www.me.com

- Apple Inc. -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:c7:38 was issued on by GeoTrust, Inc..

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Apple Inc.

Company registration number: ZflIjLwmVkmB19wrHdfJVn/OvTEvrglx
Organization: Apple Inc.
Organization unit: Akamai SAN SSL OV
State / Province: California
Locality: Cupertino
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:c7:38
Serial Number (int): 182072
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 4a:4c:a5:b1:da:b0:20:18:b2:8e:6d:41:57:c3:68:5c:77:1f:85:5a
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 4e:de:bf:cd:d5:5f:a8:2f:a4:07:7b:79:da:6d:11:3a:1a:78:89:05
Fingerprint (sha256): 27:b3:7d:19:b6:36:87:c1:3e:26:be:e7:57:75:81:eb:cb:ba:4f:99:73:82:e6:c1:d3:2e:1c:70:3e:6f:e7:05

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate www.me.com

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.me.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.me.com
c.itunes.apple.com
cal.me.com
configuration.apple.com
delta.mac.com
delta.me.com
discussionskorea-ph.apple.com
expresslane-uata.apple.com
files.me.com
fileservices.me.com
fmip.me.com
fmipmobile.me.com
gsxappit.apple.com
gsxappld.apple.com
gsxapput.apple.com
idisk.mac.com
idisk.me.com
itc.mzstatic.com
itunesconnect.apple.com
jiveuat-jp.apple.com
jiveuat-us.apple.com
m3.mac.com
mobileapp-dev1.corp.apple.com
mobileapp-qa1.corp.apple.com
mobileapp-qa2.corp.apple.com
mobileapp-qa3.corp.apple.com
otocacheit.apple.com
otocachet.apple.com
otoit.cdn-apple.com
otout.cdn-apple.com
phoneservices.me.com
public.me.com
publish.mac.com
publish.me.com
rjvit.cdn-apple.com
rjvt.cdn-apple.com
s.itunes.apple.com
s.mzstatic.com
se.itunes.apple.com
secure.me.com
selfsolve-uata.apple.com
setup.icloud.com
sfcdownloadit.cdn-apple.com
sfcdownloaduat.cdn-apple.com
static-uptodate-uat.cdn-apple.com
static.me.com
static1.me.com
static2.me.com
static3.me.com
static4.me.com
storedev1.corp.apple.com
storeqa1.corp.apple.com
storeqa2.corp.apple.com
storeqa3.corp.apple.com
support-uata-ext.apple.com
support-uata.apple.com
swcdn.apple.com
sync.mac.com
sync.me.com
syncservices.me.com
wsuat01.apple.com
www.apple.com
www.icloud.com
www.iwork.com
www.mac.com
mobileapp-dev2.corp.apple.com
mobileapp-dev3.corp.apple.com
storeimages-test.cdn-apple.com
alpdownloadit.cdn-apple.com
appleweb-stage.apple.com
ilogwebpay-test-netstorage.cdn-apple.com
salesdownloadat.corp.apple.com
salesdownloaddev.corp.apple.com
salesdownloadit.corp.apple.com
alpdownloaduat.cdn-apple.com
www.me.com
me.com

Other certificates including the domain name me.com

(limited to 100 certificates)
www.me.com
americasred3.apple.com
americasred3.apple.com
me.com
*.mail.me.com
imap.mail.me.com
smtp.me.com
*.me.com
smtp.mail.me.com
smtp.me.com
test.me.com
auth.me.com
connectivity.me.com
jetfuelapp.com
calendar.me.com
smtp.mail.me.com
www.me.com
smtp.me.com
pv33p08im-zfssa08582.me.com
test.me.com
auth.me.com
www.me.com
*.mail.me.com
www.me.com
secure.me.com
americasred3.apple.com
auth.me.com
mail.me.com
imap.mail.me.com
*.private.me.com
syncservices.me.com
cloudkit.io
jetfuelapp.com
smtp.mail.me.com
jetfuelapp.com
*.mail.me.com
me.com
*.connectivity.me.com
cal.me.com
me.com
www.me.com
secure.me.com
slotmatching1.web.me.com
me.com
www.me.com
magictrackpad.com
www.me.com
mail.me.com
americasred3.apple.com
imap.mail.me.com
*.me.com
smtp.me.com
mail.me.com
me.com
auth.me.com
jetfuelapp.com
*.me.com
ckdatabaserpc.icloud.com
www.me.com
ms11p00im-hme-mta.me.com
me.com
files.me.com
smtp.mail.me.com
www.me.com
smtp.me.com
www.me.com
imap.mail.me.com
smtp.mail.me.com
jetfuelapp.com
smtp.mail.me.com
imap.mail.me.com
www.me.com
cal.me.com
www.me.com
me.com
www.me.com
*.mail.me.com
smtp.mail.me.com
me.com
*.connectivity.me.com
files.me.com
ms11p00im-hme-mta.me.com
*.me.com
www.me.com
imap.mail.me.com
slotmatching1.web.me.com
*.connectivity.me.com
imap.mail.me.com
*.mail.me.com
*.me.com
cloudkit.io
ms11p00im-hme-mta.me.com
ms11p00im-hme-mta.me.com
www.me.com
adminservices.me.com
jetfuelapp.com
www.me.com
*.me.com
ms11p00im-hme-mta.me.com
phoneservices.me.com

Certificate

The complete raw certificate details for www.me.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzm+PCJEIJJCmcUPjnvC3
r7UAt8z0PQ9nTD/aKAYESnqKLOBqpme21BNxnZgdjdSov5jRBd88/V7bIuSD83IQ
BofoDxo5+j7xdYyAQnZuzh1MyUwitIMs6NfJEuitW7KcpvDoTz5YX8GGAUOAg72Q
i/BzNMSoUlR8tsr96TFX+kdVkgJNrllnzETVqh9QNu/dssLRz15QXloIlIhJxWC6
5p8dK1PAhB54/mnN6fsDK4ZARxdPSp5MzuWliAowW6cwHDwoZkl5x4PslAglbmi1
58ADDt67N2wgk0wDWNNsj7x/hDnnL5FRBiq5aYM66hQJD9AeYaTCGmyzcrHTALn/
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 182072
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-17 14:30:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-11 01:27:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZflIjLwmVkmB19wrHdfJVn/OvTEvrglx'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cupertino'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.me.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26060102480354256911621737010057627406675668206829057553930607132604325148099409838915692461881270817123677206524963258008333865929434161755618470455794147096367319612316984038631721284797250660729523734477730448635904807302046206544001695692984735658394408405802724494879753188258224548881053456485889390027429461157608045422420155639278034499160483993491315255626949802010817921727638965067768389701517554087649386896915733968372579954518099177750581426646073802904553170571049515415318051127578066735826353035200652684123347368172721696772333608951103946268159889486124096634058939729468197207028353357312081657703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1657 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cal.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configuration.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delta.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delta.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discussionskorea-ph.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresslane-uata.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileservices.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmip.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmipmobile.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsxappit.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsxappld.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsxapput.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idisk.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idisk.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itc.mzstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesconnect.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiveuat-jp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiveuat-us.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm3.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-dev1.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-qa1.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-qa2.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-qa3.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otocacheit.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otocachet.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otoit.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otout.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoneservices.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rjvit.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rjvt.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.mzstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfsolve-uata.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setup.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcdownloadit.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcdownloaduat.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-uptodate-uat.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storedev1.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeqa1.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeqa2.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeqa3.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-uata-ext.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-uata.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swcdn.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sync.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sync.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syncservices.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsuat01.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-dev2.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-dev3.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeimages-test.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpdownloadit.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appleweb-stage.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilogwebpay-test-netstorage.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesdownloadat.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesdownloaddev.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesdownloadit.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpdownloaduat.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a4ca5b1dab02018b28e6d4157c3685c771f855a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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