ckcoderouter.icloud.com

- Apple Inc. -

Issued by Apple IST CA 2 - G1

About this certificate

This digital certificate with serial number 06:88:0c:ae:52:2c:92:3d:ea:eb:f0:ec:3f:fb:f0:5e was issued on by Apple Inc..

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Apple Inc.

Organization: Apple Inc.
State / Province: California
Country: US

Apple Inc.

Organization: Apple Inc.
Organization unit: Certification Authority
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:88:0c:ae:52:2c:92:3d:ea:eb:f0:ec:3f:fb:f0:5e
Serial Number (int): 8681777547517407246041933811600322654
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 4d:f7:73:a4:28:dc:23:80:19:d7:62:98:9c:59:d5:83:aa:41:95:c0
AuthorityKeyId: d8:7a:94:44:7c:90:70:90:16:9e:dd:17:9c:01:44:03:86:d6:2a:29

Fingerprint (sha1): 07:e7:16:e8:74:44:11:5b:5c:9b:2a:6b:2d:53:01:ad:a2:b0:18:b7
Fingerprint (sha256): 02:04:5e:5b:ec:fe:e3:34:91:02:f8:a9:a1:c6:6c:01:6a:fd:0b:3b:3a:c7:59:1c:ea:1a:b5:a3:23:e0:00:95

Issuing Certificate URL: http://certs.apple.com/appleistca2g1_bc.cer
Issuing Certificate URL: http://certs.apple.com/appleistca2g1.der

Revocation information

OCSP Server: http://ocsp.apple.com/ocsp03-appleistca2g129
CRL Distribution Point: http://crl.apple.com/appleistca2g1.crl

Check the revocation status for certificate ckcoderouter.icloud.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ckcoderouter.icloud.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication

Extensions

13 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ckcoderouter.icloud.com
p01-ckcoderouter.icloud.com
p02-ckcoderouter.icloud.com
p03-ckcoderouter.icloud.com
p04-ckcoderouter.icloud.com
s01-ckcoderouter.icloud.com
s02-ckcoderouter.icloud.com
ckcoderouter-ic1.icloud.com
ckcoderouter-ic2.icloud.com
ckcoderouter-ic3.icloud.com
p01-ckcoderouter-ic1.icloud.com
p01-ckcoderouter-ic2.icloud.com
p01-ckcoderouter-ic3.icloud.com
p02-ckcoderouter-ic1.icloud.com
p02-ckcoderouter-ic2.icloud.com
p02-ckcoderouter-ic3.icloud.com
p03-ckcoderouter-ic1.icloud.com
p03-ckcoderouter-ic2.icloud.com
p03-ckcoderouter-ic3.icloud.com
p04-ckcoderouter-ic1.icloud.com
p04-ckcoderouter-ic2.icloud.com
p04-ckcoderouter-ic3.icloud.com

Other certificates including the domain name icloud.com

(limited to 100 certificates)
p09-mccgateway.icloud.com
keyvalueservice.icloud.com
ckdatabase.icloud.com
caldav.icloud.com
discussions-uat.apple.com
p101-ckdatabase.icloud.com
iwmb1.icloud.com
ckcoderouter.icloud.com
p203-sharedstreams-china.icloud.com
p301-fmipweb-china.icloud.com
p127-mcc.icloud.com
p101-iwmb6.icloud.com
prod-setup.icloud.com
cls-webdata.education.icloud.com
drivews.icloud.com
metrics.icloud.com
fmf-china.icloud.com
aolauth.icloud.com
ckdevice.icloud.com
mobilebackup-internal-china.icloud.com
calendarws.icloud.com
p301-iwmb3-china.icloud.com
iwmb.icloud.com
ckdatabasews.icloud.com
fmfweb.icloud.com
p301-ckdatabase-china.icloud.com
p203-escrowproxy-china.icloud.com
drive.icloud.com
p301-notesws.icloud.com
iwmb8.icloud.com
p301-iwmb-china.icloud.com
p101-quota-china.icloud.com
fmipweb.icloud.com
fmfmail.icloud.com
fmipweb-china.icloud.com
iwmb2.icloud.com
ubiquity.icloud.com
calendar.icloud.com
p101-sharedstreams-china.icloud.com
ckshare.icloud.com
fmipmobile.icloud.com
newspublisherapi.icloud.com
p101-iwmb7.icloud.com
ckcoderouter.icloud.com
iworkexportws.icloud.com
fmipalcweb.icloud.com
e3.icloud.com
photos.icloud.com
drivews.icloud.com
calendars-china.icloud.com
p301-docws-china.icloud.com
p101-docws.icloud.com
iwres.icloud.com
p25-cache.iwork.icloud.com
streams-china.icloud.com
p101-iwmb5-china.icloud.com
p101-fmfmobile.icloud.com
www.me.com
photos.icloud.com
calendars-china.icloud.com
probe.icloud.com
ubiquity.icloud.com
p01-mcc.icloud.com
p203-iwmb4-china.icloud.com
iworkpreviewapi.icloud.com
p101-escrowproxy.icloud.com
ckdevice-china.icloud.com
contactsws.icloud.com
p203-notesws-china.icloud.com
mail.icloud.com
p101-iwmb1-china.icloud.com
p101-iwres-china.icloud.com
iwmb0-china.icloud.com
p301-setup.icloud.com
calendars-china.icloud.com
p101-content.icloud.com
ckcoderouter-china.icloud.com
iwmb9-china.icloud.com
p301-drivews.icloud.com
p75-cache.iwork.icloud.com
p301-caldav-china.icloud.com
networkresponsivetest.icloud.com
uploadimagews.icloud.com
uploadimagews.icloud.com
discussions-uat.apple.com
statici.icloud.com
discussions-uat.apple.com
aolauth.icloud.com
contactsws.icloud.com
content.icloud.com
quota.icloud.com
discussions-uat.apple.com
calendars.icloud.com
acfeedbackws.icloud.com
fmipmail-china.icloud.com
ckshare.icloud.com
iworkthumbnailws.icloud.com
ckcoderouter-china.icloud.com
p101-fmfweb.icloud.com
ckcoderouter.icloud.com

Certificate

The complete raw certificate details for ckcoderouter.icloud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAElgz2tq03p4poacOqnFfU1Xmxhl6e
vsEEgf6Nl5MNV+SQZKldBK2dhPT+WL7BJdd8phd5rd4e1rG4lQIUgH/wOw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8681777547517407246041933811600322654
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple IST CA 2 - G1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 11:40:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-12 11:40:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ckcoderouter.icloud.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004960cf6b6ad37a78a6869c3aa9c57d4d579b1865e9ebec10481fe8d97930d57e49064a95d04ad9d84f4fe58bec125d77ca61779adde1ed6b1b8950214807ff03b
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d87a94447c907090169edd179c01440386d62a29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (172 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/appleistca2g1_bc.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/appleistca2g1.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-appleistca2g129'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (686 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ckcoderouter.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p01-ckcoderouter.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p02-ckcoderouter.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p03-ckcoderouter.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p04-ckcoderouter.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's01-ckcoderouter.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's02-ckcoderouter.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ckcoderouter-ic1.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ckcoderouter-ic2.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ckcoderouter-ic3.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p01-ckcoderouter-ic1.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p01-ckcoderouter-ic2.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p01-ckcoderouter-ic3.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p02-ckcoderouter-ic1.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p02-ckcoderouter-ic2.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p02-ckcoderouter-ic3.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p03-ckcoderouter-ic1.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p03-ckcoderouter-ic2.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p03-ckcoderouter-ic3.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p04-ckcoderouter-ic1.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p04-ckcoderouter-ic2.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p04-ckcoderouter-ic3.icloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.apple.com/certificateauthority/public'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.5.11.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/appleistca2g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4df773a428dc238019d762989c59d583aa4195c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.6.27.7.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.6.27.15.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.6.27.11.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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