ckdevice-china.icloud.com
- Apple Inc. -
Issued by Apple IST CA 2 - G1
About this certificate
This digital certificate with serial number 6b:86:f0:e2:a6:c8:b8:47:e1:c7:cb:a8:c4:11:f7:ef was issued on by Apple Inc..
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Apple Inc.
Organization:
Apple Inc.
State / Province:
California
Country: US
Country: US
Apple Inc.
Organization:
Apple Inc.
Organization unit: Certification Authority
Organization unit: Certification Authority
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 6b:86:f0:e2:a6:c8:b8:47:e1:c7:cb:a8:c4:11:f7:efSerial Number (int): 142928049063516436963259566035309819887
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 23:a4:9d:21:24:dd:98:cc:42:10:c8:3f:20:b8:d0:d7:1a:5c:8d:a5
AuthorityKeyId: d8:7a:94:44:7c:90:70:90:16:9e:dd:17:9c:01:44:03:86:d6:2a:29
Fingerprint (sha1): 68:2d:49:cf:93:56:c1:60:e1:cb:79:0f:11:a1:c6:77:b5:ef:9d:34
Fingerprint (sha256): 02:c1:ce:e2:47:ed:db:ca:dd:39:ce:a3:66:e0:78:1a:6d:d4:e0:16:46:cd:74:bf:d0:27:09:23:a6:a3:63:87
Issuing Certificate URL: http://certs.apple.com/appleistca2g1.der
Revocation information
OCSP Server: http://ocsp.apple.com/ocsp03-appleistca2g122CRL Distribution Point: http://crl.apple.com/appleistca2g1.crl
Check the revocation status for certificate ckdevice-china.icloud.com
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ckdevice-china.icloud.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
13 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ckdevice-china.icloud.com
p04-ckdevice-china.icloud.com
s01-ckdevice-china.icloud.com
s02-ckdevice-china.icloud.com
p03-ckdevice-china.icloud.com
p02-ckdevice-china.icloud.com
p01-ckdevice-china.icloud.com
p04-ckdevice-china.icloud.com
s01-ckdevice-china.icloud.com
s02-ckdevice-china.icloud.com
p03-ckdevice-china.icloud.com
p02-ckdevice-china.icloud.com
p01-ckdevice-china.icloud.com
Other certificates including the domain name icloud.com
(limited to 100 certificates)
p09-mccgateway.icloud.com
keyvalueservice.icloud.com
ckdatabase.icloud.com
caldav.icloud.com
discussions-uat.apple.com
p101-ckdatabase.icloud.com
iwmb1.icloud.com
ckcoderouter.icloud.com
p203-sharedstreams-china.icloud.com
p301-fmipweb-china.icloud.com
p127-mcc.icloud.com
p101-iwmb6.icloud.com
prod-setup.icloud.com
cls-webdata.education.icloud.com
drivews.icloud.com
metrics.icloud.com
fmf-china.icloud.com
aolauth.icloud.com
ckdevice.icloud.com
mobilebackup-internal-china.icloud.com
calendarws.icloud.com
p301-iwmb3-china.icloud.com
iwmb.icloud.com
ckdatabasews.icloud.com
fmfweb.icloud.com
p301-ckdatabase-china.icloud.com
p203-escrowproxy-china.icloud.com
drive.icloud.com
p301-notesws.icloud.com
iwmb8.icloud.com
p301-iwmb-china.icloud.com
p101-quota-china.icloud.com
fmipweb.icloud.com
fmfmail.icloud.com
fmipweb-china.icloud.com
iwmb2.icloud.com
ubiquity.icloud.com
calendar.icloud.com
p101-sharedstreams-china.icloud.com
ckshare.icloud.com
fmipmobile.icloud.com
newspublisherapi.icloud.com
p101-iwmb7.icloud.com
ckcoderouter.icloud.com
iworkexportws.icloud.com
fmipalcweb.icloud.com
e3.icloud.com
photos.icloud.com
drivews.icloud.com
calendars-china.icloud.com
p301-docws-china.icloud.com
p101-docws.icloud.com
iwres.icloud.com
p25-cache.iwork.icloud.com
streams-china.icloud.com
p101-iwmb5-china.icloud.com
p101-fmfmobile.icloud.com
www.me.com
photos.icloud.com
calendars-china.icloud.com
probe.icloud.com
ubiquity.icloud.com
p01-mcc.icloud.com
p203-iwmb4-china.icloud.com
iworkpreviewapi.icloud.com
p101-escrowproxy.icloud.com
ckdevice-china.icloud.com
contactsws.icloud.com
p203-notesws-china.icloud.com
mail.icloud.com
p101-iwmb1-china.icloud.com
p101-iwres-china.icloud.com
iwmb0-china.icloud.com
p301-setup.icloud.com
calendars-china.icloud.com
p101-content.icloud.com
ckcoderouter-china.icloud.com
iwmb9-china.icloud.com
p301-drivews.icloud.com
p75-cache.iwork.icloud.com
p301-caldav-china.icloud.com
networkresponsivetest.icloud.com
uploadimagews.icloud.com
uploadimagews.icloud.com
discussions-uat.apple.com
statici.icloud.com
discussions-uat.apple.com
aolauth.icloud.com
contactsws.icloud.com
content.icloud.com
quota.icloud.com
discussions-uat.apple.com
calendars.icloud.com
acfeedbackws.icloud.com
fmipmail-china.icloud.com
ckshare.icloud.com
iworkthumbnailws.icloud.com
ckcoderouter-china.icloud.com
p101-fmfweb.icloud.com
ckcoderouter.icloud.com
keyvalueservice.icloud.com
ckdatabase.icloud.com
caldav.icloud.com
discussions-uat.apple.com
p101-ckdatabase.icloud.com
iwmb1.icloud.com
ckcoderouter.icloud.com
p203-sharedstreams-china.icloud.com
p301-fmipweb-china.icloud.com
p127-mcc.icloud.com
p101-iwmb6.icloud.com
prod-setup.icloud.com
cls-webdata.education.icloud.com
drivews.icloud.com
metrics.icloud.com
fmf-china.icloud.com
aolauth.icloud.com
ckdevice.icloud.com
mobilebackup-internal-china.icloud.com
calendarws.icloud.com
p301-iwmb3-china.icloud.com
iwmb.icloud.com
ckdatabasews.icloud.com
fmfweb.icloud.com
p301-ckdatabase-china.icloud.com
p203-escrowproxy-china.icloud.com
drive.icloud.com
p301-notesws.icloud.com
iwmb8.icloud.com
p301-iwmb-china.icloud.com
p101-quota-china.icloud.com
fmipweb.icloud.com
fmfmail.icloud.com
fmipweb-china.icloud.com
iwmb2.icloud.com
ubiquity.icloud.com
calendar.icloud.com
p101-sharedstreams-china.icloud.com
ckshare.icloud.com
fmipmobile.icloud.com
newspublisherapi.icloud.com
p101-iwmb7.icloud.com
ckcoderouter.icloud.com
iworkexportws.icloud.com
fmipalcweb.icloud.com
e3.icloud.com
photos.icloud.com
drivews.icloud.com
calendars-china.icloud.com
p301-docws-china.icloud.com
p101-docws.icloud.com
iwres.icloud.com
p25-cache.iwork.icloud.com
streams-china.icloud.com
p101-iwmb5-china.icloud.com
p101-fmfmobile.icloud.com
www.me.com
photos.icloud.com
calendars-china.icloud.com
probe.icloud.com
ubiquity.icloud.com
p01-mcc.icloud.com
p203-iwmb4-china.icloud.com
iworkpreviewapi.icloud.com
p101-escrowproxy.icloud.com
ckdevice-china.icloud.com
contactsws.icloud.com
p203-notesws-china.icloud.com
mail.icloud.com
p101-iwmb1-china.icloud.com
p101-iwres-china.icloud.com
iwmb0-china.icloud.com
p301-setup.icloud.com
calendars-china.icloud.com
p101-content.icloud.com
ckcoderouter-china.icloud.com
iwmb9-china.icloud.com
p301-drivews.icloud.com
p75-cache.iwork.icloud.com
p301-caldav-china.icloud.com
networkresponsivetest.icloud.com
uploadimagews.icloud.com
uploadimagews.icloud.com
discussions-uat.apple.com
statici.icloud.com
discussions-uat.apple.com
aolauth.icloud.com
contactsws.icloud.com
content.icloud.com
quota.icloud.com
discussions-uat.apple.com
calendars.icloud.com
acfeedbackws.icloud.com
fmipmail-china.icloud.com
ckshare.icloud.com
iworkthumbnailws.icloud.com
ckcoderouter-china.icloud.com
p101-fmfweb.icloud.com
ckcoderouter.icloud.com
Certificate
The complete raw certificate details for ckdevice-china.icloud.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJBjCCB+6gAwIBAgIQa4bw4qbIuEfhx8uoxBH37zANBgkqhkiG9w0BAQsFADBi MRwwGgYDVQQDExNBcHBsZSBJU1QgQ0EgMiAtIEcxMSAwHgYDVQQLExdDZXJ0aWZp Y2F0aW9uIEF1dGhvcml0eTETMBEGA1UEChMKQXBwbGUgSW5jLjELMAkGA1UEBhMC VVMwHhcNMTkwOTE2MTcxNTMzWhcNMjAxMDE1MTcyNTAwWjBbMSIwIAYDVQQDDBlj a2RldmljZS1jaGluYS5pY2xvdWQuY29tMRMwEQYDVQQKDApBcHBsZSBJbmMuMRMw EQYDVQQIDApDYWxpZm9ybmlhMQswCQYDVQQGEwJVUzCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAM+WzAxLIA3JYvqwdDhq5N0zGuwXNZPJazv39usbST+2 ambdaKDcXXvadmtIAdaPL/0Fv0CGfksgDtNpmHX+Trk0SJPiLE7UjiQArrD8sH29 vO1bocDCJs/lJf+Ap470znz8ezKo507KT0fqRJmKN29nNXmSDFPhfiQLXVRq2l+X 3Hbx3xG/4r6qXPaXFXelVFEwnU1xS4NOQozQkIxHZ1QRC24kDIhx1wj6vQH5yDnf eHTujDbgbpK2gxoRhvusDOmI3aGXGW1SEQaH5HIti6k592yO6EFL2kEaxVvtwyvn CBq4H8lleC3duLfPsGN7EskPaLoFM2KvKmVs6tj6wYsCAwEAAaOCBb0wggW5MAwG A1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAU2HqURHyQcJAWnt0XnAFEA4bWKikwfgYI KwYBBQUHAQEEcjBwMDQGCCsGAQUFBzAChihodHRwOi8vY2VydHMuYXBwbGUuY29t L2FwcGxlaXN0Y2EyZzEuZGVyMDgGCCsGAQUFBzABhixodHRwOi8vb2NzcC5hcHBs ZS5jb20vb2NzcDAzLWFwcGxlaXN0Y2EyZzEyMjCB4AYDVR0RBIHYMIHVghlja2Rl dmljZS1jaGluYS5pY2xvdWQuY29tgh1wMDQtY2tkZXZpY2UtY2hpbmEuaWNsb3Vk LmNvbYIdczAxLWNrZGV2aWNlLWNoaW5hLmljbG91ZC5jb22CHXMwMi1ja2Rldmlj ZS1jaGluYS5pY2xvdWQuY29tgh1wMDMtY2tkZXZpY2UtY2hpbmEuaWNsb3VkLmNv bYIdcDAyLWNrZGV2aWNlLWNoaW5hLmljbG91ZC5jb22CHXAwMS1ja2RldmljZS1j aGluYS5pY2xvdWQuY29tMIH/BgNVHSAEgfcwgfQwgfEGCiqGSIb3Y2QFCwQwgeIw gaQGCCsGAQUFBwICMIGXDIGUUmVsaWFuY2Ugb24gdGhpcyBjZXJ0aWZpY2F0ZSBi eSBhbnkgcGFydHkgYXNzdW1lcyBhY2NlcHRhbmNlIG9mIGFueSBhcHBsaWNhYmxl IHRlcm1zIGFuZCBjb25kaXRpb25zIG9mIHVzZSBhbmQvb3IgY2VydGlmaWNhdGlv biBwcmFjdGljZSBzdGF0ZW1lbnRzLjA5BggrBgEFBQcCARYtaHR0cDovL3d3dy5h cHBsZS5jb20vY2VydGlmaWNhdGVhdXRob3JpdHkvcnBhMBMGA1UdJQQMMAoGCCsG AQUFBwMBMDcGA1UdHwQwMC4wLKAqoCiGJmh0dHA6Ly9jcmwuYXBwbGUuY29tL2Fw cGxlaXN0Y2EyZzEuY3JsMB0GA1UdDgQWBBQjpJ0hJN2YzEIQyD8guNDXGlyNpTAO BgNVHQ8BAf8EBAMCBaAwEQYLKoZIhvdjZAYbDwEEAgUAMBEGCyqGSIb3Y2QGGwsB BAIFADARBgsqhkiG92NkBhsHAQQCBQAwggJrBgorBgEEAdZ5AgQCBIICWwSCAlcC VQB1ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABbTsbsHIAAAQD AEYwRAIgGMypu1t/qTl0rqkkxpGMwln0zkP052s/VF3Bot7E6sUCIBGQREYxM3mc BOzSrBoQWu5ackBCkp7pWuP1OuKlVhJFAHUApLkJkLQYWBSHuxOizGdwCjw1mAT5 G9+443fNDsgN3BAAAAFtOxuwcQAABAMARjBEAiB1Ra/5ipbRsWMqa3qMNoVfs73U lMaDuqfHS0sTZeLtBQIgDLv9Zc3P9FQj7dHvn27KmObK/EvyWnP9OHzRZDDv5cQA dgBWFAaaL9fC7NP14b1Esj7HRna5vJkRXMDvlJhV1onQ3QAAAW07G7BqAAAEAwBH MEUCIHbzcPo7s9Rm8UrxJF6D0/Ho77KiRLbTGVXCUQb+Sp1bAiEAw8f5cHLthp71 SmhQmYmBssLB39DsdjCL2awnzveTusMAdQBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAl CBcvo6odBxPTDAAAAW07G7BqAAAEAwBGMEQCIBSkgDUwoHycjz6C6beB4MFSxdqs 7Fct3OqCyALibmYLAiAB/VdCsAU5+084E3zJ4bhm09ImivwiU4+ulVi/9dRsVwB2 AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABbTsbsOUAAAQDAEcw RQIhAKes/t7+LuSQW1ZBRothNeBrRWJHOIRbg+Ns8KI99Y3oAiAmTluvwTKbUR82 k2cXYzkJZa33qwg2DX/GU/2DXMx+lTANBgkqhkiG9w0BAQsFAAOCAQEAqtDPiAqo SPQOOkxA7zeBWPJX19ubEZb6gRRT+LBvlDxi5RbWvVZfwErNWX1BpOaLCzdLT7ZF gCVq5a4zk/dWEGoBa3knDgm0gCN0MaCLqpi5eXU8qWuWJhzq9+oGXV5uKfc0Dvrj YT4ju64jjF4KYHO327d62im8f8nVw/7bgxP4jESob4pRVukxq5rXp/0nWOGRGn1H Y8i2lB7K1GWx+twhZSC3RbgKmYiI9GX7aAxscSJeHlzRyfEJmQYwseZeWJJDQ+iY c+7DBJKLZI14pj98DXyTFazvU7KR/ZLxVKJqpYEMn7T3S4LbqBNf4s9X6t6GWjdA OmjdRs5SS5AhSw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5bMDEsgDcli+rB0OGrk 3TMa7Bc1k8lrO/f26xtJP7ZqZt1ooNxde9p2a0gB1o8v/QW/QIZ+SyAO02mYdf5O uTRIk+IsTtSOJACusPywfb287VuhwMImz+Ul/4CnjvTOfPx7MqjnTspPR+pEmYo3 b2c1eZIMU+F+JAtdVGraX5fcdvHfEb/ivqpc9pcVd6VUUTCdTXFLg05CjNCQjEdn VBELbiQMiHHXCPq9AfnIOd94dO6MNuBukraDGhGG+6wM6YjdoZcZbVIRBofkci2L qTn3bI7oQUvaQRrFW+3DK+cIGrgfyWV4Ld24t8+wY3sSyQ9ougUzYq8qZWzq2PrB iwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 142928049063516436963259566035309819887 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple IST CA 2 - G1' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 17:15:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-15 17:25:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ckdevice-china.icloud.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Apple Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26205689930999033079940448957526769618427170055661546629461453353146124304281312624716551290831724133666755009196861224233589176045530389089522921632119327262617658534533310038785822717836074379496889662052479036104915911981156652527359150397222673295939536127558473562266174278862846997425894339281254239766165224884233702229566451799478308280702908994120307967907575478756229297348333523470091031549666081361842322125225353609023232367101819185049287369835924674065175831133078672061290167520861629516482569342082338808120364457050232494532149432698816627775654561888112870751585306676024766672855227635379409174923 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d87a94447c907090169edd179c01440386d62a29 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/appleistca2g1.der' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-appleistca2g122' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (216 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ckdevice-china.icloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p04-ckdevice-china.icloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's01-ckdevice-china.icloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's02-ckdevice-china.icloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p03-ckdevice-china.icloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p02-ckdevice-china.icloud.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p01-ckdevice-china.icloud.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.5.11.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of any applicable terms and conditions of use and/or certification practice statements.' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.apple.com/certificateauthority/rpa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/appleistca2g1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 23a49d2124dd98cc4210c83f20b8d0d71a5c8da5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.6.27.15.1 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.6.27.11.1 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.6.27.7.1 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (599 bytes) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER asn1: structure error: integer not minimally-encoded <nil> . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 7944215614372942298405973182509143296668723771533785053079798905717512344133 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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