aknotepad.com

- Apple Inc. -

Issued by Apple IST CA 2 - G1

About this certificate

This digital certificate with serial number 49:1b:d5:1a:6e:b7:45:66:2e:5b:df:81:42:42:9e:8b was issued on by Apple Inc..

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Apple Inc.

Organization: Apple Inc.
Organization unit: management:idms.group.1328361
State / Province: California
Country: US

Apple Inc.

Organization: Apple Inc.
Organization unit: Certification Authority
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 49:1b:d5:1a:6e:b7:45:66:2e:5b:df:81:42:42:9e:8b
Serial Number (int): 97178157954922014478154474515492675211
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 43:0c:4a:6c:3c:f4:d0:58:3d:70:39:5a:bc:13:51:23:85:17:9e:e8
AuthorityKeyId: d8:7a:94:44:7c:90:70:90:16:9e:dd:17:9c:01:44:03:86:d6:2a:29

Fingerprint (sha1): 8e:d8:89:98:e1:95:7c:ac:a3:74:a3:b6:2e:d7:5c:ab:05:ab:dc:c6
Fingerprint (sha256): fa:2d:84:f0:e2:15:0e:01:b9:21:d4:3d:89:0f:93:e3:f8:31:ce:6f:dd:ab:42:eb:df:3c:f3:a3:41:74:79:e0

Issuing Certificate URL: http://certs.apple.com/appleistca2g1.der

Revocation information

OCSP Server: http://ocsp.apple.com/ocsp03-appleistca2g120
CRL Distribution Point: http://crl.apple.com/appleistca2g1.crl

Check the revocation status for certificate aknotepad.com

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aknotepad.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apple.com.sv
apple.us
apple.uy
applemusic.rio
applemusicfestival.rio
applestore.bs
applestore.cl
applestore.com.br
applestore.com.bs
applestore.com.sv
applestore.net.br
applestore.org
applestore.rio
applestores.com
appletv.rio
applewatch.rio
appstore.rio
beats1.rio
beats2.rio
beats3.rio
beats4.rio
beats5.rio
aknotepad.com

Other certificates including the domain name aknotepad.com

(limited to 100 certificates)
aknotepad.com
12diasdepresentesdeitunes.com
aknotepad.com
applecard.apple
aknotepad.com
12diasdepresentesdeitunes.com
12diasdepresentesdeitunes.com
aknotepad.com
americasred2.apple.com
applecard.apple
aknotepad.com
aknotepad.com
aknotepad.com
aknotepad.com
aknotepad.com
aknotepad.com
aknotepad.com
aknotepad.com
americasred2.apple.com
12diasdepresentesdeitunes.com
aknotepad.com
americasred2.apple.com
aknotepad.com
aknotepad.com
applecard.apple
aknotepad.com
americasred2.apple.com
aknotepad.com
12diasdepresentesdeitunes.com
aknotepad.com
applecard.apple
aknotepad.com
aknotepad.com
aknotepad.com
applecard.apple
aknotepad.com
aknotepad.com
aknotepad.com
12diasdepresentesdeitunes.com
12diasdepresentesdeitunes.com
applecard.apple
aknotepad.com
12diasdepresentesdeitunes.com
americasred2.apple.com
12diasdepresentesdeitunes.com
12diasdepresentesdeitunes.com
aknotepad.com
americasred2.apple.com
aknotepad.com
americasred2.apple.com
aknotepad.com

Certificate

The complete raw certificate details for aknotepad.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJgDCCCGigAwIBAgIQSRvVGm63RWYuW9+BQkKeizANBgkqhkiG9w0BAQsFADBi
MRwwGgYDVQQDExNBcHBsZSBJU1QgQ0EgMiAtIEcxMSAwHgYDVQQLExdDZXJ0aWZp
Y2F0aW9uIEF1dGhvcml0eTETMBEGA1UEChMKQXBwbGUgSW5jLjELMAkGA1UEBhMC
VVMwHhcNMTkwODAzMTI1MTA2WhcNMjEwOTAxMTI1MTA2WjB3MRYwFAYDVQQDDA1h
a25vdGVwYWQuY29tMSYwJAYDVQQLDB1tYW5hZ2VtZW50OmlkbXMuZ3JvdXAuMTMy
ODM2MTETMBEGA1UECgwKQXBwbGUgSW5jLjETMBEGA1UECAwKQ2FsaWZvcm5pYTEL
MAkGA1UEBhMCVVMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkSAZp
oCWBJvwuH09H8guqzgBqlocwswuti7auYaRfczd4rAFA0XpjkIMRX2pzJNfnjaJE
zT6Mh0LYHETQY0ioLlvP+y7qGEboKvznPsWamI5RH1ZMG4EWtxu7yUZEDTA+QK2W
HBhcbSke0+Drb92gDpVCDcxdmJqDRC+vLMd7XnFQmLs/LFZ2sPku9ZfluadktZ76
7gKZcqBdkQleXx9C0QNMjsIGlxZJlwi8rqTdCxhOmbbOkKwzV6lWcSioDN0ykr6t
T4SdBdQIehCTALu763RInJxST+Rk27OeGb3hd8eG3TIfbVrSonvwyKEopas8CCy4
WY+29bKL56+9vTOTAgMBAAGjggYbMIIGFzAMBgNVHRMBAf8EAjAAMB8GA1UdIwQY
MBaAFNh6lER8kHCQFp7dF5wBRAOG1iopMH4GCCsGAQUFBwEBBHIwcDA0BggrBgEF
BQcwAoYoaHR0cDovL2NlcnRzLmFwcGxlLmNvbS9hcHBsZWlzdGNhMmcxLmRlcjA4
BggrBgEFBQcwAYYsaHR0cDovL29jc3AuYXBwbGUuY29tL29jc3AwMy1hcHBsZWlz
dGNhMmcxMjAwggFoBgNVHREEggFfMIIBW4IMYXBwbGUuY29tLnN2gghhcHBsZS51
c4IIYXBwbGUudXmCDmFwcGxlbXVzaWMucmlvghZhcHBsZW11c2ljZmVzdGl2YWwu
cmlvgg1hcHBsZXN0b3JlLmJzgg1hcHBsZXN0b3JlLmNsghFhcHBsZXN0b3JlLmNv
bS5icoIRYXBwbGVzdG9yZS5jb20uYnOCEWFwcGxlc3RvcmUuY29tLnN2ghFhcHBs
ZXN0b3JlLm5ldC5icoIOYXBwbGVzdG9yZS5vcmeCDmFwcGxlc3RvcmUucmlvgg9h
cHBsZXN0b3Jlcy5jb22CC2FwcGxldHYucmlvgg5hcHBsZXdhdGNoLnJpb4IMYXBw
c3RvcmUucmlvggpiZWF0czEucmlvggpiZWF0czIucmlvggpiZWF0czMucmlvggpi
ZWF0czQucmlvggpiZWF0czUucmlvgg1ha25vdGVwYWQuY29tMIH/BgNVHSAEgfcw
gfQwgfEGCiqGSIb3Y2QFCwQwgeIwgaQGCCsGAQUFBwICMIGXDIGUUmVsaWFuY2Ug
b24gdGhpcyBjZXJ0aWZpY2F0ZSBieSBhbnkgcGFydHkgYXNzdW1lcyBhY2NlcHRh
bmNlIG9mIGFueSBhcHBsaWNhYmxlIHRlcm1zIGFuZCBjb25kaXRpb25zIG9mIHVz
ZSBhbmQvb3IgY2VydGlmaWNhdGlvbiBwcmFjdGljZSBzdGF0ZW1lbnRzLjA5Bggr
BgEFBQcCARYtaHR0cDovL3d3dy5hcHBsZS5jb20vY2VydGlmaWNhdGVhdXRob3Jp
dHkvcnBhMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATA3BgNVHR8EMDAu
MCygKqAohiZodHRwOi8vY3JsLmFwcGxlLmNvbS9hcHBsZWlzdGNhMmcxLmNybDAd
BgNVHQ4EFgQUQwxKbDz00Fg9cDlavBNRI4UXnugwDgYDVR0PAQH/BAQDAgWgMIIC
bwYKKwYBBAHWeQIEAgSCAl8EggJbAlkAdwC72d+8H4pxtZOUI5eqkntHOFeVCqtS
6BqQlmQ2jh7RhQAAAWxXkcVsAAAEAwBIMEYCIQCKBWdj1OPD8YCkbAPWK0n9lotO
OZ8EWGm/3MeufwPr5wIhALTyARWXNLB2fijfIEcLknNuTBW4AQQHik8fUuHRMsLy
AHUAVhQGmi/XwuzT9eG9RLI+x0Z2ubyZEVzA75SYVdaJ0N0AAAFsV5HFugAABAMA
RjBEAiA2N5CwAjJBAX7j0+KBtDXPm8T4DmdsGZkCJ7oNQF80ewIgCaGBF8NDQuZf
66QzcklGU3Uqx1+iA7ut/TSRIxaorSwAdgD2XJQv0XcwIhRUGAgwlFaO400TGTO/
3wwvIAvMTvFk4wAAAWxXkcVwAAAEAwBHMEUCIQD7so/JBkCvhx4VfbHs9JYokbyz
poZgTDfLfmp3edn+lAIgFrAiTM9b5Fnr5s6nyXhbSb118Bq3qEQKlyblpO3bAS0A
dwDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWxXkcVrAAAEAwBI
MEYCIQClNZF2UHO9yD263GLJraJlobBo8wAstZPbyeLl53B+hgIhAJ9213b8kWwH
1jtpulsYk7o8MrBN+uH9JhdCEMp3jmPfAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkC
wQApBo2yCJo32RMAAAFsV5HILAAABAMARzBFAiEA1Lg6elAfCMDceVSycU6tB0F4
t1Tg4/EVNLnyB61xj0UCIAY+jzDNme/RCR+ijwNhk4urNS4KCAF9158jNl6hoSnY
MA0GCSqGSIb3DQEBCwUAA4IBAQCMx2P/hHVsvpglQtnCnyWA1UPCXSIoD1Zxx9C3
XHGVeOibFAVKqL4iqvV42UrjGsEblRQ2c1ITyapZyzcg+T2P4ehAtiPoRnFUwDtr
fZBi0n+cFnJ2y3xgmocN0QTKxA4fsKFR8MTMa5k1ofdX1B2CQYhPRuxsiSHiVpRP
HeiGSEkMMQfr0LaELv3znCvdvpdfuz0Zsb/kM/URICa/nKtGNFMtbFr63seCyHmY
Cd+lpB2bOweof/GTvC0n9rovlVo5hHZ/YevQ9os5E2uNQYbIvTq0a/XgE1/kR3W6
NGDvgJ8uvAwPhTJXR5KxZK6j+ZeBmjvFuRiGkH2LrPGlzPkJ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEgGaaAlgSb8Lh9PR/IL
qs4AapaHMLMLrYu2rmGkX3M3eKwBQNF6Y5CDEV9qcyTX542iRM0+jIdC2BxE0GNI
qC5bz/su6hhG6Cr85z7FmpiOUR9WTBuBFrcbu8lGRA0wPkCtlhwYXG0pHtPg62/d
oA6VQg3MXZiag0QvryzHe15xUJi7PyxWdrD5LvWX5bmnZLWe+u4CmXKgXZEJXl8f
QtEDTI7CBpcWSZcIvK6k3QsYTpm2zpCsM1epVnEoqAzdMpK+rU+EnQXUCHoQkwC7
u+t0SJycUk/kZNuznhm94XfHht0yH21a0qJ78MihKKWrPAgsuFmPtvWyi+evvb0z
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 97178157954922014478154474515492675211
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple IST CA 2 - G1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-03 12:51:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-01 12:51:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'aknotepad.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'management:idms.group.1328361'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Apple Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20738598889935248959761577938828976154408829373707641817382389533962356834842294362841794809184120700070129454627585202158871049568233368586394344103123737163776794964421513156650692295309590112962797102592731377525173128567329553769121143175501584810167543125303147164080789782411082498196163610110679452633004185491738583931390934932398274910648248272580825170910866770214803318414553519141937159330121801066872866504174109560108766381082950464856093576108950363119085632040056163174007390265415657737199321132816952381619683917015526950287660639308577665574549715391523409870801878378220100218241946979295137969043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d87a94447c907090169edd179c01440386d62a29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.apple.com/appleistca2g1.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.apple.com/ocsp03-appleistca2g120'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (351 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apple.com.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apple.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apple.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applemusic.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applemusicfestival.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applestore.bs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applestore.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applestore.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applestore.com.bs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applestore.com.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applestore.net.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applestore.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applestore.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applestores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appletv.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applewatch.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appstore.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beats1.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beats2.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beats3.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beats4.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beats5.rio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aknotepad.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113635.100.5.11.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reliance on this certificate by any party assumes acceptance of any applicable terms and conditions of use and/or certification practice statements.'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.apple.com/certificateauthority/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.apple.com/appleistca2g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							430c4a6c3cf4d0583d70395abc13512385179ee8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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