www.me.com

- Apple Inc. -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:b8:df was issued on by GeoTrust, Inc..

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Apple Inc.

Company registration number: UfGmYTFVRVWBX8-7S0E1Ok9kVj2OSLF-
Organization: Apple Inc.
Organization unit: Akamai SAN SSL OV
State / Province: California
Locality: Cupertino
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:b8:df
Serial Number (int): 178399
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: ac:61:9a:b2:22:86:e8:86:76:af:6b:a2:a5:7d:32:3a:f1:39:93:10
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): 6b:c4:38:54:77:4b:13:78:74:b6:ca:51:3a:87:aa:1f:31:e5:66:ab
Fingerprint (sha256): 85:25:90:30:c5:1e:cc:b2:f8:2d:1e:6d:25:99:a2:e9:20:a4:e4:3e:b8:ec:1d:69:b0:46:4c:a7:92:d4:d0:99

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate www.me.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.me.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.me.com
c.itunes.apple.com
cal.me.com
configuration.apple.com
delta.mac.com
delta.me.com
discussionskorea-ph.apple.com
expresslane-uata.apple.com
files.me.com
fileservices.me.com
fmip.me.com
fmipmobile.me.com
gsxappit.apple.com
gsxappld.apple.com
gsxapput.apple.com
idisk.mac.com
idisk.me.com
itc.mzstatic.com
itunesconnect.apple.com
jiveuat-jp.apple.com
jiveuat-us.apple.com
m3.mac.com
mobileapp-dev1.corp.apple.com
mobileapp-qa1.corp.apple.com
mobileapp-qa2.corp.apple.com
mobileapp-qa3.corp.apple.com
otocacheit.apple.com
otocachet.apple.com
otoit.cdn-apple.com
otout.cdn-apple.com
phoneservices.me.com
public.me.com
publish.mac.com
publish.me.com
rjvit.cdn-apple.com
rjvt.cdn-apple.com
s.itunes.apple.com
s.mzstatic.com
se.itunes.apple.com
secure.me.com
selfsolve-uata.apple.com
setup.icloud.com
sfcdownloadit.cdn-apple.com
sfcdownloaduat.cdn-apple.com
static-uptodate-uat.cdn-apple.com
static.me.com
static1.me.com
static2.me.com
static3.me.com
static4.me.com
storedev1.corp.apple.com
storeqa1.corp.apple.com
storeqa2.corp.apple.com
storeqa3.corp.apple.com
support-uata-ext.apple.com
support-uata.apple.com
swcdn.apple.com
sync.mac.com
sync.me.com
syncservices.me.com
wsuat01.apple.com
www.apple.com
www.icloud.com
www.iwork.com
www.mac.com
mobileapp-dev2.corp.apple.com
mobileapp-dev3.corp.apple.com
storeimages-test.cdn-apple.com
alpdownloadit.cdn-apple.com
appleweb-stage.apple.com
ilogwebpay-test-netstorage.cdn-apple.com
salesdownloadat.corp.apple.com
salesdownloaddev.corp.apple.com
salesdownloadit.corp.apple.com
www.me.com
me.com

Other certificates including the domain name me.com

(limited to 100 certificates)
www.me.com
americasred3.apple.com
americasred3.apple.com
me.com
*.mail.me.com
imap.mail.me.com
jetfuelapp.com
smtp.me.com
*.me.com
smtp.mail.me.com
smtp.me.com
test.me.com
auth.me.com
connectivity.me.com
jetfuelapp.com
calendar.me.com
smtp.mail.me.com
www.me.com
smtp.me.com
pv33p08im-zfssa08582.me.com
test.me.com
auth.me.com
www.me.com
*.mail.me.com
www.me.com
secure.me.com
americasred3.apple.com
auth.me.com
mail.me.com
imap.mail.me.com
*.private.me.com
syncservices.me.com
cloudkit.io
jetfuelapp.com
smtp.mail.me.com
jetfuelapp.com
*.mail.me.com
me.com
*.connectivity.me.com
cal.me.com
me.com
www.me.com
secure.me.com
slotmatching1.web.me.com
me.com
www.me.com
magictrackpad.com
www.me.com
mail.me.com
americasred3.apple.com
imap.mail.me.com
*.me.com
smtp.me.com
smtp.mail.me.com
mail.me.com
me.com
auth.me.com
jetfuelapp.com
*.me.com
ckdatabaserpc.icloud.com
www.me.com
ms11p00im-hme-mta.me.com
me.com
files.me.com
smtp.mail.me.com
www.me.com
smtp.me.com
www.me.com
imap.mail.me.com
smtp.mail.me.com
jetfuelapp.com
smtp.mail.me.com
imap.mail.me.com
www.me.com
cal.me.com
www.me.com
me.com
www.me.com
*.mail.me.com
smtp.mail.me.com
me.com
*.connectivity.me.com
files.me.com
ms11p00im-hme-mta.me.com
*.me.com
www.me.com
imap.mail.me.com
slotmatching1.web.me.com
*.connectivity.me.com
imap.mail.me.com
*.mail.me.com
*.me.com
cloudkit.io
ms11p00im-hme-mta.me.com
ms11p00im-hme-mta.me.com
www.me.com
adminservices.me.com
jetfuelapp.com
www.me.com
*.me.com

Certificate

The complete raw certificate details for www.me.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW2VlwFKn5rl3/KaE9b6
AHWPqathbn9HWgbmxLfIyuq3EdHhUY2ZC8cu7zQrg3hcfltMbfIoMfpDYDhIv1yI
8FtgaGLwIMVr8V0oB2nZV1V5Q0g6NCzNxk0939i8A4Rk+KgSk+yoXkRuHiKobBU0
6avFXjhMIosjvF3soCzEygbu3kmthPQh1udCrf5W80vWpSB33xfpx2aCq9wywYKw
GMZU4GSmkElLV4KechCaacEWlxIa07Uw828KWWCStSYSZYbGV19jCtcPtk5e+lsS
Vd0Wn3p/PjP4GbMokR1sEaw8mKg6nnOcz3uyGZnAEcSNhDVctXZVCvBTu/7wyeZX
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 178399
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-14 16:26:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-11 02:30:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UfGmYTFVRVWBX8-7S0E1Ok9kVj2OSLF-'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cupertino'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.me.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25932890567855490724307943358403059688799037738536900201588612354936789682841799579099703832449935841349937978916555068185998918399252013949817751871028181677671228592011760507085642096288299028425465266131128534226899922306709292637740904832643192975904982960539105625833408143314641351788401765511994932881183280292598125912395624077423147013530601822805064587419885815655231458949951252083404071604317766911040390297630305312185974526319573299805175273348255566595423001254517589731782439923550414775936978710500204020347809740339281814544484589565731767054424425643790649650801494602231002717365581879779116078999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1627 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cal.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configuration.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delta.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delta.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discussionskorea-ph.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresslane-uata.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileservices.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmip.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmipmobile.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsxappit.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsxappld.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsxapput.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idisk.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idisk.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itc.mzstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesconnect.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiveuat-jp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jiveuat-us.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm3.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-dev1.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-qa1.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-qa2.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-qa3.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otocacheit.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otocachet.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otoit.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otout.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoneservices.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publish.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rjvit.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rjvt.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.mzstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.itunes.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfsolve-uata.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setup.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcdownloadit.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfcdownloaduat.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-uptodate-uat.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storedev1.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeqa1.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeqa2.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeqa3.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-uata-ext.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support-uata.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swcdn.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sync.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sync.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syncservices.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsuat01.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-dev2.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp-dev3.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storeimages-test.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alpdownloadit.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appleweb-stage.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilogwebpay-test-netstorage.cdn-apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesdownloadat.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesdownloaddev.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesdownloadit.corp.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac619ab22286e88676af6ba2a57d323af1399310
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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