cloudkit.io
- Apple Inc. -
Issued by Apple IST CA 2 - G1
About this certificate
This digital certificate with serial number 47:55:1d:ea:12:b0:6d:a9 was issued on by Apple Inc..
With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Apple Inc.
Organization:
Apple Inc.
Organization unit: management:idms.group.1328361
Organization unit: management:idms.group.1328361
State / Province:
California
Country: US
Country: US
Apple Inc.
Organization:
Apple Inc.
Organization unit: Certification Authority
Organization unit: Certification Authority
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 47:55:1d:ea:12:b0:6d:a9Serial Number (int): 5140047440886394281
Serial Number lenght: 63 bits, 8 octets
SubjectKeyId: 49:be:60:bb:8b:ce:59:00:dd:e2:11:eb:37:79:57:89:9f:05:70:43
AuthorityKeyId: d8:7a:94:44:7c:90:70:90:16:9e:dd:17:9c:01:44:03:86:d6:2a:29
Fingerprint (sha1): 1a:ad:f5:05:c0:e5:77:f2:11:d5:2c:c0:f4:2d:8b:79:4e:93:9c:c1
Fingerprint (sha256): cc:6d:e1:1a:eb:4c:3b:4c:95:17:d3:07:01:dc:65:8a:f4:58:82:75:e8:0b:18:b0:71:88:6a:70:85:00:b3:42
Issuing Certificate URL: http://certs.apple.com/appleistca2g1.der
Revocation information
OCSP Server: http://ocsp.apple.com/ocsp03-appleistca2g120CRL Distribution Point: http://crl.apple.com/appleistca2g1.crl
Check the revocation status for certificate cloudkit.io
88
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cloudkit.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
codifiable.com
digitalhub.com
dotmac.com
ebc.apple.com
evsx.com
eworld.com
findmyipad.com
firewire.org
guide.apple.com
ibook.info
icloud.rio
imac.mx
imacshop.net
imacstore.com
imoovie.com
imoviefest.com
intrinsity.com
intrinsity.net
intrinsity.org
ipadair.com.mx
ipadair.mx
ipadpro.mx
ipadpro.rio
iphone-challenge.com
iphone.rio
ipod.rio
ipodtouch.com
itunes.mx
itunes.org
itunes.rio
itunesessentials.com
itunesfestivals.com
ituneslogin.net
itunesmatch.com
itunesradio.rio
itunesstore.rio
itunesu.com
lambdamap.com
lionserver.com
livepage.apple.com
livephotos.rio
lojaapple.com.br
mac.me
mac.om
mac.rio
macbook.rio
macboxset.com
macstore.rio
me.com
metapushpin.com
metapushpin.info
metapushpin.net
metapushpin.org
mzstatic.com
newton.com
next.com
omegamap.com
oneline-apple-store.com
online-apple-store.com
onlineapplestore.com
placebase.ca
podcast.apple.com
podcasting.apple.com
pushpin.mobi
qapple.com
rememberingsteve.com
rememberingstevejobs.com
rendermap.com
researchkit.org
seminars.apple.com
shop-different.com
shop-different.net
shop-different.org
shopdifferent.net
shopdifferent.org
store.apple.ca
store.apple.com
theapple.com
theapplestore.com
theapplestore.us
thetamap.com
thinkdifferent.us
wdirect.apple.com
wwdc.apple.com
wwwapple.ca
wwwapple.com
wwwapplestore.com
cloudkit.io
digitalhub.com
dotmac.com
ebc.apple.com
evsx.com
eworld.com
findmyipad.com
firewire.org
guide.apple.com
ibook.info
icloud.rio
imac.mx
imacshop.net
imacstore.com
imoovie.com
imoviefest.com
intrinsity.com
intrinsity.net
intrinsity.org
ipadair.com.mx
ipadair.mx
ipadpro.mx
ipadpro.rio
iphone-challenge.com
iphone.rio
ipod.rio
ipodtouch.com
itunes.mx
itunes.org
itunes.rio
itunesessentials.com
itunesfestivals.com
ituneslogin.net
itunesmatch.com
itunesradio.rio
itunesstore.rio
itunesu.com
lambdamap.com
lionserver.com
livepage.apple.com
livephotos.rio
lojaapple.com.br
mac.me
mac.om
mac.rio
macbook.rio
macboxset.com
macstore.rio
me.com
metapushpin.com
metapushpin.info
metapushpin.net
metapushpin.org
mzstatic.com
newton.com
next.com
omegamap.com
oneline-apple-store.com
online-apple-store.com
onlineapplestore.com
placebase.ca
podcast.apple.com
podcasting.apple.com
pushpin.mobi
qapple.com
rememberingsteve.com
rememberingstevejobs.com
rendermap.com
researchkit.org
seminars.apple.com
shop-different.com
shop-different.net
shop-different.org
shopdifferent.net
shopdifferent.org
store.apple.ca
store.apple.com
theapple.com
theapplestore.com
theapplestore.us
thetamap.com
thinkdifferent.us
wdirect.apple.com
wwdc.apple.com
wwwapple.ca
wwwapple.com
wwwapplestore.com
cloudkit.io
Other certificates including the domain name cloudkit.io
(limited to 100 certificates)
cloudkit.io
cloudkit.io
cloudkit.io
americasred1.apple.com
cloudkit.io
cloudkit.io
cloudkit.io
aknotepad.com
americasred1.apple.com
apple.id
cloudkit.io
aknotepad.com
cloudkit.io
cloudkit.io
aknotepad.com
americasred1.apple.com
apple.id
aknotepad.com
cloudkit.io
aknotepad.com
cloudkit.io
aknotepad.com
apple.id
cloudkit.io
apple.id
aknotepad.com
cloudkit.io
apple.id
cloudkit.io
cloudkit.io
aknotepad.com
cloudkit.io
aknotepad.com
aknotepad.com
cloudkit.io
cloudkit.io
cloudkit.io
cloudkit.io
aknotepad.com
apple.id
aknotepad.com
cloudkit.io
apple.id
cloudkit.io
americasred1.apple.com
apple.id
cloudkit.io
apple.id
cloudkit.io
aknotepad.com
cloudkit.io
cloudkit.io
americasred1.apple.com
cloudkit.io
cloudkit.io
cloudkit.io
aknotepad.com
americasred1.apple.com
apple.id
cloudkit.io
aknotepad.com
cloudkit.io
cloudkit.io
aknotepad.com
americasred1.apple.com
apple.id
aknotepad.com
cloudkit.io
aknotepad.com
cloudkit.io
aknotepad.com
apple.id
cloudkit.io
apple.id
aknotepad.com
cloudkit.io
apple.id
cloudkit.io
cloudkit.io
aknotepad.com
cloudkit.io
aknotepad.com
aknotepad.com
cloudkit.io
cloudkit.io
cloudkit.io
cloudkit.io
aknotepad.com
apple.id
aknotepad.com
cloudkit.io
apple.id
cloudkit.io
americasred1.apple.com
apple.id
cloudkit.io
apple.id
cloudkit.io
aknotepad.com
Certificate
The complete raw certificate details for cloudkit.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILHzCCCgegAwIBAgIIR1Ud6hKwbakwDQYJKoZIhvcNAQELBQAwYjEcMBoGA1UE AxMTQXBwbGUgSVNUIENBIDIgLSBHMTEgMB4GA1UECxMXQ2VydGlmaWNhdGlvbiBB dXRob3JpdHkxEzARBgNVBAoTCkFwcGxlIEluYy4xCzAJBgNVBAYTAlVTMB4XDTE4 MTIxNDAyNTEwNVoXDTIxMDExMjAyNTEwNVowdTEUMBIGA1UEAwwLY2xvdWRraXQu aW8xJjAkBgNVBAsMHW1hbmFnZW1lbnQ6aWRtcy5ncm91cC4xMzI4MzYxMRMwEQYD VQQKDApBcHBsZSBJbmMuMRMwEQYDVQQIDApDYWxpZm9ybmlhMQswCQYDVQQGEwJV UzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPKBylgXPHzMvebHr90a c8JhWVXUhQ7xmcKYdmsFSJAyU4kbGdwo0j9fKLfT8Mk29Nsi6ryDNN9fLI8tJBQ6 iVhJvMy0JyiK/vFl8d/jYPYaSL2wEjstYbk7cm6VvWS9bzSXM/lUsCGq4u2PfN2s GkQbw7mz+0llC3CIcJ6vPMVrr4mMRfanQP2DyoISaOFs5+8ZeoMTzRyc70V4X2th G8MogS9L7FFLm9sfWSLJN1bHamtyPqwQFq/Nci7TVl5d05ZaKeWSDAHV/VR6ulj8 ny4tGPtxOfMFYmTIBrRQD92LDYUG2zo515rVACe9LkVkyCF6tue2tuk3GaFKms48 uTECAwEAAaOCB8QwggfAMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAU2HqURHyQ cJAWnt0XnAFEA4bWKikwfgYIKwYBBQUHAQEEcjBwMDQGCCsGAQUFBzAChihodHRw Oi8vY2VydHMuYXBwbGUuY29tL2FwcGxlaXN0Y2EyZzEuZGVyMDgGCCsGAQUFBzAB hixodHRwOi8vb2NzcC5hcHBsZS5jb20vb2NzcDAzLWFwcGxlaXN0Y2EyZzEyMDCC BW8GA1UdEQSCBWYwggVigg5jb2RpZmlhYmxlLmNvbYIOZGlnaXRhbGh1Yi5jb22C CmRvdG1hYy5jb22CDWViYy5hcHBsZS5jb22CCGV2c3guY29tggpld29ybGQuY29t gg5maW5kbXlpcGFkLmNvbYIMZmlyZXdpcmUub3Jngg9ndWlkZS5hcHBsZS5jb22C Cmlib29rLmluZm+CCmljbG91ZC5yaW+CB2ltYWMubXiCDGltYWNzaG9wLm5ldIIN aW1hY3N0b3JlLmNvbYILaW1vb3ZpZS5jb22CDmltb3ZpZWZlc3QuY29tgg5pbnRy aW5zaXR5LmNvbYIOaW50cmluc2l0eS5uZXSCDmludHJpbnNpdHkub3Jngg5pcGFk YWlyLmNvbS5teIIKaXBhZGFpci5teIIKaXBhZHByby5teIILaXBhZHByby5yaW+C FGlwaG9uZS1jaGFsbGVuZ2UuY29tggppcGhvbmUucmlvgghpcG9kLnJpb4INaXBv ZHRvdWNoLmNvbYIJaXR1bmVzLm14ggppdHVuZXMub3JnggppdHVuZXMucmlvghRp dHVuZXNlc3NlbnRpYWxzLmNvbYITaXR1bmVzZmVzdGl2YWxzLmNvbYIPaXR1bmVz bG9naW4ubmV0gg9pdHVuZXNtYXRjaC5jb22CD2l0dW5lc3JhZGlvLnJpb4IPaXR1 bmVzc3RvcmUucmlvggtpdHVuZXN1LmNvbYINbGFtYmRhbWFwLmNvbYIObGlvbnNl cnZlci5jb22CEmxpdmVwYWdlLmFwcGxlLmNvbYIObGl2ZXBob3Rvcy5yaW+CEGxv amFhcHBsZS5jb20uYnKCBm1hYy5tZYIGbWFjLm9tggdtYWMucmlvggttYWNib29r LnJpb4INbWFjYm94c2V0LmNvbYIMbWFjc3RvcmUucmlvggZtZS5jb22CD21ldGFw dXNocGluLmNvbYIQbWV0YXB1c2hwaW4uaW5mb4IPbWV0YXB1c2hwaW4ubmV0gg9t ZXRhcHVzaHBpbi5vcmeCDG16c3RhdGljLmNvbYIKbmV3dG9uLmNvbYIIbmV4dC5j b22CDG9tZWdhbWFwLmNvbYIXb25lbGluZS1hcHBsZS1zdG9yZS5jb22CFm9ubGlu ZS1hcHBsZS1zdG9yZS5jb22CFG9ubGluZWFwcGxlc3RvcmUuY29tggxwbGFjZWJh c2UuY2GCEXBvZGNhc3QuYXBwbGUuY29tghRwb2RjYXN0aW5nLmFwcGxlLmNvbYIM cHVzaHBpbi5tb2JpggpxYXBwbGUuY29tghRyZW1lbWJlcmluZ3N0ZXZlLmNvbYIY cmVtZW1iZXJpbmdzdGV2ZWpvYnMuY29tgg1yZW5kZXJtYXAuY29tgg9yZXNlYXJj aGtpdC5vcmeCEnNlbWluYXJzLmFwcGxlLmNvbYISc2hvcC1kaWZmZXJlbnQuY29t ghJzaG9wLWRpZmZlcmVudC5uZXSCEnNob3AtZGlmZmVyZW50Lm9yZ4IRc2hvcGRp ZmZlcmVudC5uZXSCEXNob3BkaWZmZXJlbnQub3Jngg5zdG9yZS5hcHBsZS5jYYIP c3RvcmUuYXBwbGUuY29tggx0aGVhcHBsZS5jb22CEXRoZWFwcGxlc3RvcmUuY29t ghB0aGVhcHBsZXN0b3JlLnVzggx0aGV0YW1hcC5jb22CEXRoaW5rZGlmZmVyZW50 LnVzghF3ZGlyZWN0LmFwcGxlLmNvbYIOd3dkYy5hcHBsZS5jb22CC3d3d2FwcGxl LmNhggx3d3dhcHBsZS5jb22CEXd3d2FwcGxlc3RvcmUuY29tggtjbG91ZGtpdC5p bzCB/wYDVR0gBIH3MIH0MIHxBgoqhkiG92NkBQsEMIHiMIGkBggrBgEFBQcCAjCB lwyBlFJlbGlhbmNlIG9uIHRoaXMgY2VydGlmaWNhdGUgYnkgYW55IHBhcnR5IGFz c3VtZXMgYWNjZXB0YW5jZSBvZiBhbnkgYXBwbGljYWJsZSB0ZXJtcyBhbmQgY29u ZGl0aW9ucyBvZiB1c2UgYW5kL29yIGNlcnRpZmljYXRpb24gcHJhY3RpY2Ugc3Rh dGVtZW50cy4wOQYIKwYBBQUHAgEWLWh0dHA6Ly93d3cuYXBwbGUuY29tL2NlcnRp ZmljYXRlYXV0aG9yaXR5L3JwYTAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUH AwEwNwYDVR0fBDAwLjAsoCqgKIYmaHR0cDovL2NybC5hcHBsZS5jb20vYXBwbGVp c3RjYTJnMS5jcmwwHQYDVR0OBBYEFEm+YLuLzlkA3eIR6zd5V4mfBXBDMA4GA1Ud DwEB/wQEAwIFoDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGDFIi1P6uD7TFezW+lRlQmLtbhmMSLpywXrCf06F7LjqpO8rTVEfkUIGdg4v g2mK/wC13O1J+R8xBqOug6pj7WhQ1VN0v8/G/8V7drMBtZ8NJ1QOzsXjJGpWt/js TT2PAW4VzVjI9TSjiPJSSaEEyQKWWSHnShftditfARTKrcEz0ajkEil8qy56mJzN PXFA72qb42B/3SRL7aeOARn9Ckqm+MMoPgSXzIZkOyQAkmj5uaoCojM0oKtyKoVU M700ehUWqSVhk0gO/SaiwlctbU+iStgJSN4XSkolS6rFYo6xByz9VohACnmsws32 J0LGA3ei2F4JaYKYZSFzMXtItg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oHKWBc8fMy95sev3Rpz wmFZVdSFDvGZwph2awVIkDJTiRsZ3CjSP18ot9PwyTb02yLqvIM0318sjy0kFDqJ WEm8zLQnKIr+8WXx3+Ng9hpIvbASOy1huTtybpW9ZL1vNJcz+VSwIari7Y983awa RBvDubP7SWULcIhwnq88xWuviYxF9qdA/YPKghJo4Wzn7xl6gxPNHJzvRXhfa2Eb wyiBL0vsUUub2x9ZIsk3Vsdqa3I+rBAWr81yLtNWXl3Tllop5ZIMAdX9VHq6WPyf Li0Y+3E58wViZMgGtFAP3YsNhQbbOjnXmtUAJ70uRWTIIXq257a26TcZoUqazjy5 MQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5140047440886394281 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple IST CA 2 - G1' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-14 02:51:05 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-12 02:51:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cloudkit.io' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'management:idms.group.1328361' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Apple Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30613671836697965331963552081676083234473319245787431090755044316010940049994386244763546257061699165845075223028145388996975858731417237384757209433515995400853626051524294594197721896593207846770582389001985606110173654431519772535832114320311386697467885717762951710049647242717313030181872143211672763852075115715075562593977278234697435233911796769779832176886746918324411681983524099552524594014044301149894624767435717107203362961875552762070511011355325596954945872869090220074690830089588340612209505933507593325803712383074464922437070698806619912304799041964223622860831791178603935927445533660869298010417 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d87a94447c907090169edd179c01440386d62a29 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/appleistca2g1.der' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-appleistca2g120' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1382 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codifiable.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalhub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotmac.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebc.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evsx.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eworld.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findmyipad.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firewire.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guide.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibook.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icloud.rio' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imac.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imacshop.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imacstore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imoovie.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imoviefest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrinsity.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrinsity.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrinsity.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipadair.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipadair.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipadpro.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipadpro.rio' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphone-challenge.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphone.rio' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipod.rio' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipodtouch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.rio' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesessentials.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesfestivals.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ituneslogin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesmatch.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesradio.rio' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesstore.rio' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesu.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambdamap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionserver.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livepage.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livephotos.rio' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lojaapple.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mac.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mac.om' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mac.rio' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macbook.rio' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macboxset.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macstore.rio' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metapushpin.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metapushpin.info' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metapushpin.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metapushpin.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzstatic.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newton.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omegamap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneline-apple-store.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-apple-store.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineapplestore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placebase.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcast.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcasting.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushpin.mobi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qapple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rememberingsteve.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rememberingstevejobs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rendermap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'researchkit.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seminars.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-different.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-different.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-different.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopdifferent.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopdifferent.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.apple.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theapple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theapplestore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theapplestore.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetamap.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkdifferent.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdirect.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwdc.apple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwapple.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwapple.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwapplestore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudkit.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.5.11.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of any applicable terms and conditions of use and/or certification practice statements.' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.apple.com/certificateauthority/rpa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/appleistca2g1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 49be60bb8bce5900dde211eb377957899f057043 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 001831488b53fab83ed315ecd6fa54654262ed6e198c48ba72c17ac27f4e85ecb8eaa4ef2b4d511f914206760e2f83698aff00b5dced49f91f3106a3ae83aa63ed6850d55374bfcfc6ffc57b76b301b59f0d27540ecec5e3246a56b7f8ec4d3d8f016e15cd58c8f534a388f25249a104c902965921e74a17ed762b5f0114caadc133d1a8e412297cab2e7a989ccd3d7140ef6a9be3607fdd244beda78e0119fd0a4aa6f8c3283e0497cc86643b24009268f9b9aa02a23334a0ab722a855433bd347a1516a9256193480efd26a2c2572d6d4fa24ad80948de174a4a254baac5628eb1072cfd5688400a79acc2cdf62742c60377a2d85e09698298652173317b48b6