itunesradio.ng

- Apple Inc. -

Issued by Apple Public Server RSA CA 12 - G1

About this certificate

This digital certificate with serial number 1f:06:97:66:b7:83:cc:42:a2:ef:a1:b2:56:30:37:11 was issued on by Apple Inc..

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Apple Inc.

Organization: Apple Inc.
State / Province: California
Country: US

Apple Inc.

Organization: Apple Inc.
State / Province: California
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:06:97:66:b7:83:cc:42:a2:ef:a1:b2:56:30:37:11
Serial Number (int): 41240292432401419554649711234968991505
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 8f:e0:a5:6a:b2:be:d8:0d:06:6e:d3:a4:8b:17:30:d8:6c:b9:11:25
AuthorityKeyId: 1e:5c:17:91:05:57:02:fc:77:5c:e3:70:43:ec:6b:fd:dd:d2:d8:69

Fingerprint (sha1): ef:21:ec:d7:a8:86:bd:ec:fb:c1:b6:f1:9a:7d:cd:e7:aa:de:3d:82
Fingerprint (sha256): 6d:f0:5b:f4:8f:1c:d5:a6:56:c6:52:7d:b9:30:de:b9:ff:de:2e:71:ab:df:2d:26:77:91:3a:06:c6:97:74:6c

Issuing Certificate URL: http://certs.apple.com/apsrsa12g1.der

Revocation information

OCSP Server: http://ocsp.apple.com/ocsp03-apsrsa12g101
CRL Distribution Point: http://crl.apple.com/apsrsa12g1.crl

Check the revocation status for certificate itunesradio.ng

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itunesradio.ng

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.itunesradio.co.nz
iphonecentre.nl
www.itunes.co.nz
ipodcentre.nl
itunes.co.nz
www.iphonecentre.nl
imac.nl
www.ilecture.co.nz
ipod.co.nz
itunesradio.ng
apple.no
www.ibook.co.nz
www.imac.nl
imac.co.nz
www.itunes.nl
www.12diasderegalosdeitunes.co.ni
www.itunes.no
applecomputers.co.nz
www.primephonic.nl
itunes.no
itunes.nl
www.apple.co.nz
www.itunes12daysofchristmas.co.nz
ilecture.co.nz
itunes12daysofchristmas.no
apple.co.nz
www.applecomputers.co.nz
www.ipodcentre.nl
www.apple.no
www.itunesradio.ng
www.ipod.no
www.iphoto.no
www.12diasderegalosdeitunes.com.ni
www.ipod.co.nz
ituneslive.no
itunesradio.no
www.itunes12dagencadeaus.nl
ipod.no
consultants.apple.co.nz
itunes12daysofchristmas.co.nz
12diasderegalosdeitunes.com.ni
www.ituneslive.nl
12diasderegalosdeitunes.co.ni
www.ituneslive.no
ibook.co.nz
www.imacshop.nl
itunes12dagencadeaus.nl
www.itunes12daysofchristmas.no
www.applecomputer.co.nz
www.imac.co.nz
store.apple.co.nz
imacshop.nl
iphoto.no
itunesradio.co.nz
primephonic.nl
applecomputer.co.nz
ituneslive.nl
www.consultants.apple.co.nz

Other certificates including the domain name itunesradio.ng

(limited to 100 certificates)
12diasderegalosdeitunes.com.es
itunesradio.ng
apple-order1.apple.com
itunesradio.ng
12diasderegalosdeitunes.com.es
itunesradio.ng
apple-order1.apple.com
12diasderegalosdeitunes.com.es
itunesradio.ng
itunesradio.ng
12diasderegalosdeitunes.com.es
itunesradio.ng
apple-order1.apple.com
itunesradio.ng
12diasderegalosdeitunes.com.es
12diasderegalosdeitunes.com.es
itunesradio.ng
apple-order1.apple.com
itunesradio.ng
apple-order1.apple.com

Certificate

The complete raw certificate details for itunesradio.ng in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhOvZQzW2Jez90Xk28tX
cK9FqfGgq8IjIsvku+bXaPQzv3ka3xBjBpA6SSXO06V3+faq5MsRV+ECsfLuWLGJ
VnGunU3NFy8EaAyeviUJYOESPNTcHSOLRBQBsYM5CJH5MCkaOZr3A1txW0j9DD3r
XVfh85enJCiYBx43LlseP0NIndJ6YUL2TqHSDl9EKgmdlGmnPnnd8Z5Rs+Uzm/gv
a5tyq47g9vaLMOuQcP59qf0OjCvpWABR1EJvFTKHvIBGtKMI86/+pLTeq+0wJ/fH
gYZuf5+JtvKj9awf66VyakfRIEuW9b8LYQIOKKfJq+CasdFUIYOIrTW3gSQ8afWx
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 41240292432401419554649711234968991505
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Public Server RSA CA 12 - G1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-29 17:51:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-27 18:01:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'itunesradio.ng'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25004891485458741348846587504252738797134662128846732996772100237986762033967691690759720731076827435333065112072321617628941333796410239200029021288368110001666622625186968317902071021680009368370885875700240602708947997994610297432910875194039341576026813881638806245781113034498588294245568716676643011453155413336984180053879198465985136661620568014863648833705372555074925076419451569149727144731001436460515769781731479958770197473760395429215438045879649491261669625112772183640876889895999499976608420574275285026420257466218407356558435992519016085549018810765499409580071382799218863791292929190153640325401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e5c1791055702fc775ce37043ec6bfdddd2d869
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/apsrsa12g1.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-apsrsa12g101'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunesradio.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphonecentre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipodcentre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iphonecentre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imac.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilecture.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipod.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesradio.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apple.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibook.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imac.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imac.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12diasderegalosdeitunes.co.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applecomputers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primephonic.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes12daysofchristmas.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilecture.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes12daysofchristmas.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apple.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applecomputers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipodcentre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunesradio.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iphoto.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12diasderegalosdeitunes.com.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ituneslive.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesradio.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes12dagencadeaus.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipod.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultants.apple.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes12daysofchristmas.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12diasderegalosdeitunes.com.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ituneslive.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12diasderegalosdeitunes.co.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ituneslive.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibook.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imacshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes12dagencadeaus.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes12daysofchristmas.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applecomputer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imac.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.apple.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imacshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphoto.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesradio.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primephonic.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applecomputer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ituneslive.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consultants.apple.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.apple.com/certificateauthority/public'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.5.11.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/apsrsa12g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8fe0a56ab2bed80d066ed3a48b1730d86cb91125
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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