www.imac.co.nz

- Apple Inc. -

Issued by Apple Public Server RSA CA 12 - G1

About this certificate

This digital certificate with serial number 2e:74:a7:2a:45:a1:fc:f5:74:12:19:66:d5:6e:cf:31 was issued on by Apple Inc..

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Apple Inc.

Organization: Apple Inc.
Organization unit: management:idms.group.1328361
State / Province: California
Country: US

Apple Inc.

Organization: Apple Inc.
State / Province: California
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2e:74:a7:2a:45:a1:fc:f5:74:12:19:66:d5:6e:cf:31
Serial Number (int): 61750184753233102885348162102906244913
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: cf:1b:9a:03:5f:3a:cc:2c:1c:06:1d:ba:ac:71:db:41:65:06:3c:e1
AuthorityKeyId: 1e:5c:17:91:05:57:02:fc:77:5c:e3:70:43:ec:6b:fd:dd:d2:d8:69

Fingerprint (sha1): 47:ac:f3:e7:eb:53:4a:a7:99:2a:f2:85:20:fe:bd:37:dc:94:0a:07
Fingerprint (sha256): 85:a5:bb:ec:b2:bc:2a:46:30:c7:62:8f:5e:20:96:b8:78:15:3d:fa:08:9a:a1:0b:d2:ba:9b:6a:18:f1:ae:98

Issuing Certificate URL: http://certs.apple.com/apsrsa12g1.der

Revocation information

OCSP Server: http://ocsp.apple.com/ocsp03-apsrsa12g101
CRL Distribution Point: http://crl.apple.com/apsrsa12g1.crl

Check the revocation status for certificate www.imac.co.nz

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.imac.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.itunesops.com
www.ipad.host
www.mac.me
www.ipod.com.au
www.ipadaustralia.com
www.mac.rio
www.images-catch.com
www.online-apple-store.com
www.ipodrocks.com.au
www.ipodshop.com.au
www.join.applenews.apple
www.imoviestage.com
www.macbook.hk
www.macbook.tw
www.ipadmini.com.lk
www.mr-apple-com1.apple.com
www.onlineapplestore.com
www.openni.org
www.join.applenewsplus.apple
www.macbookair.kr
www.itunes.rio
www.jetfuelapp.com
www.macstore.rio
www.mac.com.au
www.ipad.rio
www.itunesradio.rio
www.ipadmini.lk
www.newsroom.apple
www.myapple.net
www.macbookpro.com.au
www.ipod.com.sg
www.ipadpro.buzz
www.ipod.co.nz
www.mobileme.com
www.ipados.com
www.ipodtouch.com
www.imac.co.nz
www.ipadair.jp
www.macbookair.com.cn
www.ipad.co.kr
www.jetfuelapps.com
www.macbookair.hk
www.playquicktime.net
www.macreach.net
www.itunesstore.rio
www.imoviegallery.com
www.ipa-iphone.net
www.mac.om
www.listen.applemusic.apple
www.lojaapple.com.br
www.imacsources.com
www.macbookpro.co
www.macos.com.au
www.ipadpro.rio
www.ipadair.mx
www.ipod.hk
www.ipod.com.cn
www.macbookair.co.kr
www.macbook.rio
www.ipod.de
www.ipodtouch.co
www.listen.applepodcasts.apple
www.playquicktime.com
www.ipod.com.hk
www.indiaipad.com
www.macintoshsoftware.com
www.imac.one
www.mac.one
www.macreach.com
www.macossierra.com
www.ipadair.hk
www.ipadair.tw
www.ischool.com
www.iphone.com.au
www.iphone.host
www.livephotos.rio
www.ipod.rio
www.itunes.earth
www.iphone.rio
www.mzstatic.com
www.insidemacintosh.com
www.iworktrialbuy.apple.com
www.livepage.apple.co.jp
www.mach-os.com
www.macbookair.com.au
www.ipadpro.mx
www.macosx.info
www.machos.net
www.ipadair.com.mx
www.itunesstore.co
www.lionserver.com
www.macbookair.jp

Other certificates including the domain name imac.co.nz

(limited to 100 certificates)
1to1computing.com.au
1to1computing.com.au
itunesradio.ng
1to1computing.com.au
1to1computing.com.au
www.imac.co.nz
1to1computing.com.au
1to1computing.com.au
asiared3.apple.com
asiared3.apple.com
1to1computing.com.au
www.imac.co.nz
www.imac.co.nz
itunesradio.ng
1to1computing.com.au
itunesradio.ng
1to1computing.com.au
www.imac.co.nz
1to1computing.com.au
www.imac.co.nz
1to1computing.com.au
1to1computing.com.au
www.imac.co.nz
www.imac.co.nz
1to1computing.com.au
1to1computing.com.au
itunesradio.ng
1to1computing.com.au
1to1computing.com.au
1to1computing.com.au
itunesradio.ng
itunesradio.ng
1to1computing.com.au
www.imac.co.nz
asiared3.apple.com
1to1computing.com.au
www.imac.co.nz
itunesradio.ng
asiared3.apple.com
itunesradio.ng
itunesradio.ng
1to1computing.com.au
www.imac.co.nz
asiared3.apple.com

Certificate

The complete raw certificate details for www.imac.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q/mhjXBzqbevjRcLbVu
XNAJqQl6K5zlewaDS3liGiaKzewd4n4lDa1oV9JTL9KJAvu62sSWGIwmus8F19eT
keZidn4kPTmBsNJ72SVpwacsHfL8e+adDWxBXP1phDJGWVpcV5N9JWkNOZr+gAQ+
NhT+/owN8TY6imGI5mExAqT6tszsMB4lOJgijQ7hA6ehN153NfJAmYFqKXhcoF1u
LR5ycGb2GNEM132qeieHvpPSmTrxcVLGSo/2QF3Uy2F4p5knVmVACCmVf0WlRaTW
fC2f0ouHt6u9lSHN0/ecrC4uyrC+l/nAeYvpuBAN7SCEC4hL91NRsZuorKLwOO2/
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 61750184753233102885348162102906244913
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Public Server RSA CA 12 - G1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-09 05:51:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-09 05:51:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.imac.co.nz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'management:idms.group.1328361'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27606690244777805577184726828089228100478905030388490014657970201982779012888483150196449777058745406141470064170823029582275216626491692890346985620510309724655636345610218369602232673515049572430870857597679421821963924507136050489895886643044744388045644220270445298090519208793221341228743057100647777875587318735882344474775963251399767239701910219546220421227763979345978476569412097866695225952503834345188747716795755354026712690477223327748030260916359061464540266080869250348105612641999439814932022388085862020289715270924650385418824518880291076637947101554886377370692224847553386562126541809890053963589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e5c1791055702fc775ce37043ec6bfdddd2d869
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/apsrsa12g1.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-apsrsa12g101'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1775 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunesops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipad.host'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mac.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mac.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.images-catch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.online-apple-store.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipodrocks.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipodshop.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.join.applenews.apple'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imoviestage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbook.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbook.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadmini.com.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mr-apple-com1.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlineapplestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.openni.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.join.applenewsplus.apple'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbookair.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jetfuelapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macstore.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mac.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipad.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunesradio.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadmini.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newsroom.apple'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myapple.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbookpro.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadpro.buzz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobileme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipados.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipodtouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imac.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadair.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbookair.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipad.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jetfuelapps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbookair.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playquicktime.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macreach.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunesstore.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imoviegallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipa-iphone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mac.om'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.listen.applemusic.apple'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lojaapple.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imacsources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbookpro.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macos.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadpro.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadair.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbookair.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbook.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipodtouch.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.listen.applepodcasts.apple'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playquicktime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiaipad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macintoshsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imac.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mac.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macreach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macossierra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadair.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadair.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ischool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iphone.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iphone.host'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livephotos.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes.earth'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iphone.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mzstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insidemacintosh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iworktrialbuy.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livepage.apple.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mach-os.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbookair.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadpro.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macosx.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.machos.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipadair.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunesstore.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lionserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macbookair.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (255 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.5.11.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.apple.com/certificateauthority/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of any applicable terms and conditions of use and/or certification practice statements.'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/apsrsa12g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf1b9a035f3acc2c1c061dbaac71db4165063ce1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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