p101-fmfmobile.icloud.com

- Apple Inc. -

Issued by Apple IST CA 2 - G1

About this certificate

This digital certificate with serial number 4f:e7:a9:a3:1e:00:f7:56:50:7c:f3:b0:17:e7:e1:05 was issued on by Apple Inc..

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Apple Inc.

Organization: Apple Inc.
State / Province: California
Country: US

Apple Inc.

Organization: Apple Inc.
Organization unit: Certification Authority
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 4f:e7:a9:a3:1e:00:f7:56:50:7c:f3:b0:17:e7:e1:05
Serial Number (int): 106211872892029124410361366808248180997
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 95:30:7b:a5:e3:c9:7f:0f:3d:91:8b:cc:36:6e:7f:0f:67:85:0a:2e
AuthorityKeyId: d8:7a:94:44:7c:90:70:90:16:9e:dd:17:9c:01:44:03:86:d6:2a:29

Fingerprint (sha1): 57:d2:07:ee:8c:5d:25:99:9c:55:ce:74:50:85:dd:4c:d8:d7:7e:a6
Fingerprint (sha256): 02:5f:25:e3:2c:91:cf:da:12:af:75:46:d5:70:de:9d:00:d3:15:89:67:44:34:fa:58:c1:6b:9f:90:e9:bd:49

Issuing Certificate URL: http://certs.apple.com/appleistca2g1_bc.cer
Issuing Certificate URL: http://certs.apple.com/appleistca2g1.der

Revocation information

OCSP Server: http://ocsp.apple.com/ocsp03-appleistca2g129
CRL Distribution Point: http://crl.apple.com/appleistca2g1.crl

Check the revocation status for certificate p101-fmfmobile.icloud.com

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for p101-fmfmobile.icloud.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication

Extensions

13 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

p101-fmfmobile.icloud.com
p102-fmfmobile.icloud.com
p103-fmfmobile.icloud.com
p104-fmfmobile.icloud.com
p105-fmfmobile.icloud.com
p106-fmfmobile.icloud.com
p107-fmfmobile.icloud.com
p108-fmfmobile.icloud.com
p109-fmfmobile.icloud.com
p110-fmfmobile.icloud.com
p111-fmfmobile.icloud.com
p112-fmfmobile.icloud.com
p113-fmfmobile.icloud.com
p114-fmfmobile.icloud.com
p115-fmfmobile.icloud.com
p116-fmfmobile.icloud.com
p117-fmfmobile.icloud.com
p118-fmfmobile.icloud.com
p119-fmfmobile.icloud.com
p120-fmfmobile.icloud.com
p121-fmfmobile.icloud.com
p122-fmfmobile.icloud.com
p123-fmfmobile.icloud.com
p124-fmfmobile.icloud.com
p125-fmfmobile.icloud.com
p126-fmfmobile.icloud.com
p127-fmfmobile.icloud.com
p128-fmfmobile.icloud.com
p129-fmfmobile.icloud.com
p130-fmfmobile.icloud.com
p131-fmfmobile.icloud.com
p132-fmfmobile.icloud.com
p133-fmfmobile.icloud.com
p134-fmfmobile.icloud.com
p135-fmfmobile.icloud.com
p136-fmfmobile.icloud.com
p137-fmfmobile.icloud.com
p138-fmfmobile.icloud.com
p139-fmfmobile.icloud.com
p140-fmfmobile.icloud.com
p141-fmfmobile.icloud.com
p142-fmfmobile.icloud.com
p143-fmfmobile.icloud.com
p144-fmfmobile.icloud.com
p145-fmfmobile.icloud.com
p146-fmfmobile.icloud.com
p147-fmfmobile.icloud.com
p148-fmfmobile.icloud.com
p149-fmfmobile.icloud.com
p150-fmfmobile.icloud.com
p151-fmfmobile.icloud.com
p152-fmfmobile.icloud.com
p153-fmfmobile.icloud.com
p154-fmfmobile.icloud.com
p155-fmfmobile.icloud.com
p156-fmfmobile.icloud.com
p157-fmfmobile.icloud.com
p158-fmfmobile.icloud.com
p159-fmfmobile.icloud.com
p160-fmfmobile.icloud.com
p161-fmfmobile.icloud.com
p162-fmfmobile.icloud.com
p163-fmfmobile.icloud.com
p164-fmfmobile.icloud.com
p165-fmfmobile.icloud.com
p166-fmfmobile.icloud.com
p167-fmfmobile.icloud.com
p168-fmfmobile.icloud.com
p169-fmfmobile.icloud.com
p170-fmfmobile.icloud.com
p171-fmfmobile.icloud.com
p172-fmfmobile.icloud.com
p173-fmfmobile.icloud.com
p174-fmfmobile.icloud.com
p175-fmfmobile.icloud.com
p176-fmfmobile.icloud.com
p177-fmfmobile.icloud.com
p178-fmfmobile.icloud.com
p179-fmfmobile.icloud.com
p180-fmfmobile.icloud.com
p181-fmfmobile.icloud.com
p182-fmfmobile.icloud.com

Other certificates including the domain name icloud.com

(limited to 100 certificates)
p09-mccgateway.icloud.com
keyvalueservice.icloud.com
ckdatabase.icloud.com
caldav.icloud.com
discussions-uat.apple.com
p101-ckdatabase.icloud.com
iwmb1.icloud.com
ckcoderouter.icloud.com
p203-sharedstreams-china.icloud.com
p301-fmipweb-china.icloud.com
p127-mcc.icloud.com
p101-iwmb6.icloud.com
prod-setup.icloud.com
cls-webdata.education.icloud.com
drivews.icloud.com
metrics.icloud.com
fmf-china.icloud.com
aolauth.icloud.com
ckdevice.icloud.com
mobilebackup-internal-china.icloud.com
calendarws.icloud.com
p301-iwmb3-china.icloud.com
iwmb.icloud.com
ckdatabasews.icloud.com
fmfweb.icloud.com
p301-ckdatabase-china.icloud.com
p203-escrowproxy-china.icloud.com
drive.icloud.com
p301-notesws.icloud.com
iwmb8.icloud.com
p301-iwmb-china.icloud.com
p101-quota-china.icloud.com
fmipweb.icloud.com
fmfmail.icloud.com
fmipweb-china.icloud.com
iwmb2.icloud.com
ubiquity.icloud.com
calendar.icloud.com
p101-sharedstreams-china.icloud.com
ckshare.icloud.com
fmipmobile.icloud.com
newspublisherapi.icloud.com
p101-iwmb7.icloud.com
ckcoderouter.icloud.com
iworkexportws.icloud.com
fmipalcweb.icloud.com
e3.icloud.com
photos.icloud.com
drivews.icloud.com
calendars-china.icloud.com
p301-docws-china.icloud.com
p101-docws.icloud.com
iwres.icloud.com
p25-cache.iwork.icloud.com
streams-china.icloud.com
p101-iwmb5-china.icloud.com
p101-fmfmobile.icloud.com
www.me.com
photos.icloud.com
calendars-china.icloud.com
probe.icloud.com
ubiquity.icloud.com
p01-mcc.icloud.com
p203-iwmb4-china.icloud.com
iworkpreviewapi.icloud.com
p101-escrowproxy.icloud.com
ckdevice-china.icloud.com
contactsws.icloud.com
p203-notesws-china.icloud.com
mail.icloud.com
p101-iwmb1-china.icloud.com
p101-iwres-china.icloud.com
iwmb0-china.icloud.com
p301-setup.icloud.com
calendars-china.icloud.com
p101-content.icloud.com
ckcoderouter-china.icloud.com
iwmb9-china.icloud.com
p301-drivews.icloud.com
p75-cache.iwork.icloud.com
p301-caldav-china.icloud.com
networkresponsivetest.icloud.com
uploadimagews.icloud.com
uploadimagews.icloud.com
discussions-uat.apple.com
statici.icloud.com
discussions-uat.apple.com
aolauth.icloud.com
contactsws.icloud.com
content.icloud.com
quota.icloud.com
discussions-uat.apple.com
calendars.icloud.com
acfeedbackws.icloud.com
fmipmail-china.icloud.com
ckshare.icloud.com
iworkthumbnailws.icloud.com
ckcoderouter-china.icloud.com
p101-fmfweb.icloud.com
ckcoderouter.icloud.com

Certificate

The complete raw certificate details for p101-fmfmobile.icloud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEzUZDPmXkhMKs3IuH+8S3UvWJwe5o
DAVOTt7UUBsWyYyu7MEc0p4Vwe0oRENwKDeO4cs0zx+VLUhrWNqV5/UPIA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 106211872892029124410361366808248180997
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple IST CA 2 - G1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 05:02:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-25 05:02:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'p101-fmfmobile.icloud.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004cd46433e65e484c2acdc8b87fbc4b752f589c1ee680c054e4eded4501b16c98caeecc11cd29e15c1ed2844437028378ee1cb34cf1f952d486b58da95e7f50f20
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d87a94447c907090169edd179c01440386d62a29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (172 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/appleistca2g1_bc.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/appleistca2g1.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-appleistca2g129'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2218 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p101-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p102-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p103-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p104-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p105-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p106-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p107-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p108-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p109-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p110-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p111-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p112-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p113-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p114-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p115-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p116-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p117-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p118-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p119-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p120-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p121-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p122-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p123-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p124-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p125-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p126-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p127-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p128-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p129-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p130-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p131-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p132-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p133-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p134-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p135-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p136-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p137-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p138-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p139-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p140-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p141-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p142-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p143-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p144-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p145-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p146-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p147-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p148-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p149-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p150-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p151-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p152-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p153-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p154-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p155-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p156-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p157-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p158-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p159-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p160-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p161-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p162-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p163-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p164-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p165-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p166-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p167-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p168-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p169-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p170-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p171-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p172-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p173-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p174-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p175-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p176-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p177-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p178-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p179-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p180-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p181-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p182-fmfmobile.icloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.apple.com/certificateauthority/public'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.5.11.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/appleistca2g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95307ba5e3c97f0f3d918bcc366e7f0f67850a2e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.6.27.7.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.6.27.15.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.6.27.11.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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