smtp.me.com

- Apple Inc. -

Issued by Apple IST CA 2 - G1

About this certificate

This digital certificate with serial number 32:1a:3e:23:8a:46:f1:ba was issued on by Apple Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Apple Inc.

Organization: Apple Inc.
Organization unit: management:idms.group.599041
State / Province: California
Country: US

Apple Inc.

Organization: Apple Inc.
Organization unit: Certification Authority
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 32:1a:3e:23:8a:46:f1:ba
Serial Number (int): 3610266373655556538
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 85:4e:f3:13:98:44:45:d8:24:95:30:00:a9:10:f8:9a:dd:28:df:d8
AuthorityKeyId: d8:7a:94:44:7c:90:70:90:16:9e:dd:17:9c:01:44:03:86:d6:2a:29

Fingerprint (sha1): 2f:80:ef:c2:aa:e6:f9:e5:53:64:2f:5b:5d:9d:02:3d:ef:33:06:4e
Fingerprint (sha256): 60:6a:cf:36:3c:c4:02:f6:9f:8a:d7:eb:60:dc:4a:fc:24:0f:b5:c0:00:87:2b:d9:c0:22:89:12:86:42:2f:26

Issuing Certificate URL: http://certs.apple.com/appleistca2g1.der

Revocation information

OCSP Server: http://ocsp.apple.com/ocsp03-appleistca2g120
CRL Distribution Point: http://crl.apple.com/appleistca2g1.crl

Check the revocation status for certificate smtp.me.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smtp.me.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

smtp.me.com

Other certificates including the domain name me.com

(limited to 100 certificates)
www.me.com
americasred3.apple.com
americasred3.apple.com
me.com
*.mail.me.com
imap.mail.me.com
jetfuelapp.com
smtp.me.com
*.me.com
smtp.mail.me.com
smtp.me.com
test.me.com
auth.me.com
connectivity.me.com
jetfuelapp.com
calendar.me.com
smtp.mail.me.com
www.me.com
smtp.me.com
pv33p08im-zfssa08582.me.com
test.me.com
auth.me.com
www.me.com
*.mail.me.com
www.me.com
secure.me.com
americasred3.apple.com
auth.me.com
mail.me.com
imap.mail.me.com
*.private.me.com
syncservices.me.com
cloudkit.io
jetfuelapp.com
smtp.mail.me.com
jetfuelapp.com
*.mail.me.com
me.com
*.connectivity.me.com
cal.me.com
me.com
www.me.com
secure.me.com
slotmatching1.web.me.com
me.com
www.me.com
magictrackpad.com
www.me.com
mail.me.com
americasred3.apple.com
imap.mail.me.com
*.me.com
smtp.me.com
smtp.mail.me.com
mail.me.com
me.com
auth.me.com
jetfuelapp.com
*.me.com
ckdatabaserpc.icloud.com
www.me.com
ms11p00im-hme-mta.me.com
me.com
files.me.com
smtp.mail.me.com
www.me.com
smtp.me.com
www.me.com
imap.mail.me.com
smtp.mail.me.com
jetfuelapp.com
smtp.mail.me.com
imap.mail.me.com
www.me.com
cal.me.com
www.me.com
me.com
www.me.com
*.mail.me.com
smtp.mail.me.com
me.com
*.connectivity.me.com
files.me.com
ms11p00im-hme-mta.me.com
*.me.com
www.me.com
imap.mail.me.com
slotmatching1.web.me.com
*.connectivity.me.com
imap.mail.me.com
*.mail.me.com
*.me.com
cloudkit.io
ms11p00im-hme-mta.me.com
ms11p00im-hme-mta.me.com
www.me.com
adminservices.me.com
jetfuelapp.com
www.me.com
*.me.com

Certificate

The complete raw certificate details for smtp.me.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiPq9CsJsi/MMQxOWzrG
IOQ9jaleU13n4b78/ijMWzgygPZ+Tb1dKXZSTLjS84qo8RpZ7vS5DkEHn2EouEiB
TevhQ1RpR8ZPFEXueRjfUr1kCO5hCBRG1PPTgXrudQKay/sRTDSsH1iI9dZz1H1K
8omAryJskhmtrFeZNppohuTRuglIU3YE63iGozsUHcv5wK+UHhq+oxgBr+EFrrim
vwURUw3PIU0jL0B1jiBBxacpLa2lRKZ80OIXP6+eAeJl+jy4Odv5vTzgqdbAzQ9X
N+AujKy0xstKoiTtLi0GGSKlZj/5P6Exvuv0oUaVrQb8k73AahR9tXdbtt4SEv2y
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3610266373655556538
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple IST CA 2 - G1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-06 21:39:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-04 21:39:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'smtp.me.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'management:idms.group.599041'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25517849324634988521738162342542357741311003270069955732562367901495067230166968758574484717518294286543623959637175824531208855502309368292603652790002293492056828758063786304489817241929698117858417889087769032831672680093411759576159665109762769229855545899517393173728877816070892117992851343267929511228559156743189124961278852062491739782869427720566034862660221119065171058592007046271568431548779067463722250886949742450768295882650634041366705944775075517576287026065986405670947319483996666848622121650758800607155914899895167413889644066183275165928471499090635132676696713248836404143390319176861081252597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d87a94447c907090169edd179c01440386d62a29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/appleistca2g1.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-appleistca2g120'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.me.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.5.11.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of any applicable terms and conditions of use and/or certification practice statements.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.apple.com/certificateauthority/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/appleistca2g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							854ef313984445d824953000a910f89add28dfd8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (600 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004940111b34a2ec537722cdcf7cc0c6aa9d70d7ff7629280adad65d6f0c85f70bcb2f817b37835c626071cb45eef8e6e5fd29fa6ef1263c94e36f826b53099070b61dbf3ce6739d9fbfd1431c41f815f3a397ba791c84035943b06972015b475a51d57cf55267d734e2228d09e96c9e4e042c51e916ba7928de587d52f77467800421604efeb67cffa02e751b84bd8fdcbdf87c90275882b5a087d0dd1a4e23480273412fd7fd116159f594eb9c81c8e262aed487aec9b902aa2926a6c715427a86496fbcc220af21cc02804f92a9195c3abd5a00df0eb908d609fa56019751d8b338573e3955c1f4770510f43ce1851909015010f785f073a55e3c0c1fac7528