www.imac.co.nz

- Apple Inc. -

Issued by Apple Public Server RSA CA 12 - G1

About this certificate

This digital certificate with serial number 35:a0:0e:4f:94:22:5e:45:b4:cc:f8:41:8e:89:52:91 was issued on by Apple Inc..

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Apple Inc.

Organization: Apple Inc.
Organization unit: management:idms.group.1328361
State / Province: California
Country: US

Apple Inc.

Organization: Apple Inc.
State / Province: California
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 35:a0:0e:4f:94:22:5e:45:b4:cc:f8:41:8e:89:52:91
Serial Number (int): 71280141532570733554464017937364243089
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: e4:01:58:3b:d6:5d:3a:59:ec:fd:d8:1b:20:0f:5a:bc:fc:36:6d:ac
AuthorityKeyId: 1e:5c:17:91:05:57:02:fc:77:5c:e3:70:43:ec:6b:fd:dd:d2:d8:69

Fingerprint (sha1): 71:71:a0:24:14:7f:56:3b:a6:73:42:e8:ca:93:a0:1d:8a:2e:ea:19
Fingerprint (sha256): 61:38:f3:e4:38:5d:80:ed:25:84:58:f5:33:51:a9:a9:16:90:27:ec:0f:51:db:14:3a:dc:43:27:ff:a0:89:19

Issuing Certificate URL: http://certs.apple.com/apsrsa12g1.der

Revocation information

OCSP Server: http://ocsp.apple.com/ocsp03-apsrsa12g101
CRL Distribution Point: http://crl.apple.com/apsrsa12g1.crl

Check the revocation status for certificate www.imac.co.nz

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.imac.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.imac.one
www.imacsources.com
www.images-catch.com
www.imoviegallery.com
www.imoviestage.com
www.indiaipad.com
www.insidemacintosh.com
www.ipadair.com.mx
www.ipadair.hk
www.ipadair.jp
www.ipadair.mx
www.ipadair.tw
www.ipadaustralia.com
www.ipad.co.kr
www.ipad.host
www.ipadmini.com.lk
www.ipadmini.lk
www.ipados.com
www.ipadpro.buzz
www.ipadpro.mx
www.ipadpro.rio
www.ipad.rio
www.ipa-iphone.net
www.iphone.com.au
www.iphone.host
www.iphone.rio
www.ipod.com.au
www.ipod.com.cn
www.ipod.com.hk
www.ipod.com.sg
www.ipod.co.nz
www.ipod.de
www.ipod.hk
www.ipod.rio
www.ipodrocks.com.au
www.ipodshop.com.au
www.ipodtouch.com
www.ipodtouch.co
www.ischool.com
www.itunes.earth
www.itunesops.com
www.itunesradio.rio
www.itunes.rio
www.itunesstore.co
www.itunesstore.rio
www.iworktrialbuy.apple.com
www.jetfuelapp.com
www.jetfuelapps.com
www.join.applenews.apple
www.join.applenewsplus.apple
www.learn.applecard.apple
www.lionserver.com
www.listen.applemusic.apple
www.listen.applepodcasts.apple
www.livepage.apple.co.jp
www.livephotos.rio
www.lojaapple.com.br
www.macbookair.co.kr
www.macbookair.com.au
www.macbookair.com.cn
www.macbookair.hk
www.macbookair.jp
www.macbookair.kr
www.macbook.hk
www.macbookpro.com.au
www.macbookpro.co
www.macbook.rio
www.macbook.tw
www.mac.com.au
www.mach-os.com
www.machos.net
www.macintoshsoftware.com
www.mac.me
www.mac.om
www.mac.one
www.macos.com.au
www.macossierra.com
www.macosx.info
www.macreach.com
www.macreach.net
www.mac.rio
www.macstore.rio
www.mobileme.com
www.mr-apple-com1.apple.com
www.myapple.net
www.mzstatic.com
www.newsroom.apple
www.online-apple-store.com
www.onlineapplestore.com
www.openni.org
www.playquicktime.com
www.playquicktime.net
www.imac.co.nz

Other certificates including the domain name imac.co.nz

(limited to 100 certificates)
1to1computing.com.au
1to1computing.com.au
itunesradio.ng
1to1computing.com.au
1to1computing.com.au
www.imac.co.nz
1to1computing.com.au
1to1computing.com.au
asiared3.apple.com
asiared3.apple.com
1to1computing.com.au
www.imac.co.nz
www.imac.co.nz
itunesradio.ng
1to1computing.com.au
itunesradio.ng
1to1computing.com.au
www.imac.co.nz
1to1computing.com.au
www.imac.co.nz
1to1computing.com.au
1to1computing.com.au
www.imac.co.nz
www.imac.co.nz
1to1computing.com.au
1to1computing.com.au
itunesradio.ng
1to1computing.com.au
1to1computing.com.au
1to1computing.com.au
itunesradio.ng
itunesradio.ng
1to1computing.com.au
www.imac.co.nz
asiared3.apple.com
1to1computing.com.au
www.imac.co.nz
itunesradio.ng
asiared3.apple.com
itunesradio.ng
itunesradio.ng
1to1computing.com.au
www.imac.co.nz
asiared3.apple.com

Certificate

The complete raw certificate details for www.imac.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCyKoJugUPdW4kklYeyW
iqIav2dvV4Evl3nLMw2ZyOzCQ4kWTd/HzwC5GOaSiLZdx6p+/jM2O29RVZiN8lsj
iXEjQ6BjdCoSFlQ5CT53FLX8CZjmPHyxSBSHpT0TKeeYRe/s7rp4+DImlhrk2Es6
KCli4FycMcEeogLrJ/GRv5TmoVZbgAQoC14Cvsya/jUor570RZKW/2H0M12gPXqf
vr3SQqaM92GVsVxzpJ9VJxbfz/N0P2qD0+78v3t80y5N9gATxMcyTn0WTk2pJZDe
90nu/zu3E5cBYZXYbHOiaUJcgmiHaJf1XeUJGwy1aJ+WRn8mocXkYKPGMNCldB0L
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 71280141532570733554464017937364243089
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Public Server RSA CA 12 - G1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-18 04:51:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-16 04:51:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.imac.co.nz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'management:idms.group.1328361'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23249812352523366432954739214161137067432091806707813832119480642587484291995708133720419217606181221048238037325620795061872583932245460696116738287916190370607873080759942643113241219215321375065936132948818343838915298309391726985256071392590771485995032752858256876794226040361695207110950551566201477623710160208419297933365402626863585091598407082200179260833718199227776263992775905402566242175099321677837170033754810698072732705184823244842772466438671441315401313974946451073618098845189144712057277434563467561023871792553799447057149162066685893592039573350372590268649145069959164845528595114219997563731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e5c1791055702fc775ce37043ec6bfdddd2d869
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/apsrsa12g1.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-apsrsa12g101'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1802 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imac.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imacsources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.images-catch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imoviegallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imoviestage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiaipad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insidemacintosh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadair.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadair.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadair.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadair.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadair.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipad.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipad.host'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadmini.com.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadmini.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadpro.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadpro.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadpro.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipad.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipa-iphone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iphone.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iphone.host'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iphone.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipodrocks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipodshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipodtouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipodtouch.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ischool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes.earth'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunesops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunesradio.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunesstore.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunesstore.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iworktrialbuy.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jetfuelapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jetfuelapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.join.applenews.apple'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.join.applenewsplus.apple'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learn.applecard.apple'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lionserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.listen.applemusic.apple'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.listen.applepodcasts.apple'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livepage.apple.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livephotos.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lojaapple.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbookair.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbookair.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbookair.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbookair.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbookair.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbookair.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbook.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbookpro.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbookpro.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbook.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbook.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mac.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mach-os.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.machos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macintoshsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mac.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mac.om'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mac.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macos.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macossierra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macosx.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macreach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macreach.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mac.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macstore.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobileme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mr-apple-com1.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myapple.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mzstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newsroom.apple'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.online-apple-store.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlineapplestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playquicktime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playquicktime.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imac.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (255 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.5.11.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.apple.com/certificateauthority/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of any applicable terms and conditions of use and/or certification practice statements.'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/apsrsa12g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e401583bd65d3a59ecfdd81b200f5abcfc366dac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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