itunesradio.ng

- Apple Inc. -

Issued by Apple Public Server RSA CA 12 - G1

About this certificate

This digital certificate with serial number 37:bf:31:92:c9:75:01:6f:6a:9d:ca:e7:34:d9:37:a7 was issued on by Apple Inc..

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Apple Inc.

Organization: Apple Inc.
State / Province: California
Country: US

Apple Inc.

Organization: Apple Inc.
State / Province: California
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 37:bf:31:92:c9:75:01:6f:6a:9d:ca:e7:34:d9:37:a7
Serial Number (int): 74100273935880769173825640299293652903
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: df:19:ab:e8:18:01:65:09:84:92:fb:7a:83:12:73:40:ae:85:53:2c
AuthorityKeyId: 1e:5c:17:91:05:57:02:fc:77:5c:e3:70:43:ec:6b:fd:dd:d2:d8:69

Fingerprint (sha1): 07:43:8c:71:d3:6d:2f:4a:16:c7:87:f6:2c:92:44:45:bc:f1:9f:9f
Fingerprint (sha256): c0:97:07:82:6b:2b:7c:d7:d3:9e:68:a5:fe:de:69:c8:1c:04:e6:09:e8:ef:47:0d:3a:21:f3:c7:00:4d:f2:25

Issuing Certificate URL: http://certs.apple.com/apsrsa12g1.der

Revocation information

OCSP Server: http://ocsp.apple.com/ocsp03-apsrsa12g101
CRL Distribution Point: http://crl.apple.com/apsrsa12g1.crl

Check the revocation status for certificate itunesradio.ng

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itunesradio.ng

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.itunesradio.co.nz
iphonecentre.nl
www.itunes.co.nz
ipodcentre.nl
itunes.co.nz
www.iphonecentre.nl
imac.nl
www.ilecture.co.nz
ipod.co.nz
itunesradio.ng
apple.no
www.ibook.co.nz
www.imac.nl
imac.co.nz
www.itunes.nl
www.12diasderegalosdeitunes.co.ni
www.itunes.no
applecomputers.co.nz
www.primephonic.nl
itunes.no
itunes.nl
www.apple.co.nz
www.itunes12daysofchristmas.co.nz
ilecture.co.nz
itunes12daysofchristmas.no
apple.co.nz
www.applecomputers.co.nz
www.ipodcentre.nl
www.apple.no
www.itunesradio.ng
www.ipod.no
www.iphoto.no
www.12diasderegalosdeitunes.com.ni
www.ipod.co.nz
ituneslive.no
www.itunes12dagencadeaus.nl
ipod.no
consultants.apple.co.nz
itunes12daysofchristmas.co.nz
12diasderegalosdeitunes.com.ni
www.ituneslive.nl
12diasderegalosdeitunes.co.ni
www.ituneslive.no
ibook.co.nz
www.imacshop.nl
itunes12dagencadeaus.nl
www.itunes12daysofchristmas.no
www.applecomputer.co.nz
www.imac.co.nz
store.apple.co.nz
imacshop.nl
iphoto.no
itunesradio.co.nz
primephonic.nl
applecomputer.co.nz
ituneslive.nl
www.consultants.apple.co.nz

Other certificates including the domain name itunesradio.ng

(limited to 100 certificates)
12diasderegalosdeitunes.com.es
itunesradio.ng
apple-order1.apple.com
itunesradio.ng
12diasderegalosdeitunes.com.es
itunesradio.ng
apple-order1.apple.com
12diasderegalosdeitunes.com.es
itunesradio.ng
itunesradio.ng
12diasderegalosdeitunes.com.es
itunesradio.ng
apple-order1.apple.com
itunesradio.ng
12diasderegalosdeitunes.com.es
12diasderegalosdeitunes.com.es
itunesradio.ng
apple-order1.apple.com
itunesradio.ng
apple-order1.apple.com

Certificate

The complete raw certificate details for itunesradio.ng in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLbvL90pr6OqLGj+c4AQ
KmABBuAg1/SCvU3Df2rZPO9gAe20hQMNW2bfcr3qy6D7zL7h0vFyLl3GxbG4s4Vy
qrObkec+1FlvQidYdflVJYJC14pxUKQXuMxoANIPm0gxGbD7A3XAHysa7XXPxhGc
1X+GAL/SPccigPM8MVycphF/CT6MrulfO2i2mPGqN1YLIe1oZmrJ2NV0k1PZy1u9
P7AiTODCwo6v02fpi1Y2pk0fIri2RBlBjYvIR6WI47Swi13SXdjqTvcyq4b7yKgT
1LdfzPa48uKxcc4GvTcsYx8ThWsV5aj0gDntq/6q4X98RmxuAqdC613P732snm8g
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 74100273935880769173825640299293652903
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Public Server RSA CA 12 - G1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-05 19:51:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-04 20:01:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'itunesradio.ng'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24832916050667479077557737932655981750334614445479076785928368030096891504760077397205971621495247890154327220592011595959310057911033715574446312772048517335478486077319140044788133845499045827884923793330755468118236213752193674382500040971142572212134669630569786159209848737636362472625213070779038795329144095515880660895925002548919059639814675037862190131808374731481286150944198387416614519837505603881767231498599768526855851145957511840109549457336738058065156917838913548239576920735769330140162525101066889374296539625373474869368782688397698916738067409617039365570016985959961732570845200304631997997221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e5c1791055702fc775ce37043ec6bfdddd2d869
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/apsrsa12g1.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-apsrsa12g101'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1099 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunesradio.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphonecentre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipodcentre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iphonecentre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imac.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilecture.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipod.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesradio.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apple.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibook.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imac.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imac.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12diasderegalosdeitunes.co.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applecomputers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primephonic.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes12daysofchristmas.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilecture.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes12daysofchristmas.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apple.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applecomputers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipodcentre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunesradio.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iphoto.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12diasderegalosdeitunes.com.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ituneslive.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes12dagencadeaus.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipod.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultants.apple.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes12daysofchristmas.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12diasderegalosdeitunes.com.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ituneslive.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12diasderegalosdeitunes.co.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ituneslive.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibook.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imacshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes12dagencadeaus.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes12daysofchristmas.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applecomputer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imac.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.apple.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imacshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphoto.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesradio.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primephonic.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applecomputer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ituneslive.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consultants.apple.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.apple.com/certificateauthority/public'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.5.11.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/apsrsa12g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df19abe8180165098492fb7a83127340ae85532c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.6.86
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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