mzstatic.com
- Apple Inc. -
Issued by Apple Public EV Server RSA CA 2 - G1
About this certificate
This digital certificate with serial number 7b:d5:e5:97:72:15:23:3d:b5:ee:2e:1c:d6:db:f0:ba was issued on by Apple Inc..
With 67 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Apple Inc.
Company registration number:
C0806592
Organization: Apple Inc.
Organization: Apple Inc.
State / Province:
California
Locality: Cupertino
Country: US
Locality: Cupertino
Country: US
Apple Inc.
Organization:
Apple Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 7b:d5:e5:97:72:15:23:3d:b5:ee:2e:1c:d6:db:f0:baSerial Number (int): 164605659382971191521520324926167052474
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 2e:c7:50:a9:2c:b3:d7:02:5c:2a:84:1b:0b:66:2a:c2:a8:71:cb:8f
AuthorityKeyId: 50:55:ab:43:a1:af:a9:48:2b:5a:c1:a2:87:89:04:e4:7a:0e:ca:da
Fingerprint (sha1): 27:36:b1:4b:89:3c:e4:18:a9:37:28:09:a4:42:5f:7f:dd:cc:6e:73
Fingerprint (sha256): 0b:92:48:d4:8e:43:5c:ab:43:22:da:df:61:7e:2a:c6:9a:0f:ea:03:5e:b4:9a:ce:82:fc:46:93:29:c3:36:38
Issuing Certificate URL: http://certs.apple.com/apevsrsa2g1.der
Revocation information
OCSP Server: http://ocsp.apple.com/ocsp03-apevsrsa2g101CRL Distribution Point: http://crl.apple.com/apevsrsa2g1.crl
Check the revocation status for certificate mzstatic.com
67
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mzstatic.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
isq06.mzstatic.com
mzstatic.com
apps.itunes.apple.com
metrics.mzstatic.com
isq13.mzstatic.com
t4.mzstatic.com
a3.mzstatic.com
isq14.mzstatic.com
s.mzstatic.com
b4.mzstatic.com
play.music.apple.com
is1-ssl.mzstatic.com
t3.mzstatic.com
t2.mzstatic.com
isq07.mzstatic.com
s1.mzstatic.com
a5.mzstatic.com
r3.mzstatic.com
is2-ssl-int.mzstatic.com
s5.mzstatic.com
staging.podcastsconnect.apple.com
is5-ssl.mzstatic.com
is3-ssl-int.mzstatic.com
apps.mzstatic.com
b2.mzstatic.com
r.mzstatic.com
is3-ssl.mzstatic.com
a1.mzstatic.com
dzc-metrics.mzstatic.com
store.mzstatic.com
b5.mzstatic.com
is4-ssl-int.mzstatic.com
is4-ssl.mzstatic.com
isq05.mzstatic.com
isq09.mzstatic.com
r2.mzstatic.com
mzuserxp.itunes.apple.com
xp.apple.com
device-capabilities-mr.itunes.apple.com
apps-internal.mzstatic.com
s3.mzstatic.com
accertify.mzstatic.com
itc.mzstatic.com
r4.mzstatic.com
isq08.mzstatic.com
device-capabilities-pv.itunes.apple.com
isq12.mzstatic.com
r1.mzstatic.com
a2.mzstatic.com
conductor.itunes.apple.com
b3.mzstatic.com
t1.mzstatic.com
is2-ssl.mzstatic.com
r5.mzstatic.com
device-capabilities.itunes.apple.com
is5-ssl-int.mzstatic.com
s4.mzstatic.com
t5.mzstatic.com
silverbullet.itunes.apple.com
isq11.mzstatic.com
isq15.mzstatic.com
is1-ssl-int.mzstatic.com
messenger.music.apple.com
a4.mzstatic.com
apps.itunes.com
b1.mzstatic.com
s2.mzstatic.com
mzstatic.com
apps.itunes.apple.com
metrics.mzstatic.com
isq13.mzstatic.com
t4.mzstatic.com
a3.mzstatic.com
isq14.mzstatic.com
s.mzstatic.com
b4.mzstatic.com
play.music.apple.com
is1-ssl.mzstatic.com
t3.mzstatic.com
t2.mzstatic.com
isq07.mzstatic.com
s1.mzstatic.com
a5.mzstatic.com
r3.mzstatic.com
is2-ssl-int.mzstatic.com
s5.mzstatic.com
staging.podcastsconnect.apple.com
is5-ssl.mzstatic.com
is3-ssl-int.mzstatic.com
apps.mzstatic.com
b2.mzstatic.com
r.mzstatic.com
is3-ssl.mzstatic.com
a1.mzstatic.com
dzc-metrics.mzstatic.com
store.mzstatic.com
b5.mzstatic.com
is4-ssl-int.mzstatic.com
is4-ssl.mzstatic.com
isq05.mzstatic.com
isq09.mzstatic.com
r2.mzstatic.com
mzuserxp.itunes.apple.com
xp.apple.com
device-capabilities-mr.itunes.apple.com
apps-internal.mzstatic.com
s3.mzstatic.com
accertify.mzstatic.com
itc.mzstatic.com
r4.mzstatic.com
isq08.mzstatic.com
device-capabilities-pv.itunes.apple.com
isq12.mzstatic.com
r1.mzstatic.com
a2.mzstatic.com
conductor.itunes.apple.com
b3.mzstatic.com
t1.mzstatic.com
is2-ssl.mzstatic.com
r5.mzstatic.com
device-capabilities.itunes.apple.com
is5-ssl-int.mzstatic.com
s4.mzstatic.com
t5.mzstatic.com
silverbullet.itunes.apple.com
isq11.mzstatic.com
isq15.mzstatic.com
is1-ssl-int.mzstatic.com
messenger.music.apple.com
a4.mzstatic.com
apps.itunes.com
b1.mzstatic.com
s2.mzstatic.com
Other certificates including the domain name mzstatic.com
(limited to 100 certificates)
itunes.apple.com
mzstatic.com
mzuserxp.itunes.apple.com
discussions-uat.apple.com
itunes.apple.com
mzstatic.com
mzuserxp.itunes.apple.com
mzstatic.com
www.me.com
itunes.apple.com
itunes.apple.com
itunes.apple.com
americasred3.apple.com
itunes.apple.com
mzstatic.com
americasred3.apple.com
discussions-uat.apple.com
discussions-uat.apple.com
discussions-uat.apple.com
mzuserxp.itunes.apple.com
mzuserxp.itunes.apple.com
discussions-uat.apple.com
cloudkit.io
mzstatic.com
mzstatic.com
mzstatic.com
itunes.apple.com
itunes.apple.com
cloudkit.io
apps.itunes.apple.com
mzstatic.com
is1-ssl.mzstatic.com
itunes.apple.com
mzstatic.com
mzstatic.com
itunes.apple.com
itunes.apple.com
mzstatic.com
discussions-uat.apple.com
discussions-uat.apple.com
mzuserxp.itunes.apple.com
itunes.apple.com
mzstatic.com
xp-qa.apple.com
itunes.apple.com
discussions-uat.apple.com
itunes.apple.com
is1-ssl.mzstatic.com
mzstatic.com
mzstatic.com
mzstatic.com
itunes.apple.com
itunes.apple.com
discussions-uat.apple.com
mzuserxp.itunes.apple.com
mzstatic.com
mzstatic.com
itunes.apple.com
itunes.apple.com
mzstatic.com
cloudkit.io
itunes.apple.com
cloudkit.io
apps.mzstatic.com
mzstatic.com
qa.mzstatic.com
apps.itunes.apple.com
itunes.apple.com
mzstatic.com
itunes.apple.com
*.mzstatic.com
discussions-uat.apple.com
static.itunes.apple.com
xp-qa.apple.com
mzstatic.com
mzstatic.com
itunes.apple.com
itunes.apple.com
itunes.apple.com
is1-ssl.mzstatic.com
mzstatic.com
mzstatic.com
apps.mzstatic.com
apps.itunes.apple.com
mzstatic.com
www.me.com
cloudkit.io
mzstatic.com
itunes.apple.com
www.imac.co.nz
itunes.apple.com
xp-qa.apple.com
itunes.apple.com
www.me.com
itunes.apple.com
mzuserxp.itunes.apple.com
discussions-uat.apple.com
mzstatic.com
americasred3.apple.com
itunes.apple.com
mzstatic.com
mzuserxp.itunes.apple.com
discussions-uat.apple.com
itunes.apple.com
mzstatic.com
mzuserxp.itunes.apple.com
mzstatic.com
www.me.com
itunes.apple.com
itunes.apple.com
itunes.apple.com
americasred3.apple.com
itunes.apple.com
mzstatic.com
americasred3.apple.com
discussions-uat.apple.com
discussions-uat.apple.com
discussions-uat.apple.com
mzuserxp.itunes.apple.com
mzuserxp.itunes.apple.com
discussions-uat.apple.com
cloudkit.io
mzstatic.com
mzstatic.com
mzstatic.com
itunes.apple.com
itunes.apple.com
cloudkit.io
apps.itunes.apple.com
mzstatic.com
is1-ssl.mzstatic.com
itunes.apple.com
mzstatic.com
mzstatic.com
itunes.apple.com
itunes.apple.com
mzstatic.com
discussions-uat.apple.com
discussions-uat.apple.com
mzuserxp.itunes.apple.com
itunes.apple.com
mzstatic.com
xp-qa.apple.com
itunes.apple.com
discussions-uat.apple.com
itunes.apple.com
is1-ssl.mzstatic.com
mzstatic.com
mzstatic.com
mzstatic.com
itunes.apple.com
itunes.apple.com
discussions-uat.apple.com
mzuserxp.itunes.apple.com
mzstatic.com
mzstatic.com
itunes.apple.com
itunes.apple.com
mzstatic.com
cloudkit.io
itunes.apple.com
cloudkit.io
apps.mzstatic.com
mzstatic.com
qa.mzstatic.com
apps.itunes.apple.com
itunes.apple.com
mzstatic.com
itunes.apple.com
*.mzstatic.com
discussions-uat.apple.com
static.itunes.apple.com
xp-qa.apple.com
mzstatic.com
mzstatic.com
itunes.apple.com
itunes.apple.com
itunes.apple.com
is1-ssl.mzstatic.com
mzstatic.com
mzstatic.com
apps.mzstatic.com
apps.itunes.apple.com
mzstatic.com
www.me.com
cloudkit.io
mzstatic.com
itunes.apple.com
www.imac.co.nz
itunes.apple.com
xp-qa.apple.com
itunes.apple.com
www.me.com
itunes.apple.com
mzuserxp.itunes.apple.com
discussions-uat.apple.com
mzstatic.com
americasred3.apple.com
itunes.apple.com
Certificate
The complete raw certificate details for mzstatic.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILjjCCCnagAwIBAgIQe9Xll3IVIz217i4c1tvwujANBgkqhkiG9w0BAQsFADBR MQswCQYDVQQGEwJVUzETMBEGA1UEChMKQXBwbGUgSW5jLjEtMCsGA1UEAxMkQXBw bGUgUHVibGljIEVWIFNlcnZlciBSU0EgQ0EgMiAtIEcxMB4XDTIzMDkwNjEzMzU1 NFoXDTIzMTIwNTEzNDU1NFowgcYxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0 aW9uMRMwEQYLKwYBBAGCNzwCAQMTAlVTMRswGQYLKwYBBAGCNzwCAQITCkNhbGlm b3JuaWExETAPBgNVBAUTCEMwODA2NTkyMQswCQYDVQQGEwJVUzETMBEGA1UECBMK Q2FsaWZvcm5pYTESMBAGA1UEBxMJQ3VwZXJ0aW5vMRMwEQYDVQQKEwpBcHBsZSBJ bmMuMRUwEwYDVQQDEwxtenN0YXRpYy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWlrqQhiBF0w6bDWUbqtiRL05fSRuc9Rjagdz0BmTUCDbzwdMK +zgQ3p9rmcpwOhsbl3WCbCaXD0ppeesUyjRybjfEGtL5B51tgXrJaeiWF64H056R N1IWB/hwH485H03TwFIXa6O/ZR55FG5O8BG5hqsXGfaJtctKCjnFB/itC1ndafkG DrGTVZUwK+F2WNQEDa4zQB52DBdAJDZQODvq8kjAnRdDK7jIg14h+U5L8Is60aSu LzzIpuY0DmBCgLkAZ41PUqokxpFei4dLDSxA0yJvW4pZpDwjjPamTZEAFdtb/ZCT lRopr4r1YfEC0R/eib3gAHCnAAUeZaoQJLRHAgMBAAGjggfqMIIH5jAMBgNVHRMB Af8EAjAAMB8GA1UdIwQYMBaAFFBVq0Ohr6lIK1rBooeJBOR6DsraMHoGCCsGAQUF BwEBBG4wbDAyBggrBgEFBQcwAoYmaHR0cDovL2NlcnRzLmFwcGxlLmNvbS9hcGV2 c3JzYTJnMS5kZXIwNgYIKwYBBQUHMAGGKmh0dHA6Ly9vY3NwLmFwcGxlLmNvbS9v Y3NwMDMtYXBldnNyc2EyZzEwMTCCBZEGA1UdEQSCBYgwggWEghJpc3EwNi5tenN0 YXRpYy5jb22CDG16c3RhdGljLmNvbYIVYXBwcy5pdHVuZXMuYXBwbGUuY29tghRt ZXRyaWNzLm16c3RhdGljLmNvbYISaXNxMTMubXpzdGF0aWMuY29tgg90NC5tenN0 YXRpYy5jb22CD2EzLm16c3RhdGljLmNvbYISaXNxMTQubXpzdGF0aWMuY29tgg5z Lm16c3RhdGljLmNvbYIPYjQubXpzdGF0aWMuY29tghRwbGF5Lm11c2ljLmFwcGxl LmNvbYIUaXMxLXNzbC5tenN0YXRpYy5jb22CD3QzLm16c3RhdGljLmNvbYIPdDIu bXpzdGF0aWMuY29tghJpc3EwNy5tenN0YXRpYy5jb22CD3MxLm16c3RhdGljLmNv bYIPYTUubXpzdGF0aWMuY29tgg9yMy5tenN0YXRpYy5jb22CGGlzMi1zc2wtaW50 Lm16c3RhdGljLmNvbYIPczUubXpzdGF0aWMuY29tgiFzdGFnaW5nLnBvZGNhc3Rz Y29ubmVjdC5hcHBsZS5jb22CFGlzNS1zc2wubXpzdGF0aWMuY29tghhpczMtc3Ns LWludC5tenN0YXRpYy5jb22CEWFwcHMubXpzdGF0aWMuY29tgg9iMi5tenN0YXRp Yy5jb22CDnIubXpzdGF0aWMuY29tghRpczMtc3NsLm16c3RhdGljLmNvbYIPYTEu bXpzdGF0aWMuY29tghhkemMtbWV0cmljcy5tenN0YXRpYy5jb22CEnN0b3JlLm16 c3RhdGljLmNvbYIPYjUubXpzdGF0aWMuY29tghhpczQtc3NsLWludC5tenN0YXRp Yy5jb22CFGlzNC1zc2wubXpzdGF0aWMuY29tghJpc3EwNS5tenN0YXRpYy5jb22C EmlzcTA5Lm16c3RhdGljLmNvbYIPcjIubXpzdGF0aWMuY29tghltenVzZXJ4cC5p dHVuZXMuYXBwbGUuY29tggx4cC5hcHBsZS5jb22CJ2RldmljZS1jYXBhYmlsaXRp ZXMtbXIuaXR1bmVzLmFwcGxlLmNvbYIaYXBwcy1pbnRlcm5hbC5tenN0YXRpYy5j b22CD3MzLm16c3RhdGljLmNvbYIWYWNjZXJ0aWZ5Lm16c3RhdGljLmNvbYIQaXRj Lm16c3RhdGljLmNvbYIPcjQubXpzdGF0aWMuY29tghJpc3EwOC5tenN0YXRpYy5j b22CJ2RldmljZS1jYXBhYmlsaXRpZXMtcHYuaXR1bmVzLmFwcGxlLmNvbYISaXNx MTIubXpzdGF0aWMuY29tgg9yMS5tenN0YXRpYy5jb22CD2EyLm16c3RhdGljLmNv bYIaY29uZHVjdG9yLml0dW5lcy5hcHBsZS5jb22CD2IzLm16c3RhdGljLmNvbYIP dDEubXpzdGF0aWMuY29tghRpczItc3NsLm16c3RhdGljLmNvbYIPcjUubXpzdGF0 aWMuY29tgiRkZXZpY2UtY2FwYWJpbGl0aWVzLml0dW5lcy5hcHBsZS5jb22CGGlz NS1zc2wtaW50Lm16c3RhdGljLmNvbYIPczQubXpzdGF0aWMuY29tgg90NS5tenN0 YXRpYy5jb22CHXNpbHZlcmJ1bGxldC5pdHVuZXMuYXBwbGUuY29tghJpc3ExMS5t enN0YXRpYy5jb22CEmlzcTE1Lm16c3RhdGljLmNvbYIYaXMxLXNzbC1pbnQubXpz dGF0aWMuY29tghltZXNzZW5nZXIubXVzaWMuYXBwbGUuY29tgg9hNC5tenN0YXRp Yy5jb22CD2FwcHMuaXR1bmVzLmNvbYIPYjEubXpzdGF0aWMuY29tgg9zMi5tenN0 YXRpYy5jb20wggESBgNVHSAEggEJMIIBBTAHBgVngQwBATCB+QYJYIZIAYb9bAIB MIHrMD4GCCsGAQUFBwIBFjJodHRwczovL3d3dy5hcHBsZS5jb20vY2VydGlmaWNh dGVhdXRob3JpdHkvcHVibGljLzCBqAYIKwYBBQUHAgIwgZsMgZhSZWxpYW5jZSBv biB0aGlzIGNlcnRpZmljYXRlIGJ5IGFueSBwYXJ0eSBhc3N1bWVzIGFjY2VwdGFu Y2Ugb2YgdGhlIFJlbHlpbmcgUGFydHkgQWdyZWVtZW50IGZvdW5kIGF0IGh0dHBz Oi8vd3d3LmFwcGxlLmNvbS9jZXJ0aWZpY2F0ZWF1dGhvcml0eS9wdWJsaWMvLjAT BgNVHSUEDDAKBggrBgEFBQcDATA1BgNVHR8ELjAsMCqgKKAmhiRodHRwOi8vY3Js LmFwcGxlLmNvbS9hcGV2c3JzYTJnMS5jcmwwHQYDVR0OBBYEFC7HUKkss9cCXCqE GwtmKsKoccuPMA4GA1UdDwEB/wQEAwIFoDATBgorBgEEAdZ5AgQDAQH/BAIFADAN BgkqhkiG9w0BAQsFAAOCAQEAONATgElWX3wIb5t2Ubf1MoUX6FwRdOyH3yjk7oVr Jjy2y9ZOFvmwBV3nea0Uua8clU9j58O1K1FwR7VvLBY3/vM04JheWTxYbl8UoyuO H5igRpCvBFHGUsQwinDh0DXLIwlkGCjKun+T3pS5UANaTrx64o52fi/C/MbHijOW SyQoB4f2ngWgbNaDu3rY+uLKzgMA+MveC4ibn5I/2Tj6DJZVzzJlEy+3AER0j/LS MYGrn8XERczM6fFc2WEaWeInXtputHk2mid+nZPu/mOdXGdkbxT66CRXaYU4r/46 VnRyJIN91HWCoJOZke8KCKgFT0TH1zjUcUgfbkuQJwDR0A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pa6kIYgRdMOmw1lG6rY kS9OX0kbnPUY2oHc9AZk1Ag288HTCvs4EN6fa5nKcDobG5d1gmwmlw9KaXnrFMo0 cm43xBrS+QedbYF6yWnolheuB9OekTdSFgf4cB+POR9N08BSF2ujv2UeeRRuTvAR uYarFxn2ibXLSgo5xQf4rQtZ3Wn5Bg6xk1WVMCvhdljUBA2uM0AedgwXQCQ2UDg7 6vJIwJ0XQyu4yINeIflOS/CLOtGkri88yKbmNA5gQoC5AGeNT1KqJMaRXouHSw0s QNMib1uKWaQ8I4z2pk2RABXbW/2Qk5UaKa+K9WHxAtEf3om94ABwpwAFHmWqECS0 RwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 164605659382971191521520324926167052474 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Public EV Server RSA CA 2 - G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 13:35:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 13:45:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'C0806592' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cupertino' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mzstatic.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27089324388328988487351728851144247449363777427036195707654280802554719884427331277996659872436777970802388526291161692877257899829344821894971475249689306069990857075261659955759046604098596620090902987998511446307066407557715041355091432088432074322639233997706369348286282320787719233669555514949289332730719433835574255024039715753572813417795376854792980141623966736760330541247051275094704927037140324964092449252033068551625864294123696440305216042801928111013464709320531668325940954829284796863372308483589428602043528014422216709786022694827988261341748794431447595292630013403713585334307776185682505282631 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5055ab43a1afa9482b5ac1a2878904e47a0ecada . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/apevsrsa2g1.der' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-apevsrsa2g101' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1416 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isq06.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isq13.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't4.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a3.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isq14.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b4.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.music.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is1-ssl.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't3.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't2.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isq07.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a5.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r3.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is2-ssl-int.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's5.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.podcastsconnect.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is5-ssl.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is3-ssl-int.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is3-ssl.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a1.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dzc-metrics.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b5.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is4-ssl-int.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is4-ssl.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isq05.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isq09.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r2.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzuserxp.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xp.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'device-capabilities-mr.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps-internal.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accertify.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itc.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r4.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isq08.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'device-capabilities-pv.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isq12.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r1.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a2.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conductor.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b3.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't1.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is2-ssl.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r5.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'device-capabilities.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is5-ssl-int.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't5.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverbullet.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isq11.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isq15.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is1-ssl-int.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'messenger.music.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a4.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.itunes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b1.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2.mzstatic.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (265 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.apple.com/certificateauthority/public/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of the Relying Party Agreement found at https://www.apple.com/certificateauthority/public/.' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/apevsrsa2g1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2ec750a92cb3d7025c2a841b0b662ac2a871cb8f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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