itunesradio.ng

- Apple Inc. -

Issued by Apple Public Server RSA CA 12 - G1

About this certificate

This digital certificate with serial number 0a:15:7a:0a:5d:a7:c7:da:22:17:8c:c4:82:a5:3f:d4 was issued on by Apple Inc..

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Apple Inc.

Organization: Apple Inc.
State / Province: California
Country: US

Apple Inc.

Organization: Apple Inc.
State / Province: California
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:15:7a:0a:5d:a7:c7:da:22:17:8c:c4:82:a5:3f:d4
Serial Number (int): 13403793467116601055709929014861053908
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a4:b1:af:a8:4d:b2:b3:1a:1b:79:0b:b0:1f:1f:38:bd:2b:88:2c:d1
AuthorityKeyId: 1e:5c:17:91:05:57:02:fc:77:5c:e3:70:43:ec:6b:fd:dd:d2:d8:69

Fingerprint (sha1): 67:f2:20:a4:46:f9:50:ec:fb:2d:a8:75:f1:d1:50:eb:4f:4c:29:55
Fingerprint (sha256): cf:22:7c:6f:43:e3:ae:0c:64:7c:96:61:a2:6b:2f:54:44:20:c1:06:10:94:13:01:8d:41:38:66:50:4c:28:b3

Issuing Certificate URL: http://certs.apple.com/apsrsa12g1.der

Revocation information

OCSP Server: http://ocsp.apple.com/ocsp03-apsrsa12g101
CRL Distribution Point: http://crl.apple.com/apsrsa12g1.crl

Check the revocation status for certificate itunesradio.ng

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itunesradio.ng

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.itunesradio.co.nz
iphonecentre.nl
www.itunes.co.nz
ipodcentre.nl
itunes.co.nz
www.iphonecentre.nl
imac.nl
www.ilecture.co.nz
ipod.co.nz
itunesradio.ng
apple.no
www.ibook.co.nz
www.imac.nl
imac.co.nz
www.itunes.nl
www.12diasderegalosdeitunes.co.ni
www.itunes.no
applecomputers.co.nz
www.primephonic.nl
itunes.no
itunes.nl
www.apple.co.nz
www.itunes12daysofchristmas.co.nz
ilecture.co.nz
itunes12daysofchristmas.no
apple.co.nz
www.applecomputers.co.nz
www.ipodcentre.nl
www.apple.no
www.itunesradio.ng
www.ipod.no
www.iphoto.no
www.12diasderegalosdeitunes.com.ni
www.ipod.co.nz
ituneslive.no
www.itunes12dagencadeaus.nl
ipod.no
consultants.apple.co.nz
itunes12daysofchristmas.co.nz
12diasderegalosdeitunes.com.ni
www.ituneslive.nl
12diasderegalosdeitunes.co.ni
www.ituneslive.no
ibook.co.nz
www.imacshop.nl
itunes12dagencadeaus.nl
www.itunes12daysofchristmas.no
www.applecomputer.co.nz
www.imac.co.nz
store.apple.co.nz
imacshop.nl
iphoto.no
itunesradio.co.nz
primephonic.nl
applecomputer.co.nz
ituneslive.nl
www.consultants.apple.co.nz

Other certificates including the domain name itunesradio.ng

(limited to 100 certificates)
12diasderegalosdeitunes.com.es
itunesradio.ng
apple-order1.apple.com
itunesradio.ng
12diasderegalosdeitunes.com.es
itunesradio.ng
apple-order1.apple.com
12diasderegalosdeitunes.com.es
itunesradio.ng
itunesradio.ng
12diasderegalosdeitunes.com.es
itunesradio.ng
apple-order1.apple.com
itunesradio.ng
12diasderegalosdeitunes.com.es
12diasderegalosdeitunes.com.es
itunesradio.ng
apple-order1.apple.com
itunesradio.ng
apple-order1.apple.com

Certificate

The complete raw certificate details for itunesradio.ng in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuXBuC/8Xso0VKF7UJmy
LsfHxVBkhn6ayyiCfV2itPMiOtmfuEW/o6Dn3LhqjWr1qzfHOWbt5soKjQaVmA2H
z+CG9m/nVWe08pQlxoUwFYW/p0y7k5vN8yvhZN7G0EPDKvXqlY40kny2piQvaQfv
qiMmh2GwaWTY43ZBvE26kCr5FgngIfZ1Ts0HE0RKFC41l0G+JDlOMJD8tf9Yg9wF
MBfyoPJLne3rQ/wigoqmzf21KowzDF0AMeU9x48xVJyQZ84ZwIpvkRkKRJAMNkg3
yT2rP0ffLHvN+xKD87/rL9OlXav9R3P+3XvmdnyKDln8JhKPv6DfxhE79tz5jdG1
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13403793467116601055709929014861053908
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Public Server RSA CA 12 - G1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 18:51:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 19:01:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'itunesradio.ng'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20058949444302221255189372127866206741184418936686617660601156836371209868443879371926308183428914253594902917481140434474905790577860788206700148292518386616048965192290110297162031402980478689192458016911608533575453250149096578339596262635650272842590682871244209540215849969321242456855266050290354898501217737982261745094545547510631956865480348143138997379101347495423294954889395270578752061778849160695257655232316162590966419693031950233124662529711813882775784770186096259101824375309261453554106932757631150432244539565195866991740651898010097800386119795795045898304461261194317514483878476809193345103273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e5c1791055702fc775ce37043ec6bfdddd2d869
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/apsrsa12g1.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-apsrsa12g101'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1099 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunesradio.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphonecentre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipodcentre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iphonecentre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imac.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilecture.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipod.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesradio.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apple.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibook.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imac.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imac.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12diasderegalosdeitunes.co.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applecomputers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primephonic.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes12daysofchristmas.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilecture.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes12daysofchristmas.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apple.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applecomputers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipodcentre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apple.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunesradio.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iphoto.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.12diasderegalosdeitunes.com.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipod.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ituneslive.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes12dagencadeaus.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipod.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultants.apple.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes12daysofchristmas.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12diasderegalosdeitunes.com.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ituneslive.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12diasderegalosdeitunes.co.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ituneslive.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibook.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imacshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes12dagencadeaus.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.itunes12daysofchristmas.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applecomputer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imac.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.apple.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imacshop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphoto.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesradio.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primephonic.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applecomputer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ituneslive.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consultants.apple.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.apple.com/certificateauthority/public'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.5.11.4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/apsrsa12g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4b1afa84db2b31a1b790bb01f1f38bd2b882cd1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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