cloudkit.io

- Apple Inc. -

Issued by Apple Public Server RSA CA 12 - G1

About this certificate

This digital certificate with serial number 57:07:3b:cb:05:8c:2e:04:ec:b4:ad:7a:73:43:d6:a2 was issued on by Apple Inc..

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Apple Inc.

Organization: Apple Inc.
Organization unit: management:idms.group.1328361
State / Province: California
Country: US

Apple Inc.

Organization: Apple Inc.
State / Province: California
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 57:07:3b:cb:05:8c:2e:04:ec:b4:ad:7a:73:43:d6:a2
Serial Number (int): 115680394458497922563800882252733470370
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 83:e7:4f:d6:8c:0b:73:3a:46:95:89:a0:03:53:86:13:62:46:66:36
AuthorityKeyId: 1e:5c:17:91:05:57:02:fc:77:5c:e3:70:43:ec:6b:fd:dd:d2:d8:69

Fingerprint (sha1): 33:85:9c:73:cc:11:a4:ec:1f:e9:9c:de:96:50:81:5e:30:40:a1:aa
Fingerprint (sha256): 27:e4:79:2e:f8:e5:30:a4:7b:b2:af:94:83:58:2d:87:3e:7d:0a:9e:08:b1:e4:fd:26:1d:dd:82:30:5f:fd:eb

Issuing Certificate URL: http://certs.apple.com/apsrsa12g1.der

Revocation information

OCSP Server: http://ocsp.apple.com/ocsp03-apsrsa12g101
CRL Distribution Point: http://crl.apple.com/apsrsa12g1.crl

Check the revocation status for certificate cloudkit.io

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cloudkit.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

itunesfestivals.com
www.apples-msk.ru
imacshop.net
ipadair.mx
shopdifferent.org
lojaapple.com.br
thetamap.com
itunesmatch.com
mac.me
itunes.org
wwwapple.com
qapple.com
www.apple.co.kr
wwwapplestore.com
www.texture.ca
theapplestore.us
guide.apple.com
texture.com
icloud.rio
livephotos.rio
itunesradio.rio
cloudkit.io
metapushpin.net
intrinsity.net
wwdc.apple.com
metapushpin.info
shopdifferent.net
ituneslogin.net
podcasting.apple.com
www.applesmartcovers.com
ibook.info
texture.ca
metapushpin.com
www.appleclub.com.hk
online-apple-store.com
pushpin.mobi
www.apple.co.cr
mac.om
www.texture.com
intrinsity.com
itunes.rio
seminars.apple.com
shop-different.org
macstore.rio
omegamap.com
www.apple.cm
www.apple.cl
www.apple.cn
www.itunes.com.mx
ipod.rio
imoovie.com
digitalhub.com
macboxset.com
ipodtouch.com
ipadpro.mx
dotmac.com
wwwapple.ca
evsx.com
livepage.apple.com
mzstatic.com
theapplestore.com
wdirect.apple.com
thinkdifferent.us
firewire.org
imac.mx
itunesu.com
www.applecomputer.ca
lambdamap.com
itunes.mx
itunesstore.rio
shop-different.net
store.apple.ca
eworld.com
itunesessentials.com
lionserver.com
onlineapplestore.com
www.appl-e.com
ipadpro.rio
shop-different.com
imoviefest.com
next.com
findmyipad.com
iphone-challenge.com
www.applesmartcover.com
newton.com
ipadair.com.mx
codifiable.com
itunes.com.mx
theapple.com
oneline-apple-store.com
mac.rio
podcast.apple.com
rendermap.com
intrinsity.org
metapushpin.org
macbook.rio
iphone.rio
rememberingstevejobs.com
rememberingsteve.com

Other certificates including the domain name cloudkit.io

(limited to 100 certificates)

Certificate

The complete raw certificate details for cloudkit.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ5zRnUAblVAAMmlN/ZO
Tr2OYztLrexIRAl00HCuI4oJs70HG37XOxlJoh1gJOEbObeeZfxoFfUiSiT5X+J8
vNLhqoY8oBYCgR6WBvFm3VuPXq2y0A6IvuHpgOeqofsBTH5t0gAnH7HaTzCTCpJu
MPWb6HR+e2+JLf4TkfUvbu2wbZIr4WijhNlaW/4iuqTK5PjhNSYf1+TE7kATpDXS
+WJ7MVD4uplQVbifil0D5jAoVxbyyOtsq6+jPlQ56RGnHh/fGzdWFmmPYlOl2DCc
ToBMNSA4V7ohDSUugjUJ6+WyZvHWBB8ZPy6jQrJgf8/p2nFFj5Ij0K+CoQTEWF5k
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 115680394458497922563800882252733470370
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Public Server RSA CA 12 - G1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-28 21:51:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-27 21:51:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cloudkit.io'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'management:idms.group.1328361'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22296076426040454818199059189940363247899510012223111166853360787584791197425789942255124610041140533980676684381382194023343862960035646027650034445417049322962364698707951840250204196046415131931171466411866749703267829321733110838762161664712710834519388538772776324932006772878232736453607112637918756498648090888422749067444764489674881340764951235481236614982592508125336695545481360899595438791302497199602427607714689458344312147849996838839977711512686407927653189248848611028095061086184254488787510218136196355290411626486916242119385561741273495999266733071630705305277863148039422159468061498431204386021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e5c1791055702fc775ce37043ec6bfdddd2d869
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/apsrsa12g1.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-apsrsa12g101'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1594 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesfestivals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apples-msk.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imacshop.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipadair.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopdifferent.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lojaapple.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetamap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesmatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mac.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwapple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qapple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwapplestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texture.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theapplestore.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guide.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icloud.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livephotos.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesradio.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudkit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metapushpin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrinsity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwdc.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metapushpin.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopdifferent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ituneslogin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcasting.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applesmartcovers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibook.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texture.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metapushpin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appleclub.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-apple-store.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushpin.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mac.om'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.texture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrinsity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seminars.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-different.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macstore.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omegamap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipod.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imoovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macboxset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipodtouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipadpro.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotmac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwapple.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evsx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livepage.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theapplestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdirect.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkdifferent.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firewire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imac.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applecomputer.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambdamap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesstore.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-different.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.apple.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesessentials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineapplestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appl-e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipadpro.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-different.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imoviefest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findmyipad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphone-challenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applesmartcover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipadair.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codifiable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theapple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneline-apple-store.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mac.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcast.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rendermap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrinsity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metapushpin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macbook.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphone.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rememberingstevejobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rememberingsteve.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (255 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.5.11.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.apple.com/certificateauthority/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of any applicable terms and conditions of use and/or certification practice statements.'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/apsrsa12g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83e74fd68c0b733a469589a00353861362466636
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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