itunes.apple.com
- Apple Inc. -
Issued by DigiCert SHA2 Extended Validation Server CA
About this certificate
This digital certificate with serial number 0d:56:b6:21:78:8b:8f:14:51:99:73:5a:ad:d5:03:35 was issued on by DigiCert Inc.
With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Apple Inc.
Company registration number:
C0806592
Organization: Apple Inc.
Organization unit: Internet Services for Akamai
Organization: Apple Inc.
Organization unit: Internet Services for Akamai
State / Province:
California
Locality: Cupertino
Country: US
Locality: Cupertino
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:56:b6:21:78:8b:8f:14:51:99:73:5a:ad:d5:03:35Serial Number (int): 17730195525422046639253044612165862197
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 63:5d:0c:b1:ef:c0:48:6d:fa:7d:8e:d5:51:e7:18:d1:95:6c:56:43
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f
Fingerprint (sha1): 43:af:75:9d:7e:9b:d4:cb:0c:61:a5:33:af:f5:db:65:ef:bf:5a:7f
Fingerprint (sha256): 0f:a5:1a:76:32:ec:f4:8b:43:98:1a:f4:b4:e6:66:96:4a:b1:15:ff:95:55:dc:fc:36:b6:dd:e2:c6:b1:6c:cb
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl
Check the revocation status for certificate itunes.apple.com
91
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for itunes.apple.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
xp.apple.com
web-experience.itunes.apple.com
vpp-app.itunes.apple.com
vocabulary.itunes.apple.com
videos.apple.com
uts-preview.itunes.apple.com
uts-api.itunes.apple.com
uts-api-siri.itunes.apple.com
upp.itunes.apple.com
tv.apple.com
tf-feedback.itunes.apple.com
sync.itunes.apple.com
su.itunes.apple.com
store.mzstatic.com
sp.itunes.apple.com
sitemaps.itunes.apple.com
siri-search.itunes.apple.com
sf-api-token-service.itunes.apple.com
search.itunes.apple.com
se2.itunes.apple.com
se.itunes.apple.com
se-edge.itunes.apple.com
sb.tv.apple.com
sb.music.apple.com
s5.mzstatic.com
s4.mzstatic.com
s3.mzstatic.com
s2.mzstatic.com
s1.mzstatic.com
s.mzstatic.com
radio.itunes.apple.com
radio-services.itunes.apple.com
radio-quickplay.itunes.apple.com
radio-activity.itunes.apple.com
podcasts.apple.com
play.itunes.apple.com
play-edge.itunes.apple.com
pd.itunes.apple.com
pcr.apple.com
partiality.itunes.apple.com
np.itunes.apple.com
music.apple.com
metrics.mzstatic.com
itunesu.itunes.apple.com
itunes.apple.com
itc.mzstatic.com
is5-ssl.mzstatic.com
is4-ssl.mzstatic.com
is3-ssl.mzstatic.com
is2-ssl.mzstatic.com
is1-ssl.mzstatic.com
init.itunes.apple.com
finance-app.itunes.apple.com
files.itunes.apple.com
embed.itunes.apple.com
edge.itunes.apple.com
edge-search.itunes.apple.com
dzc-metrics.mzstatic.com
desktop-store.itunes.apple.com
desktop-music.itunes.apple.com
desktop-music-legacy.itunes.apple.com
configuration.apple.com
client-api.itunes.apple.com
carrierbundle.itunes.apple.com
books.apple.com
bookkeeper.itunes.apple.com
bag.itunes.apple.com
b5.mzstatic.com
b4.mzstatic.com
b3.mzstatic.com
b2.mzstatic.com
b1.mzstatic.com
apps.mzstatic.com
apps.apple.com
api.videos.apple.com
api.podcasts.apple.com
api.music.apple.com
api.itunes.apple.com
api.edu.apple.com
api.books.apple.com
api.apps.apple.com
api-edge.apps.apple.com
amp-api.podcasts.apple.com
amp-api-search-edge.apps.apple.com
amp-api-edge.apps.apple.com
accertify.mzstatic.com
a5.mzstatic.com
a4.mzstatic.com
a3.mzstatic.com
a2.mzstatic.com
a1.mzstatic.com
web-experience.itunes.apple.com
vpp-app.itunes.apple.com
vocabulary.itunes.apple.com
videos.apple.com
uts-preview.itunes.apple.com
uts-api.itunes.apple.com
uts-api-siri.itunes.apple.com
upp.itunes.apple.com
tv.apple.com
tf-feedback.itunes.apple.com
sync.itunes.apple.com
su.itunes.apple.com
store.mzstatic.com
sp.itunes.apple.com
sitemaps.itunes.apple.com
siri-search.itunes.apple.com
sf-api-token-service.itunes.apple.com
search.itunes.apple.com
se2.itunes.apple.com
se.itunes.apple.com
se-edge.itunes.apple.com
sb.tv.apple.com
sb.music.apple.com
s5.mzstatic.com
s4.mzstatic.com
s3.mzstatic.com
s2.mzstatic.com
s1.mzstatic.com
s.mzstatic.com
radio.itunes.apple.com
radio-services.itunes.apple.com
radio-quickplay.itunes.apple.com
radio-activity.itunes.apple.com
podcasts.apple.com
play.itunes.apple.com
play-edge.itunes.apple.com
pd.itunes.apple.com
pcr.apple.com
partiality.itunes.apple.com
np.itunes.apple.com
music.apple.com
metrics.mzstatic.com
itunesu.itunes.apple.com
itunes.apple.com
itc.mzstatic.com
is5-ssl.mzstatic.com
is4-ssl.mzstatic.com
is3-ssl.mzstatic.com
is2-ssl.mzstatic.com
is1-ssl.mzstatic.com
init.itunes.apple.com
finance-app.itunes.apple.com
files.itunes.apple.com
embed.itunes.apple.com
edge.itunes.apple.com
edge-search.itunes.apple.com
dzc-metrics.mzstatic.com
desktop-store.itunes.apple.com
desktop-music.itunes.apple.com
desktop-music-legacy.itunes.apple.com
configuration.apple.com
client-api.itunes.apple.com
carrierbundle.itunes.apple.com
books.apple.com
bookkeeper.itunes.apple.com
bag.itunes.apple.com
b5.mzstatic.com
b4.mzstatic.com
b3.mzstatic.com
b2.mzstatic.com
b1.mzstatic.com
apps.mzstatic.com
apps.apple.com
api.videos.apple.com
api.podcasts.apple.com
api.music.apple.com
api.itunes.apple.com
api.edu.apple.com
api.books.apple.com
api.apps.apple.com
api-edge.apps.apple.com
amp-api.podcasts.apple.com
amp-api-search-edge.apps.apple.com
amp-api-edge.apps.apple.com
accertify.mzstatic.com
a5.mzstatic.com
a4.mzstatic.com
a3.mzstatic.com
a2.mzstatic.com
a1.mzstatic.com
Other certificates including the domain name apple.com
(limited to 100 certificates)
itunes.apple.com
ja.ls.apple.com
origin-discussions2-us-dr-prz.apple.com
training.apple.com
reserves-prime.prz.apple.com
app001.apple.com
deployment-pv50.ls.apple.com
itunes.apple.com
reserve-prime.apple.com
gsp81-ssl-e1118.ls.apple.com
gsp102-ssl-e1502.ls.apple.com
api.searchads.apple.com
idmsa-uat.apple.com
webpay-sh-pilot.apple.com
mzstatic.com
store-029.blobstore.apple.com
beatsglobalquality-uat.corp.apple.com
rw.apple.com
stg-pod1-smp.corp.apple.com
gr-api-video-h-aapne1a.smoot.apple.com
web-ext-mmap-ce01.apple.com
assurance-jigglebilly.apple.com
usl-expe1405.apple.com
store-995.blobstore.apple.com
sapecc-prd-ext.sap.apple.com
swdlp.apple.com
gsx.apple.com
gsp-ssl-e1134.ls.apple.com
clx-dev.apple.com
noodle.apple.com
gsp11-ty21-dlb-2.ls.apple.com
mzuserxp.itunes.apple.com
gsp64-st14-ssl-dlb.ls.apple.com
gsp45-ssl-e1356.ls.apple.com
gsp12-st14-dlb-2.ls.apple.com
discussions-uat.apple.com
dc-portal.apple.com
supplier.apple.com
gsp48-kittyhawk-qs55-ssl.ls.apple.com
gsp81-ssl-e1502.ls.apple.com
gsp48-ssl-e691.ls.apple.com
mapsconnectapi.ls.apple.com
wdg01-uat.apple.com
wellnessclassic.apple.com
api-partner-connect-uat1.apple.com
people.apple.com
supplier-registration.apple.com
gsp60-ssl-e997.ls.apple.com
ssuat.apple.com
locate.apple.com
itunes.apple.com
suppliernet.apple.com
gsp79-am31-dlb.ls.apple.com
smp-device-qa3.apple.com
eurored3.apple.com
devcon-oomnshuttleist-test.apple.com
coreservices-e1506-ms11-bistunium-k8straefik.ls.apple.com
dmo-vip01-storeinfo.retailtech.apple.com
gsp70-ssl-e706.ls.apple.com
dinah05.corp.apple.com
gsp1-ssl.apple.com
gspe85-cn-ssl.ls.apple.com
vorpal-relay.apple.com
bswe.apple.com
cma.itunes.apple.com
gsp-ssl-apne1-ash.ls.apple.com
theloop-stage.apple.com
tokenvalidation.apple.com
linkmaker.itunes.apple.com
gsp70-ssl-e1633.ls.apple.com
gsp63-ms12-kittyhawk-ssl.ls.apple.com
gsp-ssl-sl61-ipv6.ls.apple.com
aws-onepulse.apple.com
nightcap-events.apple.com
argo-api.apple.com
gsp12-kh-st14-1.ls.apple.com
gsp59-ssl-e506.ls.apple.com
mr-apple-com2.apple.com
ocservice.apple.com
gsp36-ssl-e1627.ls.apple.com
marketing.apple.com
ioss-callbackservices-qa3.apple.com
gsp19-kh-ms12.ls.apple.com
madeforipodandiphone.apple.com
gspe19-ssl.ls.apple.com
gsp19-1-kittyhawk-ci77-ssl.ls.apple.com
cs-integrations-stage.apple.com
gsp35-ty21-ssl.ls.apple.com
gbiportal-apps-external.apple.com
plmtest2.apple.com
gsp3-sy02-ssl.ls.apple.com
gspe35-ssl.ls.apple.com
gsp76-ty21-01.ls.apple.com
ne-access.apple.com
profilebroker.apple.com
axm-scim-qa12.apple.com
gsp95-hk02-stage-ssl.ls.apple.com
contactretail.apple.com
caffemacs-aa-prz.apple.com
bam.corp.apple.com
ja.ls.apple.com
origin-discussions2-us-dr-prz.apple.com
training.apple.com
reserves-prime.prz.apple.com
app001.apple.com
deployment-pv50.ls.apple.com
itunes.apple.com
reserve-prime.apple.com
gsp81-ssl-e1118.ls.apple.com
gsp102-ssl-e1502.ls.apple.com
api.searchads.apple.com
idmsa-uat.apple.com
webpay-sh-pilot.apple.com
mzstatic.com
store-029.blobstore.apple.com
beatsglobalquality-uat.corp.apple.com
rw.apple.com
stg-pod1-smp.corp.apple.com
gr-api-video-h-aapne1a.smoot.apple.com
web-ext-mmap-ce01.apple.com
assurance-jigglebilly.apple.com
usl-expe1405.apple.com
store-995.blobstore.apple.com
sapecc-prd-ext.sap.apple.com
swdlp.apple.com
gsx.apple.com
gsp-ssl-e1134.ls.apple.com
clx-dev.apple.com
noodle.apple.com
gsp11-ty21-dlb-2.ls.apple.com
mzuserxp.itunes.apple.com
gsp64-st14-ssl-dlb.ls.apple.com
gsp45-ssl-e1356.ls.apple.com
gsp12-st14-dlb-2.ls.apple.com
discussions-uat.apple.com
dc-portal.apple.com
supplier.apple.com
gsp48-kittyhawk-qs55-ssl.ls.apple.com
gsp81-ssl-e1502.ls.apple.com
gsp48-ssl-e691.ls.apple.com
mapsconnectapi.ls.apple.com
wdg01-uat.apple.com
wellnessclassic.apple.com
api-partner-connect-uat1.apple.com
people.apple.com
supplier-registration.apple.com
gsp60-ssl-e997.ls.apple.com
ssuat.apple.com
locate.apple.com
itunes.apple.com
suppliernet.apple.com
gsp79-am31-dlb.ls.apple.com
smp-device-qa3.apple.com
eurored3.apple.com
devcon-oomnshuttleist-test.apple.com
coreservices-e1506-ms11-bistunium-k8straefik.ls.apple.com
dmo-vip01-storeinfo.retailtech.apple.com
gsp70-ssl-e706.ls.apple.com
dinah05.corp.apple.com
gsp1-ssl.apple.com
gspe85-cn-ssl.ls.apple.com
vorpal-relay.apple.com
bswe.apple.com
cma.itunes.apple.com
gsp-ssl-apne1-ash.ls.apple.com
theloop-stage.apple.com
tokenvalidation.apple.com
linkmaker.itunes.apple.com
gsp70-ssl-e1633.ls.apple.com
gsp63-ms12-kittyhawk-ssl.ls.apple.com
gsp-ssl-sl61-ipv6.ls.apple.com
aws-onepulse.apple.com
nightcap-events.apple.com
argo-api.apple.com
gsp12-kh-st14-1.ls.apple.com
gsp59-ssl-e506.ls.apple.com
mr-apple-com2.apple.com
ocservice.apple.com
gsp36-ssl-e1627.ls.apple.com
marketing.apple.com
ioss-callbackservices-qa3.apple.com
gsp19-kh-ms12.ls.apple.com
madeforipodandiphone.apple.com
gspe19-ssl.ls.apple.com
gsp19-1-kittyhawk-ci77-ssl.ls.apple.com
cs-integrations-stage.apple.com
gsp35-ty21-ssl.ls.apple.com
gbiportal-apps-external.apple.com
plmtest2.apple.com
gsp3-sy02-ssl.ls.apple.com
gspe35-ssl.ls.apple.com
gsp76-ty21-01.ls.apple.com
ne-access.apple.com
profilebroker.apple.com
axm-scim-qa12.apple.com
gsp95-hk02-stage-ssl.ls.apple.com
contactretail.apple.com
caffemacs-aa-prz.apple.com
bam.corp.apple.com
Certificate
The complete raw certificate details for itunes.apple.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIPGjCCDgKgAwIBAgIQDVa2IXiLjxRRmXNardUDNTANBgkqhkiG9w0BAQsFADB1 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTE5MDcwMTAwMDAwMFoXDTIwMDUwMTEy MDAwMFowgfExHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYB BAGCNzwCAQMTAlVTMRswGQYLKwYBBAGCNzwCAQITCkNhbGlmb3JuaWExETAPBgNV BAUTCEMwODA2NTkyMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTES MBAGA1UEBxMJQ3VwZXJ0aW5vMRMwEQYDVQQKEwpBcHBsZSBJbmMuMSUwIwYDVQQL ExxJbnRlcm5ldCBTZXJ2aWNlcyBmb3IgQWthbWFpMRkwFwYDVQQDExBpdHVuZXMu YXBwbGUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytHXLf64 qvAb4NgYeB/I/QvrC4EfIwDGFkSCLBIts6jM22RZSSxRGnQHr+WVwvJW/7+2ab/c lYDp1Zgl4z/JGdxQDcJ41NRfDEP1nqV/PtIVKey+hgTBUSRwfHb3I5iXOIHRonkG 2XuPyaCW4MivuymMKfEMb4Luddx/sNNnPnv+7iRtnWL2/IP3k9+kaUADHkQRdwml aBxrKjg7HpYS1p5Nz9O1AxJz+8jPq6kDsrdExUqnP6h+SL2ijNoRP9KOSJPRC2o+ RCKcGxaElnLcy2iOj4lfbViZBlrURRAg3JMLdyVBLbAGPWv3irMErwL00pCXFKUg ef5hRuZV7CxdGwIDAQABo4ILJzCCCyMwHwYDVR0jBBgwFoAUPdNQpdagre7zSmAK ZdMh1Pj41g8wHQYDVR0OBBYEFGNdDLHvwEht+n2O1VHnGNGVbFZDMIIITAYDVR0R BIIIQzCCCD+CDHhwLmFwcGxlLmNvbYIfd2ViLWV4cGVyaWVuY2UuaXR1bmVzLmFw cGxlLmNvbYIYdnBwLWFwcC5pdHVuZXMuYXBwbGUuY29tght2b2NhYnVsYXJ5Lml0 dW5lcy5hcHBsZS5jb22CEHZpZGVvcy5hcHBsZS5jb22CHHV0cy1wcmV2aWV3Lml0 dW5lcy5hcHBsZS5jb22CGHV0cy1hcGkuaXR1bmVzLmFwcGxlLmNvbYIddXRzLWFw aS1zaXJpLml0dW5lcy5hcHBsZS5jb22CFHVwcC5pdHVuZXMuYXBwbGUuY29tggx0 di5hcHBsZS5jb22CHHRmLWZlZWRiYWNrLml0dW5lcy5hcHBsZS5jb22CFXN5bmMu aXR1bmVzLmFwcGxlLmNvbYITc3UuaXR1bmVzLmFwcGxlLmNvbYISc3RvcmUubXpz dGF0aWMuY29tghNzcC5pdHVuZXMuYXBwbGUuY29tghlzaXRlbWFwcy5pdHVuZXMu YXBwbGUuY29tghxzaXJpLXNlYXJjaC5pdHVuZXMuYXBwbGUuY29tgiVzZi1hcGkt dG9rZW4tc2VydmljZS5pdHVuZXMuYXBwbGUuY29tghdzZWFyY2guaXR1bmVzLmFw cGxlLmNvbYIUc2UyLml0dW5lcy5hcHBsZS5jb22CE3NlLml0dW5lcy5hcHBsZS5j b22CGHNlLWVkZ2UuaXR1bmVzLmFwcGxlLmNvbYIPc2IudHYuYXBwbGUuY29tghJz Yi5tdXNpYy5hcHBsZS5jb22CD3M1Lm16c3RhdGljLmNvbYIPczQubXpzdGF0aWMu Y29tgg9zMy5tenN0YXRpYy5jb22CD3MyLm16c3RhdGljLmNvbYIPczEubXpzdGF0 aWMuY29tgg5zLm16c3RhdGljLmNvbYIWcmFkaW8uaXR1bmVzLmFwcGxlLmNvbYIf cmFkaW8tc2VydmljZXMuaXR1bmVzLmFwcGxlLmNvbYIgcmFkaW8tcXVpY2twbGF5 Lml0dW5lcy5hcHBsZS5jb22CH3JhZGlvLWFjdGl2aXR5Lml0dW5lcy5hcHBsZS5j b22CEnBvZGNhc3RzLmFwcGxlLmNvbYIVcGxheS5pdHVuZXMuYXBwbGUuY29tghpw bGF5LWVkZ2UuaXR1bmVzLmFwcGxlLmNvbYITcGQuaXR1bmVzLmFwcGxlLmNvbYIN cGNyLmFwcGxlLmNvbYIbcGFydGlhbGl0eS5pdHVuZXMuYXBwbGUuY29tghNucC5p dHVuZXMuYXBwbGUuY29tgg9tdXNpYy5hcHBsZS5jb22CFG1ldHJpY3MubXpzdGF0 aWMuY29tghhpdHVuZXN1Lml0dW5lcy5hcHBsZS5jb22CEGl0dW5lcy5hcHBsZS5j b22CEGl0Yy5tenN0YXRpYy5jb22CFGlzNS1zc2wubXpzdGF0aWMuY29tghRpczQt c3NsLm16c3RhdGljLmNvbYIUaXMzLXNzbC5tenN0YXRpYy5jb22CFGlzMi1zc2wu bXpzdGF0aWMuY29tghRpczEtc3NsLm16c3RhdGljLmNvbYIVaW5pdC5pdHVuZXMu YXBwbGUuY29tghxmaW5hbmNlLWFwcC5pdHVuZXMuYXBwbGUuY29tghZmaWxlcy5p dHVuZXMuYXBwbGUuY29tghZlbWJlZC5pdHVuZXMuYXBwbGUuY29tghVlZGdlLml0 dW5lcy5hcHBsZS5jb22CHGVkZ2Utc2VhcmNoLml0dW5lcy5hcHBsZS5jb22CGGR6 Yy1tZXRyaWNzLm16c3RhdGljLmNvbYIeZGVza3RvcC1zdG9yZS5pdHVuZXMuYXBw bGUuY29tgh5kZXNrdG9wLW11c2ljLml0dW5lcy5hcHBsZS5jb22CJWRlc2t0b3At bXVzaWMtbGVnYWN5Lml0dW5lcy5hcHBsZS5jb22CF2NvbmZpZ3VyYXRpb24uYXBw bGUuY29tghtjbGllbnQtYXBpLml0dW5lcy5hcHBsZS5jb22CHmNhcnJpZXJidW5k bGUuaXR1bmVzLmFwcGxlLmNvbYIPYm9va3MuYXBwbGUuY29tghtib29ra2VlcGVy Lml0dW5lcy5hcHBsZS5jb22CFGJhZy5pdHVuZXMuYXBwbGUuY29tgg9iNS5tenN0 YXRpYy5jb22CD2I0Lm16c3RhdGljLmNvbYIPYjMubXpzdGF0aWMuY29tgg9iMi5t enN0YXRpYy5jb22CD2IxLm16c3RhdGljLmNvbYIRYXBwcy5tenN0YXRpYy5jb22C DmFwcHMuYXBwbGUuY29tghRhcGkudmlkZW9zLmFwcGxlLmNvbYIWYXBpLnBvZGNh c3RzLmFwcGxlLmNvbYITYXBpLm11c2ljLmFwcGxlLmNvbYIUYXBpLml0dW5lcy5h cHBsZS5jb22CEWFwaS5lZHUuYXBwbGUuY29tghNhcGkuYm9va3MuYXBwbGUuY29t ghJhcGkuYXBwcy5hcHBsZS5jb22CF2FwaS1lZGdlLmFwcHMuYXBwbGUuY29tghph bXAtYXBpLnBvZGNhc3RzLmFwcGxlLmNvbYIiYW1wLWFwaS1zZWFyY2gtZWRnZS5h cHBzLmFwcGxlLmNvbYIbYW1wLWFwaS1lZGdlLmFwcHMuYXBwbGUuY29tghZhY2Nl cnRpZnkubXpzdGF0aWMuY29tgg9hNS5tenN0YXRpYy5jb22CD2E0Lm16c3RhdGlj LmNvbYIPYTMubXpzdGF0aWMuY29tgg9hMi5tenN0YXRpYy5jb22CD2ExLm16c3Rh dGljLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNv bS9zaGEyLWV2LXNlcnZlci1nMi5jcmwwNKAyoDCGLmh0dHA6Ly9jcmw0LmRpZ2lj ZXJ0LmNvbS9zaGEyLWV2LXNlcnZlci1nMi5jcmwwSwYDVR0gBEQwQjA3BglghkgB hv1sAgEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQ UzAHBgVngQwBATCBiAYIKwYBBQUHAQEEfDB6MCQGCCsGAQUFBzABhhhodHRwOi8v b2NzcC5kaWdpY2VydC5jb20wUgYIKwYBBQUHMAKGRmh0dHA6Ly9jYWNlcnRzLmRp Z2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJFeHRlbmRlZFZhbGlkYXRpb25TZXJ2ZXJD QS5jcnQwCQYDVR0TBAIwADCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AO5Lvbd1 zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABa68pyLsAAAQDAEgwRgIhAK9U gMV0nY/NjpPfSyBP+bDPVfHUGSvgLjn3WPEQdlLvAiEAgqTJzBQTTJyS0dDl1me5 VkdcwLVFj83EU1QOz/eH0pUAdwBWFAaaL9fC7NP14b1Esj7HRna5vJkRXMDvlJhV 1onQ3QAAAWuvKck3AAAEAwBIMEYCIQCwT9RPW2Yi5yyL1RMOl0HJX3b4rcs033LM y8cplfxhlAIhAP/+npJKB61mLs/FORrbKYmxBzJjqMXm02jGfokgImnIMA0GCSqG SIb3DQEBCwUAA4IBAQCwdCYDsyp/RBPLMF32NmJf646vGx23OacPjC78lFk/E1Qz 0clVsztJ9ugn+s7uYY6Ksqw5KCIyz3kjAoSa0VBGXJwBaBboE1SLrH8naf9wrRw1 NJgiH+oXwGdfBZMBRImAiUTkuG09QvuYCiGoiR7Omaarrl7zgzGZ36sCaqZxb7Fx nxbBnzWJAan7dHolrmtab4UsrIqjcTmMDDsOOlF8dTvB8+bd2t4nUl8tpia6+UUl 0yNJB+eriFvXurlf/QFQpl/bYvneRITgC5vrclgep0oX7uwFktwBH/QcnhMW5KBe mUiJl8cSD1sfXu2CftHDkpENYTexuZBIBEt1lxle -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytHXLf64qvAb4NgYeB/I /QvrC4EfIwDGFkSCLBIts6jM22RZSSxRGnQHr+WVwvJW/7+2ab/clYDp1Zgl4z/J GdxQDcJ41NRfDEP1nqV/PtIVKey+hgTBUSRwfHb3I5iXOIHRonkG2XuPyaCW4Miv uymMKfEMb4Luddx/sNNnPnv+7iRtnWL2/IP3k9+kaUADHkQRdwmlaBxrKjg7HpYS 1p5Nz9O1AxJz+8jPq6kDsrdExUqnP6h+SL2ijNoRP9KOSJPRC2o+RCKcGxaElnLc y2iOj4lfbViZBlrURRAg3JMLdyVBLbAGPWv3irMErwL00pCXFKUgef5hRuZV7Cxd GwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17730195525422046639253044612165862197 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-01 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'C0806592' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cupertino' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet Services for Akamai' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itunes.apple.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25603613832780288097943678898374968291844608623177490159240791637367390181987207546470814288451010385698886664020250541697079377104424453290784468697118860382526697225398348635865455341245621913470977744254274726400813503931984368579219122457003647508670141073753591066675167341018884309892071467672168031881386120907203206600721456383766234860593744176932589294354045308886541205186491880813844433410508152573756228189244887947230471763965514607668568936778361629383365333220400522612488745581623425354875469855190661352579557600580034410415838712326217218036766131010850413242492658765791113965400910344182777535771 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 635d0cb1efc0486dfa7d8ed551e718d1956c5643 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xp.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-experience.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpp-app.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vocabulary.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uts-preview.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uts-api.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uts-api-siri.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upp.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tf-feedback.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sync.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'su.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitemaps.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siri-search.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf-api-token-service.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se2.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se-edge.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sb.tv.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sb.music.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's5.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's4.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radio.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radio-services.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radio-quickplay.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radio-activity.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcasts.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play-edge.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pd.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcr.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partiality.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesu.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itc.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is5-ssl.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is4-ssl.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is3-ssl.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is2-ssl.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is1-ssl.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'init.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance-app.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge-search.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dzc-metrics.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desktop-store.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desktop-music.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desktop-music-legacy.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configuration.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client-api.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrierbundle.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookkeeper.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bag.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b5.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b4.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b3.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b1.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.videos.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.podcasts.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.music.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.itunes.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.edu.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.books.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.apps.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-edge.apps.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp-api.podcasts.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp-api-search-edge.apps.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp-api-edge.apps.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accertify.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a5.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a4.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a3.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a2.mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a1.mzstatic.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016baf29c8bb0000040300483046022100af5480c5749d8fcd8e93df4b204ff9b0cf55f1d4192be02e39f758f1107652ef02210082a4c9cc14134c9c92d1d0e5d667b956475cc0b5458fcdc453540ecff787d2950077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016baf29c9370000040300483046022100b04fd44f5b6622e72c8bd5130e9741c95f76f8adcb34df72cccbc72995fc6194022100fffe9e924a07ad662ecfc5391adb2989b1073263a8c5e6d368c67e89202269c8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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