cloudkit.io

- Apple Inc. -

Issued by Apple Public Server RSA CA 12 - G1

About this certificate

This digital certificate with serial number 7e:1a:99:1e:98:9f:72:42:ae:eb:06:90:7f:80:66:20 was issued on by Apple Inc..

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Apple Inc.

Organization: Apple Inc.
Organization unit: management:idms.group.1328361
State / Province: California
Country: US

Apple Inc.

Organization: Apple Inc.
State / Province: California
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7e:1a:99:1e:98:9f:72:42:ae:eb:06:90:7f:80:66:20
Serial Number (int): 167620832819970019915757981924788823584
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f7:24:e7:76:c0:70:85:57:11:37:d6:d1:62:59:63:64:1f:bc:8d:c3
AuthorityKeyId: 1e:5c:17:91:05:57:02:fc:77:5c:e3:70:43:ec:6b:fd:dd:d2:d8:69

Fingerprint (sha1): d1:d4:52:57:09:3a:23:fc:a8:1c:80:14:d2:a5:a0:85:c5:df:ef:fd
Fingerprint (sha256): 1b:c7:8e:4c:e7:9c:c4:cb:bd:ca:14:22:99:b9:19:0f:c5:bf:ce:cd:c9:e4:e3:f2:af:e3:d0:7d:2c:c5:87:ea

Issuing Certificate URL: http://certs.apple.com/apsrsa12g1.der

Revocation information

OCSP Server: http://ocsp.apple.com/ocsp03-apsrsa12g101
CRL Distribution Point: http://crl.apple.com/apsrsa12g1.crl

Check the revocation status for certificate cloudkit.io

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cloudkit.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

itunesfestivals.com
www.apples-msk.ru
imacshop.net
ipadair.mx
shopdifferent.org
lojaapple.com.br
thetamap.com
itunesmatch.com
mac.me
itunes.org
wwwapple.com
qapple.com
www.apple.co.kr
wwwapplestore.com
www.texture.ca
theapplestore.us
guide.apple.com
texture.com
icloud.rio
livephotos.rio
itunesradio.rio
cloudkit.io
metapushpin.net
intrinsity.net
wwdc.apple.com
metapushpin.info
shopdifferent.net
ituneslogin.net
podcasting.apple.com
www.applesmartcovers.com
ibook.info
texture.ca
metapushpin.com
www.appleclub.com.hk
online-apple-store.com
pushpin.mobi
www.apple.co.cr
mac.om
www.texture.com
intrinsity.com
itunes.rio
seminars.apple.com
shop-different.org
macstore.rio
omegamap.com
www.apple.cm
www.apple.cl
www.apple.cn
www.itunes.com.mx
ipod.rio
imoovie.com
digitalhub.com
macboxset.com
ipodtouch.com
ipadpro.mx
dotmac.com
wwwapple.ca
evsx.com
livepage.apple.com
mzstatic.com
theapplestore.com
wdirect.apple.com
thinkdifferent.us
firewire.org
imac.mx
itunesu.com
www.applecomputer.ca
lambdamap.com
itunes.mx
itunesstore.rio
shop-different.net
store.apple.ca
eworld.com
itunesessentials.com
lionserver.com
onlineapplestore.com
www.appl-e.com
ipadpro.rio
shop-different.com
imoviefest.com
next.com
findmyipad.com
iphone-challenge.com
www.applesmartcover.com
newton.com
ipadair.com.mx
codifiable.com
itunes.com.mx
theapple.com
oneline-apple-store.com
mac.rio
podcast.apple.com
rendermap.com
intrinsity.org
metapushpin.org
macbook.rio
iphone.rio
rememberingstevejobs.com
rememberingsteve.com

Other certificates including the domain name cloudkit.io

(limited to 100 certificates)
cloudkit.io
cloudkit.io
cloudkit.io
americasred1.apple.com
cloudkit.io
cloudkit.io
cloudkit.io
aknotepad.com
americasred1.apple.com
apple.id
cloudkit.io
aknotepad.com
cloudkit.io
cloudkit.io
aknotepad.com
americasred1.apple.com
apple.id
aknotepad.com
cloudkit.io
aknotepad.com
cloudkit.io
aknotepad.com
apple.id
cloudkit.io
apple.id
aknotepad.com
cloudkit.io
apple.id
cloudkit.io
cloudkit.io
aknotepad.com
cloudkit.io
aknotepad.com
aknotepad.com
cloudkit.io
cloudkit.io
cloudkit.io
cloudkit.io
aknotepad.com
apple.id
aknotepad.com
cloudkit.io
apple.id
cloudkit.io
americasred1.apple.com
apple.id
cloudkit.io
apple.id
cloudkit.io
aknotepad.com

Certificate

The complete raw certificate details for cloudkit.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Dv5BrTyDHWwy65boNEa
TWSpWLjJ6mLEbrax9ycLTJHFKcFVod2EOvO6mMfv55CQZXOsdLMdxEwmpzAV4Fpr
1kO4H43Gct9r3vbSS0X8xgUAqo7Hnbd1q0NTf5Aysx6Myw7SL09PAQEVfF8Uwys/
8waGExlWA8R3sy9S2J6hOsQ58EXXfXSU/DSeYVkeGp5ZotznlJZMM0co9ARmRZtO
eE+wGyInLaYkH//hqIkCCwX/+ki1ZdaTYU0ErSwauXiH4Jdgbf/6QpPEFfOQwwFP
7QU98Q+bMKbhpxt5FTxl4pXVVHThLHQA8nTv0yu64+dOXPr+UU2jYCZWEqqoR6KV
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 167620832819970019915757981924788823584
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Public Server RSA CA 12 - G1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-20 22:51:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-20 22:51:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cloudkit.io'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'management:idms.group.1328361'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26792094322289890860046821539956231406706301777665263850213734602763749310008832624677301435822414929175067519822038116684560737598616113365229800165665131850852573230011095391203846128310612506330020673353694384255387068637181569468095056957038677622358245534918921584581121731943683864984794371579573856189637511136322255152781907383523381755005915437507293388901063394554696554860200008286208447121203627054825690669868440890040627927019826172970674891899435288589173723014016980677886654576743357629560625824216161958047162228743672917095569611894543207763229694053434038202634953241465551576120023607363873445249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e5c1791055702fc775ce37043ec6bfdddd2d869
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/apsrsa12g1.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-apsrsa12g101'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1594 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesfestivals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apples-msk.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imacshop.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipadair.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopdifferent.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lojaapple.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetamap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesmatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mac.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwapple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qapple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwapplestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texture.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theapplestore.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guide.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icloud.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livephotos.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesradio.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudkit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metapushpin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrinsity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwdc.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metapushpin.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopdifferent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ituneslogin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcasting.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applesmartcovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibook.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texture.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metapushpin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appleclub.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-apple-store.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushpin.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mac.om'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrinsity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seminars.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-different.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macstore.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omegamap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipod.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imoovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macboxset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipodtouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipadpro.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotmac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwapple.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evsx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livepage.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theapplestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdirect.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkdifferent.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firewire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imac.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applecomputer.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambdamap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesstore.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-different.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.apple.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesessentials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineapplestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appl-e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipadpro.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-different.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imoviefest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findmyipad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphone-challenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applesmartcover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipadair.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codifiable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theapple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneline-apple-store.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mac.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcast.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rendermap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrinsity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metapushpin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macbook.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphone.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rememberingstevejobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rememberingsteve.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (255 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.5.11.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.apple.com/certificateauthority/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of any applicable terms and conditions of use and/or certification practice statements.'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/apsrsa12g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f724e776c07085571137d6d1625963641fbc8dc3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							01e1007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000181835924630000040300483046022100fa15f8cb1593ebdf5fd2edf63c9375fd90656e7353711579b3adb10dfe6b1a85022100e8ef225bfe5fd4fd0c27eda83055eda6ced80d9f2b2cae507eea3a15797e3576007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000181835924840000040300473045022100c433c931532b3a2d2b606a704ba00088544bf61db92bd0b4ce866b755e5f5115022058956e79e4d376823624ce1e50d9db2f74ebc527d48c4cc71d69c4d1c5e0a9a00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000181835923e10000040300473045022100d1477cd5771fc356dc7af176e13a6db7ed6b86e316720d141c44bf41f541b83b02200276c7687b8ec0d07d2921b2773a64519fbae016ead0e572983fc3901e0e7fde00760035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c00000181835923dc0000040300473045022068b90a00ef8224fd47f99a3a06a75a04dd60036f57f55f3303020be3b31bf63a022100eef7848b5b4e402c08c0ab47a0047ebc109b412dd6be0039dcb05bad27203b20
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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