ms11p00im-hme-mta.me.com
- Apple Inc. -
Issued by Apple Public Server RSA CA 12 - G1
About this certificate
This digital certificate with serial number 02:29:ff:3d:18:8b:d2:8d:85:4f:18:b3:e6:e6:00:35 was issued on by Apple Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Apple Inc.
Organization:
Apple Inc.
State / Province:
California
Country: US
Country: US
Apple Inc.
Organization:
Apple Inc.
State / Province:
California
Country: US
Country: US
This certificate will expire on
Certificate Details
Serial Number (hex): 02:29:ff:3d:18:8b:d2:8d:85:4f:18:b3:e6:e6:00:35Serial Number (int): 2876517017733279456857020039694778421
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 3e:bf:78:02:88:2b:33:57:88:cf:d5:8f:38:0f:c6:78:46:f5:b0:d7
AuthorityKeyId: 1e:5c:17:91:05:57:02:fc:77:5c:e3:70:43:ec:6b:fd:dd:d2:d8:69
Fingerprint (sha1): bf:2b:33:58:88:56:b5:69:e9:66:64:da:a2:92:1b:87:47:bb:4e:45
Fingerprint (sha256): 8e:7f:a3:ae:24:7b:96:b3:ee:a2:20:16:55:ba:db:35:4b:84:d3:35:ca:28:e9:81:c4:48:21:b4:c1:b4:59:ef
Issuing Certificate URL: http://certs.apple.com/apsrsa12g1.der
Revocation information
OCSP Server: http://ocsp.apple.com/ocsp03-apsrsa12g101CRL Distribution Point: http://crl.apple.com/apsrsa12g1.crl
Check the revocation status for certificate ms11p00im-hme-mta.me.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ms11p00im-hme-mta.me.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
11 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mr38p00im-hme-mta.me.com
ms11p00im-hme-mta.me.com
ms11p00im-hme-mta.me.com
Other certificates including the domain name me.com
(limited to 100 certificates)
www.me.com
americasred3.apple.com
americasred3.apple.com
me.com
*.mail.me.com
imap.mail.me.com
jetfuelapp.com
smtp.me.com
*.me.com
smtp.mail.me.com
smtp.me.com
test.me.com
auth.me.com
connectivity.me.com
jetfuelapp.com
calendar.me.com
smtp.mail.me.com
www.me.com
smtp.me.com
pv33p08im-zfssa08582.me.com
test.me.com
auth.me.com
www.me.com
*.mail.me.com
www.me.com
secure.me.com
americasred3.apple.com
auth.me.com
mail.me.com
imap.mail.me.com
*.private.me.com
syncservices.me.com
cloudkit.io
jetfuelapp.com
smtp.mail.me.com
jetfuelapp.com
*.mail.me.com
me.com
*.connectivity.me.com
cal.me.com
me.com
www.me.com
secure.me.com
slotmatching1.web.me.com
me.com
www.me.com
magictrackpad.com
www.me.com
mail.me.com
americasred3.apple.com
imap.mail.me.com
*.me.com
smtp.me.com
smtp.mail.me.com
mail.me.com
me.com
auth.me.com
jetfuelapp.com
*.me.com
ckdatabaserpc.icloud.com
www.me.com
ms11p00im-hme-mta.me.com
me.com
files.me.com
smtp.mail.me.com
www.me.com
smtp.me.com
www.me.com
imap.mail.me.com
smtp.mail.me.com
jetfuelapp.com
smtp.mail.me.com
imap.mail.me.com
www.me.com
cal.me.com
www.me.com
me.com
www.me.com
*.mail.me.com
smtp.mail.me.com
me.com
*.connectivity.me.com
files.me.com
ms11p00im-hme-mta.me.com
*.me.com
www.me.com
imap.mail.me.com
slotmatching1.web.me.com
*.connectivity.me.com
imap.mail.me.com
*.mail.me.com
*.me.com
cloudkit.io
ms11p00im-hme-mta.me.com
ms11p00im-hme-mta.me.com
www.me.com
adminservices.me.com
jetfuelapp.com
www.me.com
*.me.com
americasred3.apple.com
americasred3.apple.com
me.com
*.mail.me.com
imap.mail.me.com
jetfuelapp.com
smtp.me.com
*.me.com
smtp.mail.me.com
smtp.me.com
test.me.com
auth.me.com
connectivity.me.com
jetfuelapp.com
calendar.me.com
smtp.mail.me.com
www.me.com
smtp.me.com
pv33p08im-zfssa08582.me.com
test.me.com
auth.me.com
www.me.com
*.mail.me.com
www.me.com
secure.me.com
americasred3.apple.com
auth.me.com
mail.me.com
imap.mail.me.com
*.private.me.com
syncservices.me.com
cloudkit.io
jetfuelapp.com
smtp.mail.me.com
jetfuelapp.com
*.mail.me.com
me.com
*.connectivity.me.com
cal.me.com
me.com
www.me.com
secure.me.com
slotmatching1.web.me.com
me.com
www.me.com
magictrackpad.com
www.me.com
mail.me.com
americasred3.apple.com
imap.mail.me.com
*.me.com
smtp.me.com
smtp.mail.me.com
mail.me.com
me.com
auth.me.com
jetfuelapp.com
*.me.com
ckdatabaserpc.icloud.com
www.me.com
ms11p00im-hme-mta.me.com
me.com
files.me.com
smtp.mail.me.com
www.me.com
smtp.me.com
www.me.com
imap.mail.me.com
smtp.mail.me.com
jetfuelapp.com
smtp.mail.me.com
imap.mail.me.com
www.me.com
cal.me.com
www.me.com
me.com
www.me.com
*.mail.me.com
smtp.mail.me.com
me.com
*.connectivity.me.com
files.me.com
ms11p00im-hme-mta.me.com
*.me.com
www.me.com
imap.mail.me.com
slotmatching1.web.me.com
*.connectivity.me.com
imap.mail.me.com
*.mail.me.com
*.me.com
cloudkit.io
ms11p00im-hme-mta.me.com
ms11p00im-hme-mta.me.com
www.me.com
adminservices.me.com
jetfuelapp.com
www.me.com
*.me.com
Certificate
The complete raw certificate details for ms11p00im-hme-mta.me.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIQAin/PRiL0o2FTxiz5uYANTANBgkqhkiG9w0BAQsFADBk MSswKQYDVQQDEyJBcHBsZSBQdWJsaWMgU2VydmVyIFJTQSBDQSAxMiAtIEcxMRMw EQYDVQQKEwpBcHBsZSBJbmMuMRMwEQYDVQQIEwpDYWxpZm9ybmlhMQswCQYDVQQG EwJVUzAeFw0yNDA0MDIxODE2MDBaFw0yNTA0MDIxODI2MDBaMFoxCzAJBgNVBAYT AlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRMwEQYDVQQKDApBcHBsZSBJbmMuMSEw HwYDVQQDDBhtczExcDAwaW0taG1lLW10YS5tZS5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDnLGb+ImSUyv/pcvXuxCYxAsQsUf73pCo4b356ZZ1L JVnwKvyBwkj+JQKGPzYNKWbBbhuuMMfMVj8HojpEpkuBomjW1FkfnrooLVEAhE5V PXTIUq15UFdiioxBA/b8vD5IPw/9S/frYfO+fEC1CHIFVDJ1IlVIUZEPJCJGQ8IT 8WM4pQ7r9Zp0fOKNfcpPnltk/oPf4JysHiNHge9O/NyG/YbqyxonOWPzhWT5OvlI sOXdzzXMQQPOhzBK9q499PQwspcJLo0y2Bm/vC/fpL5aFcLwjG+tlaRuTJOWy60E bujry4v9s+HOOaBEg44NsvwtiOFq+Dkcw1vLedfK3hxnAgMBAAGjggHwMIIB7DAM BgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaAFB5cF5EFVwL8d1zjcEPsa/3d0thpMHgG CCsGAQUFBwEBBGwwajAxBggrBgEFBQcwAoYlaHR0cDovL2NlcnRzLmFwcGxlLmNv bS9hcHNyc2ExMmcxLmRlcjA1BggrBgEFBQcwAYYpaHR0cDovL29jc3AuYXBwbGUu Y29tL29jc3AwMy1hcHNyc2ExMmcxMDEwPQYDVR0RBDYwNIIYbXIzOHAwMGltLWht ZS1tdGEubWUuY29tghhtczExcDAwaW0taG1lLW10YS5tZS5jb20wYgYDVR0gBFsw WTBJBgZngQwBAgIwPzA9BggrBgEFBQcCARYxaHR0cHM6Ly93d3cuYXBwbGUuY29t L2NlcnRpZmljYXRlYXV0aG9yaXR5L3B1YmxpYzAMBgoqhkiG92NkBQsEMBMGA1Ud JQQMMAoGCCsGAQUFBwMBMDQGA1UdHwQtMCswKaAnoCWGI2h0dHA6Ly9jcmwuYXBw bGUuY29tL2Fwc3JzYTEyZzEuY3JsMB0GA1UdDgQWBBQ+v3gCiCszV4jP1Y84D8Z4 RvWw1zAOBgNVHQ8BAf8EBAMCBaAwDwYJKoZIhvdjZAZWBAIFADATBgorBgEEAdZ5 AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEArKmRNsGzFeuTuLSJehOINUwW RDSMxqmG2F6NCvXKVEpXGR60UMt6IgeDWZyGytaf0NFsqp01NlFa7/X96MNwvOM5 cLvMcSFHB55MXvVz0f2kCQKIb7gITlERxXdoS47aTEGyCqITl5QTghIK5GCYnoFf hSuhx0O62QG0M+TW07R19W+1qrndcsYXJQJPwrfXMl9wGbWpkZdTxSmwwz6j2dQV 3HPNsnmKMWuzGi3cHkUjGcgNmT8JOByGHR3zLFVfS4aOzzbNohjZ3V39m+O9tY4i Xh92nlUdx6iZbhhif3KuXhCgbGc0NTXuk7NyPadvMOQFn4s/ocJ9TrelkHxU+Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yxm/iJklMr/6XL17sQm MQLELFH+96QqOG9+emWdSyVZ8Cr8gcJI/iUChj82DSlmwW4brjDHzFY/B6I6RKZL gaJo1tRZH566KC1RAIROVT10yFKteVBXYoqMQQP2/Lw+SD8P/Uv362HzvnxAtQhy BVQydSJVSFGRDyQiRkPCE/FjOKUO6/WadHzijX3KT55bZP6D3+CcrB4jR4HvTvzc hv2G6ssaJzlj84Vk+Tr5SLDl3c81zEEDzocwSvauPfT0MLKXCS6NMtgZv7wv36S+ WhXC8IxvrZWkbkyTlsutBG7o68uL/bPhzjmgRIOODbL8LYjhavg5HMNby3nXyt4c ZwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2876517017733279456857020039694778421 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Public Server RSA CA 12 - G1' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-02 18:16:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-02 18:26:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Apple Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ms11p00im-hme-mta.me.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29182944044885395134048331322220264460876045736861772170521028473568468454282098442886801548661164782566020811775596232908817454786822903216715255021027917741442766037513476589794867080021755832485754051153834453154368223360354682820292214003931555480276506770327551864658518699605045059677680717446056198492845252033284396959482656892359585445518630099599716195540266766798240934442249003363551662021740822186568007860798155397174858826414669012834273122217776539370894571156221590169014515307306971358571659183901347118241693202347955231226874547285914828491078600883436404007046689684249402241954254042719701572711 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e5c1791055702fc775ce37043ec6bfdddd2d869 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/apsrsa12g1.der' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-apsrsa12g101' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mr38p00im-hme-mta.me.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms11p00im-hme-mta.me.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.apple.com/certificateauthority/public' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.5.11.4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/apsrsa12g1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3ebf7802882b335788cfd58f380fc67846f5b0d7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.6.86 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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