*.me.com

- Apple Inc. -

Issued by Apple IST CA 2 - G1

About this certificate

This digital certificate with serial number 24:d6:5a:69:5b:3d:3e:15 was issued on by Apple Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Apple Inc.

Organization: Apple Inc.
Organization unit: management:idms.group.506364
State / Province: California
Country: US

Apple Inc.

Organization: Apple Inc.
Organization unit: Certification Authority
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 24:d6:5a:69:5b:3d:3e:15
Serial Number (int): 2654408438930292245
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 36:f7:25:72:e2:da:eb:ea:03:fc:66:94:de:26:17:27:5d:62:20:a8
AuthorityKeyId: d8:7a:94:44:7c:90:70:90:16:9e:dd:17:9c:01:44:03:86:d6:2a:29

Fingerprint (sha1): 4c:3c:7b:57:f8:68:55:0d:11:93:d3:7a:c9:4c:0c:26:ab:94:da:86
Fingerprint (sha256): 76:1f:09:ae:b5:fc:77:46:04:7b:c6:6f:51:05:69:8a:ef:3c:a3:b9:d5:4e:65:ae:1a:49:48:dc:95:7d:e5:22

Issuing Certificate URL: http://certs.apple.com/appleistca2g1.der

Revocation information

OCSP Server: http://ocsp.apple.com/ocsp04-appleistca2g101
CRL Distribution Point: http://crl.apple.com/appleistca2g1.crl

Check the revocation status for certificate *.me.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.me.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.me.com

Other certificates including the domain name me.com

(limited to 100 certificates)
www.me.com
americasred3.apple.com
americasred3.apple.com
me.com
*.mail.me.com
imap.mail.me.com
jetfuelapp.com
smtp.me.com
*.me.com
smtp.mail.me.com
smtp.me.com
test.me.com
auth.me.com
connectivity.me.com
jetfuelapp.com
calendar.me.com
smtp.mail.me.com
www.me.com
smtp.me.com
pv33p08im-zfssa08582.me.com
test.me.com
auth.me.com
www.me.com
*.mail.me.com
www.me.com
secure.me.com
americasred3.apple.com
auth.me.com
mail.me.com
imap.mail.me.com
*.private.me.com
syncservices.me.com
cloudkit.io
jetfuelapp.com
smtp.mail.me.com
jetfuelapp.com
*.mail.me.com
me.com
*.connectivity.me.com
cal.me.com
me.com
www.me.com
secure.me.com
slotmatching1.web.me.com
me.com
www.me.com
magictrackpad.com
www.me.com
mail.me.com
americasred3.apple.com
imap.mail.me.com
*.me.com
smtp.me.com
smtp.mail.me.com
mail.me.com
me.com
auth.me.com
jetfuelapp.com
*.me.com
ckdatabaserpc.icloud.com
www.me.com
ms11p00im-hme-mta.me.com
me.com
files.me.com
smtp.mail.me.com
www.me.com
smtp.me.com
www.me.com
imap.mail.me.com
smtp.mail.me.com
jetfuelapp.com
smtp.mail.me.com
imap.mail.me.com
www.me.com
cal.me.com
www.me.com
me.com
www.me.com
*.mail.me.com
smtp.mail.me.com
me.com
*.connectivity.me.com
files.me.com
ms11p00im-hme-mta.me.com
*.me.com
www.me.com
imap.mail.me.com
slotmatching1.web.me.com
*.connectivity.me.com
imap.mail.me.com
*.mail.me.com
*.me.com
cloudkit.io
ms11p00im-hme-mta.me.com
ms11p00im-hme-mta.me.com
www.me.com
adminservices.me.com
jetfuelapp.com
www.me.com
*.me.com

Certificate

The complete raw certificate details for *.me.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzWQhTN++nEG0kz356KZ
BXEXaj772tm5+PmBLsL12Elqe2x6OC7TXhErN9tWaxejIQgApBTQc3qbR6GwJ27r
F0gjdGBz25ZSYHsCC9k4auIzBMxDfglm6ZaKE4t9tsL8jhJxDDyeBaM/TvUQQcx7
QSQLz2JWbRPWQLsoS62k77oOJ4Hg6xM8eCQXVpdtF7N9ypUDpIzINAoTT4l4q8Su
qOUQhgrrjM5L/FXEyGgfM2hishs0Y6EvFT7q8NbfzDXeYebX8uGm50TIh3Ri4Krs
H2XTrxt8edyaK8TvzjTMHFg3vdQvFMGd71OMJO2sfQF9pzm8Qhs9frdxeY72NfOC
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2654408438930292245
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple IST CA 2 - G1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-07 20:03:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-06 20:03:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.me.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'management:idms.group.506364'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21613163804616447287168550779580253305465439586060670831158549163737491756263647585360904815967567277393489983359359377087180047872210739256103317967587672844956410226426746012481655720623484260800770633220807406390803730171141356204955960904732308538721939288890930328918270980572905053060978680926189786865788733059413430203790991454272431624318560444245634835362446673872998107960939812892752692648507171938835040706184656639904296532409090950625125097229892156719417054456803802518197830085590683413987105566331496350757380060640942302668803701979779525011994884756108237459655007747374411051341128593939578978951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/appleistca2g1.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp04-appleistca2g101'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							36f72572e2daebea03fc6694de2617275d6220a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d87a94447c907090169edd179c01440386d62a29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.5.11.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of any applicable terms and conditions of use and/or certification practice statements.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.apple.com/certificateauthority/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/appleistca2g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.me.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0020836b1e725c5a9f36fac1d5efd09e934562ebbd036c190fa31abab74c9afd3a71d1b5cbf9d094590a94d6f317039e575fc81650aa6a94f7cfd763b4b699bd1141e5270f26142149617e9ad76986774c371649134a662e274bcb1bf0e62e0a9efca3a87b136007c7c7f963bc64cc8258a14faf230ba1eed0cd00047ad22a79278f17f8b958b59fa34e7ee1d515dc831f4113c1a5cf7aabcdfcc600331934ba7f419630781a1b2692e6d5a95da55d1738c11b58711c431c54b9c07e6bd29669b160accf4d140678fc3cd8471c5a6346344f6bf46c990c8a459b24e300aa5f339cdebd19805e909e3fb161c41a39ff427b5a27fb1df25245067da0ad9feb8c6e14