www.me.com

- Apple Inc. -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:cb:5a was issued on by GeoTrust, Inc..

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Apple Inc.

Company registration number: HJWXYC528ftGcLl8MFpsTY0sDrBUsN/F
Organization: Apple Inc.
Organization unit: Akamai SAN SSL OV
State / Province: California
Locality: Cupertino
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:cb:5a
Serial Number (int): 183130
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 3b:73:25:04:e3:df:21:78:45:2a:f2:67:fd:a1:35:19:ff:0b:98:b7
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): a1:d8:66:db:01:6c:6f:35:09:cc:08:eb:01:b6:df:fd:5b:25:02:52
Fingerprint (sha256): 6d:8a:2e:8d:4b:77:96:53:f2:23:f6:5d:cc:46:23:bb:bf:29:a5:a2:5f:eb:7b:e1:d9:44:ae:74:2f:a5:f7:89

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate www.me.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.me.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.me.com
c.itunes.apple.com
cal.me.com
configuration.apple.com
delta.mac.com
delta.me.com
discussionskorea-ph.apple.com
expresslane-uata.apple.com
files.me.com
fileservices.me.com
fmip.me.com
fmipmobile.me.com
gsxappit.apple.com
gsxappld.apple.com
gsxapput.apple.com
idisk.mac.com
idisk.me.com
itc.mzstatic.com
itunesconnect.apple.com
jiveuat-jp.apple.com
jiveuat-us.apple.com
m3.mac.com
mobileapp-dev1.corp.apple.com
mobileapp-qa1.corp.apple.com
mobileapp-qa2.corp.apple.com
mobileapp-qa3.corp.apple.com
otocacheit.apple.com
otocachet.apple.com
otoit.cdn-apple.com
otout.cdn-apple.com
phoneservices.me.com
public.me.com
publish.mac.com
publish.me.com
rjvit.cdn-apple.com
rjvt.cdn-apple.com
s.itunes.apple.com
s.mzstatic.com
se.itunes.apple.com
secure.me.com
selfsolve-uata.apple.com
setup.icloud.com
sfcdownloadit.cdn-apple.com
sfcdownloaduat.cdn-apple.com
static-uptodate-uat.cdn-apple.com
static.me.com
static1.me.com
static2.me.com
static3.me.com
static4.me.com
storedev1.corp.apple.com
storeqa1.corp.apple.com
storeqa2.corp.apple.com
storeqa3.corp.apple.com
support-uata-ext.apple.com
support-uata.apple.com
swcdn.apple.com
sync.mac.com
sync.me.com
syncservices.me.com
wsuat01.apple.com
www.apple.com
www.icloud.com
www.iwork.com
www.mac.com
mobileapp-dev2.corp.apple.com
mobileapp-dev3.corp.apple.com
storeimages-test.cdn-apple.com
alpdownloadit.cdn-apple.com
appleweb-stage.apple.com
ilogwebpay-test-netstorage.cdn-apple.com
salesdownloadat.corp.apple.com
salesdownloaddev.corp.apple.com
salesdownloadit.corp.apple.com
alpdownloaduat.cdn-apple.com
gsxappit2a.apple.com
gsxapput2a.apple.com
discussions-uat.apple.com
www.me.com
me.com

Other certificates including the domain name me.com

(limited to 100 certificates)
www.me.com
americasred3.apple.com
americasred3.apple.com
me.com
*.mail.me.com
imap.mail.me.com
jetfuelapp.com
smtp.me.com
*.me.com
smtp.mail.me.com
smtp.me.com
test.me.com
auth.me.com
connectivity.me.com
jetfuelapp.com
calendar.me.com
smtp.mail.me.com
www.me.com
smtp.me.com
pv33p08im-zfssa08582.me.com
test.me.com
auth.me.com
www.me.com
*.mail.me.com
www.me.com
secure.me.com
americasred3.apple.com
auth.me.com
mail.me.com
imap.mail.me.com
*.private.me.com
syncservices.me.com
cloudkit.io
jetfuelapp.com
smtp.mail.me.com
jetfuelapp.com
*.mail.me.com
me.com
*.connectivity.me.com
cal.me.com
me.com
www.me.com
secure.me.com
slotmatching1.web.me.com
me.com
www.me.com
magictrackpad.com
www.me.com
mail.me.com
americasred3.apple.com
imap.mail.me.com
*.me.com
smtp.me.com
smtp.mail.me.com
mail.me.com
me.com
auth.me.com
jetfuelapp.com
*.me.com
ckdatabaserpc.icloud.com
www.me.com
ms11p00im-hme-mta.me.com
me.com
files.me.com
smtp.mail.me.com
www.me.com
smtp.me.com
www.me.com
imap.mail.me.com
smtp.mail.me.com
jetfuelapp.com
smtp.mail.me.com
imap.mail.me.com
www.me.com
cal.me.com
www.me.com
me.com
www.me.com
*.mail.me.com
smtp.mail.me.com
me.com
*.connectivity.me.com
files.me.com
ms11p00im-hme-mta.me.com
*.me.com
www.me.com
imap.mail.me.com
slotmatching1.web.me.com
*.connectivity.me.com
imap.mail.me.com
*.mail.me.com
*.me.com
cloudkit.io
ms11p00im-hme-mta.me.com
ms11p00im-hme-mta.me.com
www.me.com
adminservices.me.com
jetfuelapp.com
www.me.com
*.me.com

Certificate

The complete raw certificate details for www.me.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT1PzWr96GMwD+SjkTrs
ZDmipoKzHWAtQwe4e+zwpGsRWhDl23SXILGkR6WrQgpWRiIba5vXe1/SmlwzeN+X
BUK7U+J8/PJ8q3UY3ToQMKHpL0pitpeiKgguOMrpwRjtdZpvrFZ7ZB2vjwDZ7fJh
hjBgRNTk+BzaJsXX+XiUyTilexafj2I1IauNooOc2oi/c0CAUMx1RwZwXoxUERSk
rVKyxAzy58YCs3f7ysJ5XCr9RysEksQ7TKMwvCaAcXuhvBvkxrR2khSBAHnUgsri
4w3ZSEiZdGpoBn1U/tAitBnZ/fteahiCjkoZUXdRr7849BTAmFVRWeyn+BfNmJVz
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 183130
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-06 17:32:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-12 00:29:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HJWXYC528ftGcLl8MFpsTY0sDrBUsN/F'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cupertino'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.me.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24394226798448738357052785830717523418270833428457955829311239753041152272685930489385095076003853103433396399296231135123286611568027847919345814920511402283751194532405283046669964730880087476843789560151017716753099118309860713470063497180810715452299370469966926331904333568589592757342830967949965043085929437617533034866952395131619713529495217126929236719555626946625584805513533356441251045213910405490345215066348822561897304758804216331801451224134850549531435596907555128022267035417713321228386941040231490608361757683850517655963567101064128591401320162066607267944288054668629117582628419960266802164487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1728 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cal.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configuration.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delta.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delta.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discussionskorea-ph.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresslane-uata.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileservices.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmip.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmipmobile.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsxappit.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsxappld.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsxapput.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idisk.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idisk.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itc.mzstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesconnect.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiveuat-jp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiveuat-us.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm3.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-dev1.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-qa1.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-qa2.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-qa3.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otocacheit.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otocachet.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otoit.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otout.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoneservices.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rjvit.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rjvt.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.mzstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfsolve-uata.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setup.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcdownloadit.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcdownloaduat.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-uptodate-uat.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storedev1.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeqa1.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeqa2.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeqa3.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-uata-ext.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-uata.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swcdn.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sync.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sync.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syncservices.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsuat01.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-dev2.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-dev3.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeimages-test.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpdownloadit.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appleweb-stage.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilogwebpay-test-netstorage.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesdownloadat.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesdownloaddev.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesdownloadit.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpdownloaduat.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsxappit2a.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsxapput2a.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discussions-uat.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b732504e3df2178452af267fda13519ff0b98b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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