itunes.apple.com

- Apple Inc. -

Issued by Apple Public EV Server RSA CA 2 - G1

About this certificate

This digital certificate with serial number 65:ac:44:5f:20:49:dd:89:73:92:d4:ba:1b:8d:59:8d was issued on by Apple Inc..

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Apple Inc.

Company registration number: C0806592
Organization: Apple Inc.
State / Province: California
Locality: Cupertino
Country: US

Apple Inc.

Organization: Apple Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 65:ac:44:5f:20:49:dd:89:73:92:d4:ba:1b:8d:59:8d
Serial Number (int): 135146489374465798761732173232203454861
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 35:5b:c3:aa:3a:fd:0a:a7:62:dd:9f:0f:4e:7f:21:53:f5:a3:8c:cc
AuthorityKeyId: 50:55:ab:43:a1:af:a9:48:2b:5a:c1:a2:87:89:04:e4:7a:0e:ca:da

Fingerprint (sha1): 10:dd:66:26:a1:fc:06:b5:3c:92:2a:aa:6e:96:00:3e:19:1e:af:7b
Fingerprint (sha256): 18:e3:47:df:81:31:be:e1:47:d0:4d:67:07:7f:83:07:ea:1d:79:78:9f:72:9a:5d:5b:a4:36:b3:23:08:a4:be

Issuing Certificate URL: http://certs.apple.com/apevsrsa2g1.der

Revocation information

OCSP Server: http://ocsp.apple.com/ocsp03-apevsrsa2g101
CRL Distribution Point: http://crl.apple.com/apevsrsa2g1.crl

Check the revocation status for certificate itunes.apple.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itunes.apple.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

su.itunes.apple.com
volume.itunes.apple.com
ns.itunes.apple.com
se.itunes.apple.com
bookkeeper.itunes.apple.com
searchbot.itunes.apple.com
genius-2.itunes.apple.com
play.books.apple.com
ld-3.itunes.apple.com
sitemanager.itunes.apple.com
pg-bootstrap.itunes.apple.com
sp.itunes.apple.com
uts-api.itunes.apple.com
upp.itunes.apple.com
play.podcastsconnect.apple.com
du-fuse.itunes.apple.com
np.itunes.apple.com
sc.itunes.apple.com
ld-st11.itunes.apple.com
files.itunes.apple.com
genius-upload-2.itunes.apple.com
userpub.itunes.apple.com
homesharing.itunes.apple.com
api.itunes.apple.com
ld-2.itunes.apple.com
sonos-music.apple.com
st00-cls-iosclient.itunes.apple.com
st00-cls-ingest.itunes.apple.com
ld-5.itunes.apple.com
appsto.re
carrierbundle.itunes.apple.com
genius-upload.itunes.apple.com
p1-u.itunes.apple.com
dzc.itunes.apple.com
se2.itunes.apple.com
pd-st.itunes.apple.com
siri-search.itunes.apple.com
static.itunes.apple.com
pd-nk.itunes.apple.com
mr00-cls-iosclient.itunes.apple.com
pd.itunes.apple.com
itun.es
sync.itunes.apple.com
cma.itunes.apple.com
genius-download-2.itunes.apple.com
client-api.itunes.apple.com
genius-download.itunes.apple.com
sitemaps.itunes.apple.com
ld-6.itunes.apple.com
search.itunes.apple.com
play.apps.apple.com
uclient-api.itunes.apple.com
uwl.itunes.apple.com
s.mzstatic.com
ld-7.itunes.apple.com
genius.itunes.apple.com
ld-4.itunes.apple.com
ld-8.itunes.apple.com
p2-u.itunes.apple.com
play.music.apple.com
uts-api-siri.itunes.apple.com
init.itunes.apple.com
my.itunes.apple.com
bag.itunes.apple.com
vocabulary.itunes.apple.com
embed.itunes.apple.com
play.itunes.apple.com
storepreview.itunes.apple.com
play.tv.apple.com
storepreview.apple.com
itunes.apple.com
mr00-cls-ingest.itunes.apple.com
partiality.itunes.apple.com
ax.init.itunes.apple.com
du.itunes.apple.com
userprofile.itunes.apple.com
courses.apple.com
ld-nk11.itunes.apple.com
se-edge.itunes.apple.com
itunesu.itunes.apple.com
edge.itunes.apple.com
myapp.itunes.apple.com
vpp.itunes.apple.com
play.podcasts.apple.com
ld-1.itunes.apple.com
macappsto.re
feeds.itunes.apple.com

Other certificates including the domain name apple.com

(limited to 100 certificates)
itunes.apple.com
ja.ls.apple.com
origin-discussions2-us-dr-prz.apple.com
training.apple.com
reserves-prime.prz.apple.com
app001.apple.com
deployment-pv50.ls.apple.com
itunes.apple.com
reserve-prime.apple.com
gsp81-ssl-e1118.ls.apple.com
gsp102-ssl-e1502.ls.apple.com
api.searchads.apple.com
idmsa-uat.apple.com
webpay-sh-pilot.apple.com
mzstatic.com
store-029.blobstore.apple.com
beatsglobalquality-uat.corp.apple.com
rw.apple.com
stg-pod1-smp.corp.apple.com
gr-api-video-h-aapne1a.smoot.apple.com
web-ext-mmap-ce01.apple.com
assurance-jigglebilly.apple.com
usl-expe1405.apple.com
store-995.blobstore.apple.com
sapecc-prd-ext.sap.apple.com
swdlp.apple.com
gsx.apple.com
gsp-ssl-e1134.ls.apple.com
clx-dev.apple.com
noodle.apple.com
gsp11-ty21-dlb-2.ls.apple.com
mzuserxp.itunes.apple.com
gsp64-st14-ssl-dlb.ls.apple.com
gsp45-ssl-e1356.ls.apple.com
gsp12-st14-dlb-2.ls.apple.com
discussions-uat.apple.com
dc-portal.apple.com
supplier.apple.com
gsp48-kittyhawk-qs55-ssl.ls.apple.com
gsp81-ssl-e1502.ls.apple.com
gsp48-ssl-e691.ls.apple.com
mapsconnectapi.ls.apple.com
wdg01-uat.apple.com
wellnessclassic.apple.com
api-partner-connect-uat1.apple.com
people.apple.com
supplier-registration.apple.com
gsp60-ssl-e997.ls.apple.com
ssuat.apple.com
locate.apple.com
itunes.apple.com
suppliernet.apple.com
gsp79-am31-dlb.ls.apple.com
smp-device-qa3.apple.com
eurored3.apple.com
devcon-oomnshuttleist-test.apple.com
coreservices-e1506-ms11-bistunium-k8straefik.ls.apple.com
dmo-vip01-storeinfo.retailtech.apple.com
gsp70-ssl-e706.ls.apple.com
dinah05.corp.apple.com
gsp1-ssl.apple.com
gspe85-cn-ssl.ls.apple.com
vorpal-relay.apple.com
bswe.apple.com
cma.itunes.apple.com
gsp-ssl-apne1-ash.ls.apple.com
theloop-stage.apple.com
tokenvalidation.apple.com
linkmaker.itunes.apple.com
gsp70-ssl-e1633.ls.apple.com
gsp63-ms12-kittyhawk-ssl.ls.apple.com
gsp-ssl-sl61-ipv6.ls.apple.com
aws-onepulse.apple.com
nightcap-events.apple.com
argo-api.apple.com
gsp12-kh-st14-1.ls.apple.com
gsp59-ssl-e506.ls.apple.com
mr-apple-com2.apple.com
ocservice.apple.com
gsp36-ssl-e1627.ls.apple.com
marketing.apple.com
ioss-callbackservices-qa3.apple.com
gsp19-kh-ms12.ls.apple.com
madeforipodandiphone.apple.com
gspe19-ssl.ls.apple.com
gsp19-1-kittyhawk-ci77-ssl.ls.apple.com
cs-integrations-stage.apple.com
gsp35-ty21-ssl.ls.apple.com
gbiportal-apps-external.apple.com
plmtest2.apple.com
gsp3-sy02-ssl.ls.apple.com
gspe35-ssl.ls.apple.com
gsp76-ty21-01.ls.apple.com
ne-access.apple.com
profilebroker.apple.com
axm-scim-qa12.apple.com
gsp95-hk02-stage-ssl.ls.apple.com
contactretail.apple.com
caffemacs-aa-prz.apple.com
bam.corp.apple.com

Certificate

The complete raw certificate details for itunes.apple.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9SDPIDVFFYgj9UOHj2o
eepvPcqakRoMAH++WNbiE4cuRduI0vruCN8WVPrWhs+8b5AcYLDb4V96+e57h2Nd
taGlvH6wCZMj4lqPomGOJsQeVl4yicJOMQZtFiY3IJ1bGq37yp5rsqEA/jdPmE3b
PANAjwtywSUuK6fh8tpgQdzY5/tlEpuyEISpcFHnO8FwC9LrtgkEok7Zcq+AINFX
Ml85BJLeje4jqZWqQSU4ieCRgFgYur1jgxMbvdgPWWrWQb/1+pVvKpFSgvZteJ/e
6odmGQw6ECU8P2JPMSVvqNs1kExhk2p2OJ9kH9kdPueNZS5I2n5lpuR3HHw9Be4L
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 135146489374465798761732173232203454861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Public EV Server RSA CA 2 - G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-17 18:46:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 18:56:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'C0806592'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cupertino'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itunes.apple.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24216310137987620676687908245614022583272128525518125570866740264742390032608109736977362903375405491960096231544179685680662779443256156884282587552132344777948583504473502749964345844846694378185633557455800099720290928554810842820363974283121829053531256647968049496406347452883893003064464034933845718244331752444082315919770019212839499103557050052010048988028636229035508949227607493468414188486944341427096920643862594999228171664882766433301724372304402701397288235589976541554263448708452960791990208568511460352690031814801760853287858940771687782185734654034840346071422628417439478894214057741887944395771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5055ab43a1afa9482b5ac1a2878904e47a0ecada
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/apevsrsa2g1.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-apevsrsa2g101'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'su.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volume.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ns.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookkeeper.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'searchbot.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genius-2.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.books.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ld-3.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitemanager.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pg-bootstrap.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uts-api.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upp.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.podcastsconnect.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'du-fuse.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ld-st11.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genius-upload-2.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userpub.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesharing.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ld-2.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonos-music.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st00-cls-iosclient.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st00-cls-ingest.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ld-5.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appsto.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrierbundle.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genius-upload.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p1-u.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dzc.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se2.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pd-st.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siri-search.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pd-nk.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mr00-cls-iosclient.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pd.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itun.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sync.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cma.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genius-download-2.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client-api.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genius-download.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitemaps.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ld-6.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.apps.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uclient-api.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uwl.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.mzstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ld-7.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genius.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ld-4.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ld-8.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p2-u.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.music.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uts-api-siri.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'init.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bag.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vocabulary.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'embed.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storepreview.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.tv.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storepreview.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mr00-cls-ingest.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partiality.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ax.init.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'du.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userprofile.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courses.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ld-nk11.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se-edge.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesu.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myapp.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpp.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'play.podcasts.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ld-1.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macappsto.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.itunes.apple.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (265 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.apple.com/certificateauthority/public/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of the Relying Party Agreement found at https://www.apple.com/certificateauthority/public/.'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/apevsrsa2g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							355bc3aa3afd0aa762dd9f0f4e7f2153f5a38ccc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00746a512e0cc445729f58d6a09bc82ec2dd1eeb405b3146214a1ee614d8b602ad820197d2faa72fcc9c2db0bbe92ef01dbb18e8287f6964023738f1a799d9b4acb98fc612726d794a4173011bfcfe01e0dfabe534f5ca3ebe1758a644a5dc9a503854bb2b70401b3a239b73e262182ecf62dcea8492c7b6cdf7f4cbdab025a19d38453b7c460e48e9074b87f6a9fa6415cbf538cfe60328be151ed7bc78eb437c8bd7ca58df3fd6e13b34950aafc961520ee2b16bed46b8e4bbc7f66e554f6423f33747b26483af4dd736ff0bff4bf9b5c76acc40af9d6abb3e6931c0a6538ca4072d7d3d7041bcb91c76030ae1b8b635aac4a706edd3981dcdeb72a3b4b6ec3a