www.me.com

- Apple Inc. -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:c8:3a was issued on by GeoTrust, Inc..

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Apple Inc.

Company registration number: zB2AE8qO3qlowfmSgnsa94k9zoSBFdMe
Organization: Apple Inc.
Organization unit: Akamai SAN SSL OV
State / Province: California
Locality: Cupertino
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:c8:3a
Serial Number (int): 182330
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 5a:3b:9e:fc:b1:82:a8:72:d1:eb:7c:20:4d:71:8a:15:b6:78:c6:83
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 46:b8:33:46:8c:2f:ae:2a:9f:65:14:79:eb:41:0b:10:c9:ec:1e:e3
Fingerprint (sha256): 6c:71:b5:5b:8f:b1:03:07:47:35:59:45:6d:88:d8:85:76:2e:24:5b:61:98:9a:8c:fd:63:ee:f4:80:b9:3d:d4

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate www.me.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.me.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.me.com
c.itunes.apple.com
cal.me.com
configuration.apple.com
delta.mac.com
delta.me.com
discussionskorea-ph.apple.com
expresslane-uata.apple.com
files.me.com
fileservices.me.com
fmip.me.com
fmipmobile.me.com
gsxappit.apple.com
gsxappld.apple.com
gsxapput.apple.com
idisk.mac.com
idisk.me.com
itc.mzstatic.com
itunesconnect.apple.com
jiveuat-jp.apple.com
jiveuat-us.apple.com
m3.mac.com
mobileapp-dev1.corp.apple.com
mobileapp-qa1.corp.apple.com
mobileapp-qa2.corp.apple.com
mobileapp-qa3.corp.apple.com
otocacheit.apple.com
otocachet.apple.com
otoit.cdn-apple.com
otout.cdn-apple.com
phoneservices.me.com
public.me.com
publish.mac.com
publish.me.com
rjvit.cdn-apple.com
rjvt.cdn-apple.com
s.itunes.apple.com
s.mzstatic.com
se.itunes.apple.com
secure.me.com
selfsolve-uata.apple.com
setup.icloud.com
sfcdownloadit.cdn-apple.com
sfcdownloaduat.cdn-apple.com
static-uptodate-uat.cdn-apple.com
static.me.com
static1.me.com
static2.me.com
static3.me.com
static4.me.com
storedev1.corp.apple.com
storeqa1.corp.apple.com
storeqa2.corp.apple.com
storeqa3.corp.apple.com
support-uata-ext.apple.com
support-uata.apple.com
swcdn.apple.com
sync.mac.com
sync.me.com
syncservices.me.com
wsuat01.apple.com
www.apple.com
www.icloud.com
www.iwork.com
www.mac.com
mobileapp-dev2.corp.apple.com
mobileapp-dev3.corp.apple.com
storeimages-test.cdn-apple.com
alpdownloadit.cdn-apple.com
appleweb-stage.apple.com
ilogwebpay-test-netstorage.cdn-apple.com
salesdownloadat.corp.apple.com
salesdownloaddev.corp.apple.com
salesdownloadit.corp.apple.com
alpdownloaduat.cdn-apple.com
gsxappit2a.apple.com
gsxapput2a.apple.com
www.me.com
me.com

Other certificates including the domain name me.com

(limited to 100 certificates)
www.me.com
americasred3.apple.com
americasred3.apple.com
me.com
*.mail.me.com
imap.mail.me.com
jetfuelapp.com
smtp.me.com
*.me.com
smtp.mail.me.com
smtp.me.com
test.me.com
auth.me.com
connectivity.me.com
jetfuelapp.com
calendar.me.com
smtp.mail.me.com
www.me.com
smtp.me.com
pv33p08im-zfssa08582.me.com
test.me.com
auth.me.com
www.me.com
*.mail.me.com
www.me.com
secure.me.com
americasred3.apple.com
auth.me.com
mail.me.com
imap.mail.me.com
*.private.me.com
syncservices.me.com
cloudkit.io
jetfuelapp.com
smtp.mail.me.com
jetfuelapp.com
*.mail.me.com
me.com
*.connectivity.me.com
cal.me.com
me.com
www.me.com
secure.me.com
slotmatching1.web.me.com
me.com
www.me.com
magictrackpad.com
www.me.com
mail.me.com
americasred3.apple.com
imap.mail.me.com
*.me.com
smtp.me.com
smtp.mail.me.com
mail.me.com
me.com
auth.me.com
jetfuelapp.com
*.me.com
ckdatabaserpc.icloud.com
www.me.com
ms11p00im-hme-mta.me.com
me.com
files.me.com
smtp.mail.me.com
www.me.com
smtp.me.com
www.me.com
imap.mail.me.com
smtp.mail.me.com
jetfuelapp.com
smtp.mail.me.com
imap.mail.me.com
www.me.com
cal.me.com
www.me.com
me.com
www.me.com
*.mail.me.com
smtp.mail.me.com
me.com
*.connectivity.me.com
files.me.com
ms11p00im-hme-mta.me.com
*.me.com
www.me.com
imap.mail.me.com
slotmatching1.web.me.com
*.connectivity.me.com
imap.mail.me.com
*.mail.me.com
*.me.com
cloudkit.io
ms11p00im-hme-mta.me.com
ms11p00im-hme-mta.me.com
www.me.com
adminservices.me.com
jetfuelapp.com
www.me.com
*.me.com

Certificate

The complete raw certificate details for www.me.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFQ+rv2kEi6qMsqmvMjv
SLNWE1MQdSldoWgtj3VajJkHfznpa/AAbAhC0QI07ZUjSDOgPWS9P0kMnQQaSjiJ
QkE6Sxanja6ell9RRM9QtoEBai4PYaJ7WFnQX4Z5Fxa1uVQhs5QWiIAQtlqYLc4a
HRvrccGa2IAsKYsVC/YW2L4Z4b19mXb4xFNo6kpeGHov4ir3UtfWf6S8imqcGzXQ
N4g+yUAEavFh5yOyKfyxMK9LfdcmIfcf9YNkGmkPv9pVDZ5a1fIaT6N0h+3hrdoO
cISEzmiY+iZz+KQ2vI39/VJ6b6sG5U965QUrH3953Kvt/adCVJvsDQHALpn5zbNP
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 182330
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-20 11:24:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-11 16:30:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zB2AE8qO3qlowfmSgnsa94k9zoSBFdMe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cupertino'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.me.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24279297241106395565010748803784242751850737742858034974460427822492797016700414620492714620681721423559245909291268716723272517612681344838323498440287574715569627761818495680761522811505260350853621607670951514811617235710640077541360815892702449004301683302900158118041646702258953143833269613046731023254428629093549663281188540395996767941689607174101534029663524244372435633203704456830897544209285578835475875691439575697149982930662371746748335532220595336902927377422219590264450889790299795287889574730994328914257762462270129992903404646023679811939404476096197724076183697167903556063084701739018379022319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1701 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cal.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configuration.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delta.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delta.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discussionskorea-ph.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresslane-uata.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileservices.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmip.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmipmobile.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsxappit.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsxappld.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsxapput.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idisk.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idisk.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itc.mzstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesconnect.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiveuat-jp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiveuat-us.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm3.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-dev1.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-qa1.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-qa2.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-qa3.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otocacheit.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otocachet.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otoit.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otout.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoneservices.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rjvit.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rjvt.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.mzstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfsolve-uata.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setup.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcdownloadit.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcdownloaduat.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-uptodate-uat.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storedev1.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeqa1.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeqa2.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeqa3.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-uata-ext.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-uata.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swcdn.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sync.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sync.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syncservices.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsuat01.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-dev2.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-dev3.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeimages-test.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpdownloadit.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appleweb-stage.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilogwebpay-test-netstorage.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesdownloadat.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesdownloaddev.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesdownloadit.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpdownloaduat.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsxappit2a.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsxapput2a.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a3b9efcb182a872d1eb7c204d718a15b678c683
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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