cloudkit.io

- Apple Inc. -

Issued by Apple IST CA 2 - G1

About this certificate

This digital certificate with serial number 43:e9:24:97:46:4b:f9:b4 was issued on by Apple Inc..

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Apple Inc.

Organization: Apple Inc.
Organization unit: management:idms.group.1328361
State / Province: California
Country: US

Apple Inc.

Organization: Apple Inc.
Organization unit: Certification Authority
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 43:e9:24:97:46:4b:f9:b4
Serial Number (int): 4893482702252800436
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 94:18:32:62:70:4c:f0:2a:a7:75:ee:75:fa:67:f4:8d:4d:64:ed:a6
AuthorityKeyId: d8:7a:94:44:7c:90:70:90:16:9e:dd:17:9c:01:44:03:86:d6:2a:29

Fingerprint (sha1): 2d:3a:ab:dd:3c:3c:2c:b0:62:c5:fe:75:65:91:32:de:64:1d:e2:2d
Fingerprint (sha256): f5:b9:78:9b:b0:1d:21:05:10:2b:3a:fc:f8:bf:8d:79:2d:08:2d:aa:c3:17:8d:32:92:31:c6:e2:dd:79:17:49

Issuing Certificate URL: http://certs.apple.com/appleistca2g1.der

Revocation information

OCSP Server: http://ocsp.apple.com/ocsp03-appleistca2g120
CRL Distribution Point: http://crl.apple.com/appleistca2g1.crl

Check the revocation status for certificate cloudkit.io

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cloudkit.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

codifiable.com
digitalhub.com
dotmac.com
ebc.apple.com
evsx.com
eworld.com
findmyipad.com
firewire.org
guide.apple.com
ibook.info
icloud.rio
imac.mx
imacshop.net
imacstore.com
imoovie.com
imoviefest.com
intrinsity.com
intrinsity.net
intrinsity.org
ipadair.com.mx
ipadair.mx
ipadpro.mx
ipadpro.rio
iphone-challenge.com
iphone.rio
ipod.rio
ipodtouch.com
itunes.mx
itunes.org
itunes.rio
itunesessentials.com
itunesfestivals.com
ituneslogin.net
itunesmatch.com
itunesradio.rio
itunesstore.rio
itunesu.com
lambdamap.com
lionserver.com
livepage.apple.com
livephotos.rio
lojaapple.com.br
mac.me
mac.om
mac.rio
macbook.rio
macboxset.com
macstore.rio
me.com
metapushpin.com
metapushpin.info
metapushpin.net
metapushpin.org
mzstatic.com
newton.com
next.com
omegamap.com
oneline-apple-store.com
online-apple-store.com
onlineapplestore.com
placebase.ca
podcast.apple.com
podcasting.apple.com
pushpin.mobi
qapple.com
rememberingsteve.com
rememberingstevejobs.com
rendermap.com
researchkit.org
seminars.apple.com
shop-different.com
shop-different.net
shop-different.org
shopdifferent.net
shopdifferent.org
store.apple.ca
store.apple.com
theapple.com
theapplestore.com
theapplestore.us
thetamap.com
thinkdifferent.us
wdirect.apple.com
wwdc.apple.com
wwwapple.ca
wwwapple.com
wwwapplestore.com
cloudkit.io

Other certificates including the domain name cloudkit.io

(limited to 100 certificates)
cloudkit.io
cloudkit.io
cloudkit.io
americasred1.apple.com
cloudkit.io
cloudkit.io
cloudkit.io
aknotepad.com
americasred1.apple.com
apple.id
cloudkit.io
aknotepad.com
cloudkit.io
cloudkit.io
aknotepad.com
americasred1.apple.com
apple.id
aknotepad.com
cloudkit.io
aknotepad.com
cloudkit.io
aknotepad.com
apple.id
cloudkit.io
apple.id
aknotepad.com
cloudkit.io
apple.id
cloudkit.io
cloudkit.io
aknotepad.com
cloudkit.io
aknotepad.com
aknotepad.com
cloudkit.io
cloudkit.io
cloudkit.io
cloudkit.io
aknotepad.com
apple.id
aknotepad.com
cloudkit.io
apple.id
cloudkit.io
americasred1.apple.com
apple.id
cloudkit.io
apple.id
cloudkit.io
aknotepad.com

Certificate

The complete raw certificate details for cloudkit.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nylb8OvZUGbyZU2XBs1
72VYL01B0+2zqAwvaTSmRZYIJo/hZFWEJURZXsegehRxYuzaPnmpAX1szB2nvhWx
OwxdjePxFVEXmsq8dvdDDVsBD1F0NWHwOu1cHLvXVRnxvqDKhue8av3XrWXKeBSH
TzkAwl+QY1++zrjUC3Iv9c5QDFWC9hzi3tI29xd8FXTlMJOIf9WA/54dbeOIYkDE
gWgiX25DgoMqaLtIILaY6a1xpJ3aPDYk8BoZDKGgz9QSFlpWoxeCiCXApRybs85K
dczH4AmoyH+Q5yfezBtVqTl/FVNudHMxS4S9EqASe1Ol+FKGhxM02+dqxJ0j/QQv
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4893482702252800436
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple IST CA 2 - G1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-17 01:51:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-16 01:51:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cloudkit.io'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'management:idms.group.1328361'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26571509393004135441499625633883029539659138454415855497901384548311619800806893546833980352227244641674373060611348266487711241400998102435482893056770008269797890788747579303068026934222473972903434958040186565951492823102008509198382553456967768985354786756695686241195845513029756255818872524142564462949754508020670000637710095125373272398111293336149537551849190862178332755066989478536574490534549104938106454810547810983318751966383108654035107301186752220328276179685712136306090669266639521969921670871445702406499232537073758867022485287110796722395134484626977590573723422315543583158354069319623773532051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d87a94447c907090169edd179c01440386d62a29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/appleistca2g1.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-appleistca2g120'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1382 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codifiable.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalhub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotmac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebc.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evsx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'findmyipad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firewire.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guide.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibook.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icloud.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imac.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imacshop.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imacstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imoovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imoviefest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrinsity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrinsity.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intrinsity.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipadair.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipadair.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipadpro.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipadpro.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphone-challenge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphone.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipod.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipodtouch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunes.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesessentials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesfestivals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ituneslogin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesmatch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesradio.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesstore.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itunesu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lambdamap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lionserver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livepage.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livephotos.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lojaapple.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mac.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mac.om'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mac.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macbook.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macboxset.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macstore.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metapushpin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metapushpin.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metapushpin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metapushpin.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzstatic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omegamap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneline-apple-store.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-apple-store.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlineapplestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placebase.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcast.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcasting.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushpin.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qapple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rememberingsteve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rememberingstevejobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rendermap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'researchkit.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seminars.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-different.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-different.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop-different.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopdifferent.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopdifferent.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.apple.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theapple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theapplestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theapplestore.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thetamap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thinkdifferent.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdirect.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwdc.apple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwapple.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwapple.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwapplestore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudkit.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.5.11.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of any applicable terms and conditions of use and/or certification practice statements.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.apple.com/certificateauthority/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/appleistca2g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							94183262704cf02aa775ee75fa67f48d4d64eda6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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