17c705dcec2eb2de7e5f4c21caefad2e1b967aa0d6abc925b3aaf9d80a09e69d1ac639f85ebe5e
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d87a94447c907090169edd179c01440386d62a29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (172 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/appleistca2g1_bc.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/appleistca2g1.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-appleistca2g129'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (189 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p301-fmipweb-china.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p302-fmipweb-china.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p303-fmipweb-china.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p304-fmipweb-china.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p305-fmipweb-china.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p306-fmipweb-china.icloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.apple.com/certificateauthority/public'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.5.11.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/appleistca2g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28034777a22d486599f4be031424e723aa4b723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.6.27.7.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.6.27.15.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.6.27.11.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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