itunesradio.ng

- Apple Inc. -

Issued by Apple Public Server RSA CA 12 - G1

About this certificate

This digital certificate with serial number 61:94:b4:ef:dd:71:c1:e5:02:95:02:6d:fa:39:d1:45 was issued on by Apple Inc..

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Apple Inc.

Organization: Apple Inc.
State / Province: California
Country: US

Apple Inc.

Organization: Apple Inc.
State / Province: California
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 61:94:b4:ef:dd:71:c1:e5:02:95:02:6d:fa:39:d1:45
Serial Number (int): 129707245363993203799900151303064113477
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ca:b7:01:61:97:fb:c1:23:db:e1:9f:c8:48:27:6c:67:73:74:70:2e
AuthorityKeyId: 1e:5c:17:91:05:57:02:fc:77:5c:e3:70:43:ec:6b:fd:dd:d2:d8:69

Fingerprint (sha1): db:50:c1:36:46:48:17:42:48:f0:bf:71:10:50:66:e3:74:26:24:67
Fingerprint (sha256): 18:2b:29:71:38:3b:b9:15:22:c3:fd:a6:c1:3c:1b:26:b4:cb:b0:4b:f8:61:0e:b3:e6:e2:11:08:3f:f9:1a:da

Issuing Certificate URL: http://certs.apple.com/apsrsa12g1.der

Revocation information

OCSP Server: http://ocsp.apple.com/ocsp03-apsrsa12g101
CRL Distribution Point: http://crl.apple.com/apsrsa12g1.crl

Check the revocation status for certificate itunesradio.ng

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itunesradio.ng

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.itunesradio.co.nz
iphonecentre.nl
www.itunes.co.nz
ipodcentre.nl
itunes.co.nz
www.iphonecentre.nl
imac.nl
www.ilecture.co.nz
ipod.co.nz
itunesradio.ng
apple.no
www.ibook.co.nz
www.imac.nl
imac.co.nz
www.itunes.nl
www.12diasderegalosdeitunes.co.ni
www.itunes.no
applecomputers.co.nz
www.primephonic.nl
itunes.no
itunes.nl
www.apple.co.nz
www.itunes12daysofchristmas.co.nz
ilecture.co.nz
itunes12daysofchristmas.no
apple.co.nz
www.applecomputers.co.nz
www.ipodcentre.nl
www.apple.no
www.itunesradio.ng
www.ipod.no
www.iphoto.no
www.12diasderegalosdeitunes.com.ni
www.ipod.co.nz
ituneslive.no
www.itunes12dagencadeaus.nl
ipod.no
consultants.apple.co.nz
itunes12daysofchristmas.co.nz
12diasderegalosdeitunes.com.ni
www.ituneslive.nl
12diasderegalosdeitunes.co.ni
www.ituneslive.no
ibook.co.nz
www.imacshop.nl
itunes12dagencadeaus.nl
www.itunes12daysofchristmas.no
www.applecomputer.co.nz
www.imac.co.nz
store.apple.co.nz
imacshop.nl
iphoto.no
itunesradio.co.nz
primephonic.nl
applecomputer.co.nz
ituneslive.nl
www.consultants.apple.co.nz

Other certificates including the domain name itunesradio.ng

(limited to 100 certificates)
12diasderegalosdeitunes.com.es
itunesradio.ng
apple-order1.apple.com
itunesradio.ng
12diasderegalosdeitunes.com.es
itunesradio.ng
apple-order1.apple.com
12diasderegalosdeitunes.com.es
itunesradio.ng
itunesradio.ng
12diasderegalosdeitunes.com.es
itunesradio.ng
apple-order1.apple.com
itunesradio.ng
12diasderegalosdeitunes.com.es
12diasderegalosdeitunes.com.es
itunesradio.ng
apple-order1.apple.com
itunesradio.ng
apple-order1.apple.com

Certificate

The complete raw certificate details for itunesradio.ng in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPbvvWgNJkjRSLyyOQVa
qNpz/Qmwlzf6YP21sep+FsPN7iICXVsKpPLbNQPymGfLP0VZXPAF02QcujTHYxht
+rDVtU/oSCL4R5FlmadAIpDiaRLjcSzfeBeVVFCdGlmg8omJjtITeUKN2N/tLxzr
80cLK7gvUtC6NqQ6oTVN+fWscAaRwQ7C0Ga9TgEEapUNueF+qwp72NzZb31q0Ylj
/VDFsSOGfZJ/rs+R4D4Z4dT7bZwiBQc0gXto+kvTMI1TGGu9eV4HdcFUGSIw7zbC
UdK7vEzNGOXHB60VIsYeRHpazYOxzRJ536nAhvYRyiR3B/9bgdJz4k4c0kg5s8cp
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 129707245363993203799900151303064113477
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Public Server RSA CA 12 - G1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 17:51:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 18:01:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'itunesradio.ng'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24864476691930120392613204121496338214525882985942667074618676180818528161390957213744828963564415277299487439419339191137493081597550455337831905424421358760515385555289269702114691857663372481750916170562521379864491285714387157785093340577520985836487746701780993127236037441072505297345980235024690912945253397390243727043056839566473173683509620466066347166130339663757586972595968866105376649739610903210384896575973287351392460678881119016122400915118044961351662121008298604476564608939543116256757140743403738782301147604484388719034376432021727058280608683205328559601319191936770874544203851136836208896299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e5c1791055702fc775ce37043ec6bfdddd2d869
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/apsrsa12g1.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-apsrsa12g101'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1099 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunesradio.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphonecentre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipodcentre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iphonecentre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imac.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilecture.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipod.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesradio.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apple.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibook.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imac.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imac.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12diasderegalosdeitunes.co.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applecomputers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primephonic.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes12daysofchristmas.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilecture.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes12daysofchristmas.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apple.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applecomputers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipodcentre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunesradio.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iphoto.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12diasderegalosdeitunes.com.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ituneslive.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes12dagencadeaus.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipod.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultants.apple.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes12daysofchristmas.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12diasderegalosdeitunes.com.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ituneslive.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12diasderegalosdeitunes.co.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ituneslive.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibook.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imacshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes12dagencadeaus.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes12daysofchristmas.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applecomputer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imac.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.apple.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imacshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphoto.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesradio.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primephonic.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applecomputer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ituneslive.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consultants.apple.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.apple.com/certificateauthority/public'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.5.11.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/apsrsa12g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cab7016197fbc123dbe19fc848276c677374702e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (479 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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