121 domains labelRegex ^p[0-9]{0,3}-content$|^p[0-9]{0,3}-content-|^p[0-9]{0,3}-ckdatabase$|^p[0-9]{0,3}-ckdatabase-|^p[0-9]{0,3}-ckshare$|^p[0-9]{0,3}-ckshare-|^p[0-9]{0,3}-ckdevice$|^p[0-9]{0,3}-ckdevice-|^p[0-9]{0,3}-ckcoderouter$|^p[0-9]{0,3}-ckcoderouter-|^gateway|^p[0-9]{0,3}-keyvalueservice$|^p[0-9]{0,3}-keyvalueservice-|^keyvalueservice|^p[0-9]{0,3}-pairingws$|^p[0-9]{0,3}-pairingws-|^pairingws|^metrics|^.*quota$|^.*contacts$|^.*caldav$ suffix icloud.com labelRegex ^p[0-9]{0,3}-content$|^p[0-9]{0,3}-content-|^p[0-9]{0,3}-ckdatabase$|^p[0-9]{0,3}-ckdatabase-|^p[0-9]{0,3}-ckshare$|^p[0-9]{0,3}-ckshare-|^p[0-9]{0,3}-ckdevice$|^p[0-9]{0,3}-ckdevice-|^p[0-9]{0,3}-ckcoderouter$|^p[0-9]{0,3}-ckcoderouter-|^gateway|^p[0-9]{0,3}-keyvalueservice$|^p[0-9]{0,3}-keyvalueservice-|^keyvalueservice|^p[0-9]{0,3}-pairingws$|^p[0-9]{0,3}-pairingws-|^pairingws|^metrics|^.*quota$ suffix icloud.com.cn labelRegex ^api$ suffix apple-cloudkit.com policyName MMCS rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.11.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.11.2 QAMarker 1.2.840.113635.100.6.27.11.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.11.1 Revocation AnyRevocationMethod AnchorSHA256 Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= 16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ= F5OSegYUVJeJrc4vjzT38LZtDzrjo7hNIewV27pPrcc= 55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= ChainLength 3 CheckIntermediateCountry US CheckIntermediateOrganization Apple Inc. CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.11.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.11.2 QAMarker 1.2.840.113635.100.6.27.11.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.11.1 Revocation AnyRevocationMethod domains labelRegex ^(?!.*(init|support|splunk)).* suffix ess.apple.com labelRegex ps2ls|sc5mv suffix apple.com policyName IDS rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.4.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.4.2 QAMarker 1.2.840.113635.100.6.27.4.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.4.1 Revocation AnyRevocationMethod domains labelRegex ^courier$|int-courier|homekit|^courier2$|^init$ suffix push.apple.com labelRegex ^courier$|^courier2$|^init$ suffix sandbox.push.apple.com labelRegex pass|report suffix homekit.push.apple.com policyName APN rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.5.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.5.2 QAMarker 1.2.840.113635.100.6.27.5.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.5.1 Revocation AnyRevocationMethod transparentConnection domains labelRegex ^humb$|^humb-int$|^humb-stg$ suffix apple.com policyName BAA rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkerOid 1.2.840.113635.100.6.27.18 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.18 Revocation AnyRevocationMethod transparentConnection domains labelRegex ^gdmf(-auth|-auth-stg)?$|-pallas-|^gdmf-staging-int$ suffix apple.com policyName Pallas rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkerOid 1.2.840.113635.100.6.27.16 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.16 Revocation AnyRevocationMethod domains labelRegex ^ingest$ suffix apple-studies.com labelRegex ^ingest$ suffix stg.apple-studies.com labelRegex .* suffix teams.apple-studies.com labelRegex ^ingest$ suffix ais-test.apple-studies.com labelRegex ^ingest$ suffix stg.ais-test.apple-studies.com labelRegex ^ingest$ suffix apple-programs.com labelRegex ^ingest$ suffix stg.apple-programs.com labelRegex .* suffix teams.apple-programs.com labelRegex ^ingest$ suffix ais-test.apple-programs.com labelRegex ^ingest$ suffix stg.ais-test.apple-programs.com labelRegex ^ingest$ suffix main.teststudies.apple.com labelRegex ^ingest$ suffix qa.teststudies.apple.com labelRegex ^ingest$ suffix release.teststudies.apple.com labelRegex ^ingest$ suffix carry.studies.apple.com labelRegex ^ingest$ suffix validation.studies.apple.com labelRegex ^ingest$ suffix research.studies.apple.com policyName AppleStudies rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkerOid 1.2.840.113635.100.6.27.23 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.23 Revocation AnyRevocationMethod domains labelRegex ^p[0-9]{0,3}-escrowproxy|^escrowproxy suffix icloud.com labelRegex ^p[0-9]{0,3}-escrowproxy|^escrowproxy suffix icloud.com.cn policyName Escrow rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.7.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.7.2 QAMarker 1.2.840.113635.100.6.27.7.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.7.1 Revocation AnyRevocationMethod AnchorSHA256 Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= 16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ= F5OSegYUVJeJrc4vjzT38LZtDzrjo7hNIewV27pPrcc= 55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= ChainLength 3 CheckIntermediateCountry US CheckIntermediateOrganization Apple Inc. CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.7.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.7.2 QAMarker 1.2.840.113635.100.6.27.7.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.7.1 Revocation AnyRevocationMethod domains labelRegex ^iphonesubmissions suffix corp.apple.com labelRegex ^iphonesubmissions$ suffix apple.com policyName D&U rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.17.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.17.2 QAMarker 1.2.840.113635.100.6.27.17.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.17 .1 Revocation AnyRevocationMethod AnchorSHA256 Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= 16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ= F5OSegYUVJeJrc4vjzT38LZtDzrjo7hNIewV27pPrcc= 55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= ChainLength 3 CheckIntermediateCountry US CheckIntermediateOrganization Apple Inc. CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.17.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.17.2 QAMarker 1.2.840.113635.100.6.27.17.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.17.1 Revocation AnyRevocationMethod domains labelRegex ^p[0-9]{0,3}-setup$|^p[0-9]{0,3}-setup-|^setup suffix icloud.com labelRegex ^p[0-9]{0,3}-setup$|^p[0-9]{0,3}-setup-|^setup suffix icloud.com.cn policyName iCloudSetup rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.15.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.15.2 QAMarker 1.2.840.113635.100.6.27.15.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.15.1 Revocation AnyRevocationMethod AnchorSHA256 Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= 16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ= F5OSegYUVJeJrc4vjzT38LZtDzrjo7hNIewV27pPrcc= 55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= ChainLength 3 CheckIntermediateCountry US CheckIntermediateOrganization Apple Inc. CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.15.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.15.2 QAMarker 1.2.840.113635.100.6.27.15.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.15.1 Revocation AnyRevocationMethod domains labelRegex ^provider- suffix health.apple.com policyName HealthProvider rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkerOid 1.2.840.113635.100.6.27.19 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.19 Revocation AnyRevocationMethod domains labelRegex ^playgrounds-cdn$|^playgrounds-assets-cdn$ suffix apple.com policyName Playgrounds rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkerOid 1.2.840.113635.100.6.27.26 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.26 Revocation AnyRevocationMethod domains labelRegex ^aidc$|^aidc-uat$|^aidc-nwk$|^aidc-nc$ suffix apple.com policyName AIDC rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkerOid 1.2.840.113635.100.6.27.25 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.25 Revocation AnyRevocationMethod domains labelRegex ^idmsa$|^idmsa-.+-s$ suffix apple.com policyName IdMS rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.24.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.24.2 QAMarker 1.2.840.113635.100.6.27.24.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.24.1 Revocation AnyRevocationMethod AnchorSHA256 Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= 16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ= F5OSegYUVJeJrc4vjzT38LZtDzrjo7hNIewV27pPrcc= 55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= ChainLength 3 CheckIntermediateCountry US CheckIntermediateOrganization Apple Inc. CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.24.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.24.2 QAMarker 1.2.840.113635.100.6.27.24.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.24.1 Revocation AnyRevocationMethod domains labelRegex ^sylvan$ suffix apple.com policyName Aerials rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkerOid 1.2.840.113635.100.6.27.27 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.27 Revocation AnyRevocationMethod domains labelRegex ^meridian-test$|^meridian$ suffix cdn-apple.com policyName S911 rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkerOid 1.2.840.113635.100.6.27.30 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.30 Revocation AnyRevocationMethod domains labelRegex ^clientflow$ suffix apple.com policyName SiriClientFlow rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkerOid 1.2.840.113635.100.6.27.31 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.31 Revocation AnyRevocationMethod domains labelRegex fmipalservice$|^p[0-9]{0,3}-fmip$|^fmip$|^cadmium$|^p[0-9]{0,3}-fmipmobile$|^fmipmobile$ suffix icloud.com labelRegex ^p[0-9]{0,3}-fmip$|^fmip$|^cadmium$ suffix icloud.com.cn policyName FMiP rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.6.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.6.2 QAMarker 1.2.840.113635.100.6.27.6.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.6.1 Revocation AnyRevocationMethod transparentConnection domains labelRegex ^tbsc$ suffix apple.com policyName Activation rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.32 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.32 QAMarker 1.2.840.113635.100.6.27.32 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.32 Revocation AnyRevocationMethod domains labelRegex ^xp$|^www$|^itunes$|^apps$|^payments$ suffix apple.com labelRegex ^appsto$ suffix re labelRegex ^api$|^amp-api$ suffix books.apple.com labelRegex .* suffix phobos.apple.com labelRegex .* suffix mzstatic.com labelRegex .* suffix itunes.com labelRegex ^api|^amp-api|^amp-account suffix apps.apple.com labelRegex ^api$|^amp-api(?!-carry) suffix music.apple.com labelRegex ^amp-api$ suffix videos.apple.com labelRegex ^amp-api$ suffix podcasts.apple.com labelRegex ^amp-api$ suffix fitness.apple.com labelRegex ^api$|^amp-api$ suffix shazam.apple.com labelRegex ^amp-api$ suffix media.apple.com labelRegex ^amp-api$ suffix sandbox.apple.com labelRegex ^sf-api-token-service$ suffix itunes.apple.com policyName AMP rules SubjectOrganization Apple Inc. CertificatePolicy 2.23.140.1.1 AnchorSHA256 dDHl9MPBzkaQd08LYeBUQIg7qaAe0Aumq9eAbtOxGM8= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.50.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.50.2 QAMarker 1.2.840.113635.100.6.27.50.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.50.1 Revocation AnyRevocationMethod AnchorSHA256 Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= dDHl9MPBzkaQd08LYeBUQIg7qaAe0Aumq9eAbtOxGM8= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= 16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ= F5OSegYUVJeJrc4vjzT38LZtDzrjo7hNIewV27pPrcc= 55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= ChainLength 3 CheckIntermediateCountry US CheckIntermediateOrganization Apple Inc. CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.50.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.50.2 QAMarker 1.2.840.113635.100.6.27.50.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.50.1 Revocation AnyRevocationMethod domains labelRegex ^guzzoni$|^dejavu$|^sequoia$|^swallow$ suffix apple.com labelRegex ^carry$|^seed$|^(carry|seed)-(dejavu|sequoia|swallow)$ suffix siri.apple.com policyName Siri rules SubjectOrganization Apple Inc. CertificatePolicy 2.23.140.1.1 AnchorSHA256 dDHl9MPBzkaQd08LYeBUQIg7qaAe0Aumq9eAbtOxGM8= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.51.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.51.2 QAMarker 1.2.840.113635.100.6.27.51.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.51.1 Revocation AnyRevocationMethod AnchorSHA256 Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= dDHl9MPBzkaQd08LYeBUQIg7qaAe0Aumq9eAbtOxGM8= 16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ= F5OSegYUVJeJrc4vjzT38LZtDzrjo7hNIewV27pPrcc= 55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= ChainLength 3 CheckIntermediateCountry US CheckIntermediateOrganization Apple Inc. CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.51.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.51.2 QAMarker 1.2.840.113635.100.6.27.51.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.51.1 Revocation AnyRevocationMethod domains labelRegex ^fides$|^fides-(staging|carry)$ suffix siri.apple.com policyName dodML rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.34 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.34 QAMarker 1.2.840.113635.100.6.27.34 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.34 Revocation AnyRevocationMethod domains labelRegex ^configuration$ suffix apple.com policyName Configuration rules SubjectOrganization Apple Inc. CertificatePolicy 2.23.140.1.1 AnchorSHA256 dDHl9MPBzkaQd08LYeBUQIg7qaAe0Aumq9eAbtOxGM8= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.70.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.70.2 QAMarker 1.2.840.113635.100.6.27.70.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.70.1 Revocation AnyRevocationMethod AnchorSHA256 Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= dDHl9MPBzkaQd08LYeBUQIg7qaAe0Aumq9eAbtOxGM8= 16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ= F5OSegYUVJeJrc4vjzT38LZtDzrjo7hNIewV27pPrcc= 55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= ChainLength 3 CheckIntermediateCountry US CheckIntermediateOrganization Apple Inc. CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.70.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.70.2 QAMarker 1.2.840.113635.100.6.27.70.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.70.1 Revocation AnyRevocationMethod transparentConnection domains labelRegex ^updates$ suffix cdn-apple.com policyName Updates rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.40.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.40.2 QAMarker 1.2.840.113635.100.6.27.40.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.40.1 Revocation AnyRevocationMethod AnchorSHA256 Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= 16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ= F5OSegYUVJeJrc4vjzT38LZtDzrjo7hNIewV27pPrcc= 55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= ChainLength 3 CheckIntermediateCountry US CheckIntermediateOrganization Apple Inc. CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.40.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.40.2 QAMarker 1.2.840.113635.100.6.27.40.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.40.1 Revocation AnyRevocationMethod domains labelRegex ^iprofiles$ suffix apple.com policyName Profiles rules SubjectOrganization Apple Inc. CertificatePolicy 2.23.140.1.1 AnchorSHA256 dDHl9MPBzkaQd08LYeBUQIg7qaAe0Aumq9eAbtOxGM8= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.71.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.71.2 QAMarker 1.2.840.113635.100.6.27.71.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.71.1 Revocation AnyRevocationMethod AnchorSHA256 Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= dDHl9MPBzkaQd08LYeBUQIg7qaAe0Aumq9eAbtOxGM8= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= 16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ= F5OSegYUVJeJrc4vjzT38LZtDzrjo7hNIewV27pPrcc= 55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= ChainLength 3 CheckIntermediateCountry US CheckIntermediateOrganization Apple Inc. CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.71.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.71.2 QAMarker 1.2.840.113635.100.6.27.71.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.71.1 Revocation AnyRevocationMethod domains labelRegex ^axm-adm-mdm$|^axm-adm-scep$|^axm-adm-enroll$ suffix apple.com policyName Olympus rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.39 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.39 QAMarker 1.2.840.113635.100.6.27.39 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.39 Revocation AnyRevocationMethod domains labelRegex ^api-sk$ suffix shazam.com policyName ShazamKit rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.52 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.52 QAMarker 1.2.840.113635.100.6.27.52 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.52 Revocation AnyRevocationMethod domains labelRegex ^ipcdn$|^ipcdn-uat$ suffix apple.com policyName InstructionalContent rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.54 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.54 QAMarker 1.2.840.113635.100.6.27.54 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.54 Revocation AnyRevocationMethod domains labelRegex ^covid19-static$ suffix cdn-apple.com policyName HealthR&D rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.41.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.41.2 QAMarker 1.2.840.113635.100.6.27.41.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.41.1 Revocation AnyRevocationMethod AnchorSHA256 Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= 16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ= F5OSegYUVJeJrc4vjzT38LZtDzrjo7hNIewV27pPrcc= 55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= ChainLength 3 CheckIntermediateCountry US CheckIntermediateOrganization Apple Inc. CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.41.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.41.2 QAMarker 1.2.840.113635.100.6.27.41.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.41.1 Revocation AnyRevocationMethod domains labelRegex ^identity$ suffix apple.com policyName PushCertPortal rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.42.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.42.2 QAMarker 1.2.840.113635.100.6.27.42.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.42.1 Revocation AnyRevocationMethod AnchorSHA256 Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= 16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ= F5OSegYUVJeJrc4vjzT38LZtDzrjo7hNIewV27pPrcc= 55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= ChainLength 3 CheckIntermediateCountry US CheckIntermediateOrganization Apple Inc. CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.42.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.42.2 QAMarker 1.2.840.113635.100.6.27.42.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.42.1 Revocation AnyRevocationMethod domains labelRegex ^pba$|^pba0$|^ma-pba-prod$|^pr-pba-prod$|^msc-pba-prod$ suffix apple.com labelRegex ^pba0-test$ suffix corp.apple.com labelRegex ^idem-pba-test$ suffix rno.apple.com policyName PBA rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.55 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.55 QAMarker 1.2.840.113635.100.6.27.55 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.55 Revocation AnyRevocationMethod domains labelRegex ^csig(-pv(-cert)?|-st|-mr|-cert)?$ suffix apple.com labelRegex ^(cn-|)(crt-smp-device|smp-device|smp-device-content|smp-paymentservices|apple-pay-gateway)$ suffix apple.com labelRegex ^(sh-|tj-|nc-|pr-|cn-crt-|stg-|crt-)?pod[0-9]{0,3}-smp-device(-dr)?$ suffix apple.com labelRegex ^odin-signals$ suffix apple.com labelRegex ^fpservices-(cert|prod).*$ suffix apple.com labelRegex ^wallet$ suffix apple.com labelRegex ^(smp|nc-stg-smp|nc-crt.*|nc-pod.*|pr-pod.*)-device-asset-ccs$ suffix apple.com labelRegex ^cstat$ suffix apple.com labelRegex ^cstat$ suffix cdn-apple.com labelRegex ^aacservices-(us|eu|jp)$ suffix apple.com policyName ApplePay rules SubjectOrganization Apple Inc. CertificatePolicy 2.23.140.1.1 AnchorSHA256 dDHl9MPBzkaQd08LYeBUQIg7qaAe0Aumq9eAbtOxGM8= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.72.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.72.2 QAMarker 1.2.840.113635.100.6.27.72.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.72.1 Revocation AnyRevocationMethod AnchorSHA256 Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= dDHl9MPBzkaQd08LYeBUQIg7qaAe0Aumq9eAbtOxGM8= 16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ= F5OSegYUVJeJrc4vjzT38LZtDzrjo7hNIewV27pPrcc= 55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= ChainLength 3 CheckIntermediateCountry US CheckIntermediateOrganization Apple Inc. CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.72.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.72.2 QAMarker 1.2.840.113635.100.6.27.72.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.72.1 Revocation AnyRevocationMethod AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.57 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.57 QAMarker 1.2.840.113635.100.6.27.57 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.57 Revocation AnyRevocationMethod domains labelRegex ^cl[1-5](-cn)?$ suffix apple.com policyName CoreLocationTiles rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.56 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.56 QAMarker 1.2.840.113635.100.6.27.56 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.56 Revocation AnyRevocationMethod domains labelRegex ^axm-app$ suffix apple.com policyName AppleBusinessEssentials rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.58 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.58 QAMarker 1.2.840.113635.100.6.27.58 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.58 Revocation AnyRevocationMethod domains labelRegex ^gil$ suffix apple.com policyName SocialFramework rules SubjectOrganization Apple Inc. CertificatePolicy 2.23.140.1.1 AnchorSHA256 dDHl9MPBzkaQd08LYeBUQIg7qaAe0Aumq9eAbtOxGM8= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.73.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.73.2 QAMarker 1.2.840.113635.100.6.27.73.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.73.1 Revocation AnyRevocationMethod AnchorSHA256 Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= dDHl9MPBzkaQd08LYeBUQIg7qaAe0Aumq9eAbtOxGM8= 16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ= F5OSegYUVJeJrc4vjzT38LZtDzrjo7hNIewV27pPrcc= 55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= ChainLength 3 CheckIntermediateCountry US CheckIntermediateOrganization Apple Inc. CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.73.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.73.2 QAMarker 1.2.840.113635.100.6.27.73.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.73.1 Revocation AnyRevocationMethod domains labelRegex ^music-colistening$ suffix itunes.apple.com policyName Potluck rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.61 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.61 QAMarker 1.2.840.113635.100.6.27.61 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.61 Revocation AnyRevocationMethod domains labelRegex ^biome-mapreduce$ suffix apple.com policyName BiomeMapReduce rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.62 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.62 QAMarker 1.2.840.113635.100.6.27.62 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.62 Revocation AnyRevocationMethod domains labelRegex ^.*acsegateway$ suffix icloud.com policyName CloudSubscriptionFeatures rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.60 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.60 QAMarker 1.2.840.113635.100.6.27.60 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.60 Revocation AnyRevocationMethod domains labelRegex ^pos-device(-cert)?(-qa[0-9]{0,2})?$ suffix apple.com policyName PaymentCardReader rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.63 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.63 QAMarker 1.2.840.113635.100.6.27.63 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.63 Revocation AnyRevocationMethod transparentConnection domains labelRegex ^gs(ra|ra-stg|ra-uat)?$ suffix apple.com policyName Personalization rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkerOid 1.2.840.113635.100.6.27.20 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.20 Revocation AnyRevocationMethod domains labelRegex ^kit(-cdn)?$ suffix shazam.com policyName Shazam rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.43.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.43.2 QAMarker 1.2.840.113635.100.6.27.43.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.43.1 Revocation AnyRevocationMethod AnchorSHA256 Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= 16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ= F5OSegYUVJeJrc4vjzT38LZtDzrjo7hNIewV27pPrcc= 55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= ChainLength 3 CheckIntermediateCountry US CheckIntermediateOrganization Apple Inc. CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.43.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.43.2 QAMarker 1.2.840.113635.100.6.27.43.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.43.1 Revocation AnyRevocationMethod domains labelRegex ^cabana-(config|server)?$ suffix cdn-apple.com policyName Cabana rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.64 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.64 QAMarker 1.2.840.113635.100.6.27.64 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.64 Revocation AnyRevocationMethod domains labelRegex ^ontology.*$ suffix health.apple.com policyName Ontology rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.65 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.65 QAMarker 1.2.840.113635.100.6.27.65 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.65 Revocation AnyRevocationMethod domains labelRegex ^(staging-)?weather-data$ suffix apple.com policyName WeatherKit rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.46.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.46.2 QAMarker 1.2.840.113635.100.6.27.46.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.46.1 Revocation AnyRevocationMethod AnchorSHA256 Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= 16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ= F5OSegYUVJeJrc4vjzT38LZtDzrjo7hNIewV27pPrcc= 55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= ChainLength 3 CheckIntermediateCountry US CheckIntermediateOrganization Apple Inc. CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.46.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.46.2 QAMarker 1.2.840.113635.100.6.27.46.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.46.1 Revocation AnyRevocationMethod domains labelRegex ^swscan$|^swcdn$|^swdist$|^swdownload$ suffix apple.com labelRegex ^validation$ suffix isu.apple.com policyName MacSoftwareUpdate rules SubjectOrganization Apple Inc. CertificatePolicy 2.23.140.1.1 AnchorSHA256 dDHl9MPBzkaQd08LYeBUQIg7qaAe0Aumq9eAbtOxGM8= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.74.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.74.2 QAMarker 1.2.840.113635.100.6.27.74.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.74.1 Revocation AnyRevocationMethod AnchorSHA256 Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= dDHl9MPBzkaQd08LYeBUQIg7qaAe0Aumq9eAbtOxGM8= 16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ= F5OSegYUVJeJrc4vjzT38LZtDzrjo7hNIewV27pPrcc= 55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= ChainLength 3 CheckIntermediateCountry US CheckIntermediateOrganization Apple Inc. CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.74.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.74.2 QAMarker 1.2.840.113635.100.6.27.74.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.74.1 Revocation AnyRevocationMethod domains labelRegex ^gsa(s)?$ suffix apple.com policyName GS rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkerOid 1.2.840.113635.100.6.27.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.2 Revocation AnyRevocationMethod domains labelRegex ^wps$|^(apse|euc|use|usw)[1-9]-wps-prod$ suffix apple.com labelRegex ^remote-list-api-dev$ suffix corp.apple.com policyName WPS rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.66 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.66 QAMarker 1.2.840.113635.100.6.27.66 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.66 Revocation AnyRevocationMethod domains labelRegex ^idv-cert[0-9]$ suffix apay.apple.com labelRegex ^idv-prod[0-9]$ suffix apple.com policyName PresentID rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkerOid 1.2.840.113635.100.6.27.67 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.67 Revocation AnyRevocationMethod domains labelRegex ^profile$ suffix gc.apple.com policyName GameCenter rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkerOid 1.2.840.113635.100.6.27.68 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.68 Revocation AnyRevocationMethod domains labelRegex ^selfcert$|^auth-assistant$|^mficertificationhub$|^mficarplaycertificationportal$|^flipper$|^speechtest2$|^toolsupdater$ suffix apple.com policyName MFi rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.45.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.45.2 QAMarker 1.2.840.113635.100.6.27.45.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.45.1 Revocation AnyRevocationMethod AnchorSHA256 Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= dDHl9MPBzkaQd08LYeBUQIg7qaAe0Aumq9eAbtOxGM8= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= 16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ= F5OSegYUVJeJrc4vjzT38LZtDzrjo7hNIewV27pPrcc= 55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= ChainLength 3 CheckIntermediateCountry US CheckIntermediateOrganization Apple Inc. CheckLeafMarkersProdAndQA ProdMarker 1.2.840.113635.100.6.27.45.2 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.45.2 QAMarker 1.2.840.113635.100.6.27.45.1 1.2.840.113635.100.6.48.1 1.2.840.113635.100.6.27.45.1 Revocation AnyRevocationMethod domains labelRegex ^api$ suffix smoot.apple.com comment rdar://123562819 labelRegex ^api$ suffix smoot.apple.cn comment rdar://123562819 labelRegex ^konut-(cdn|server)(-cert)?$ suffix apple.com comment rdar://126945522 labelRegex ^(vs-tps-(device|reporting)(-stage|-cert)?|.*-wpc-device)$ suffix apple.com comment rdar://125757243 labelRegex ^concernreports$ suffix apple.com comment rdar://134887785 labelRegex ^basejumper$ suffix apple.com comment rdar://141291335 labelRegex ^keystone-logger$ suffix apple.com comment rdar://143724101 labelRegex ^tula(-aws-(usw2|use1|euw1|apse1))?$ suffix apple.com comment rdar://143067607 labelRegex ^concernreports-qa$ suffix g.apple.com comment rdar://142501579 labelRegex ^warden$ suffix net.apple.com comment rdar://150474871 labelRegex ^testflight$ suffix apple.com comment rdar://150801742 labelRegex ^demounit$ suffix apple.com comment rdar://125777372 labelRegex ^apple$ suffix channel.support comment rdar://125777372 labelRegex .* suffix ext.pos.apple.com comment rdar://155799260 labelRegex ^re-perf-gateway$ suffix retail.ist.apple.com comment rdar://147442412 labelRegex ^re-perf-edge-hz1$ suffix awusw2.sbz.apple.com comment rdar://147442412 labelRegex ^re-perf-edge-hz1$ suffix awuse1.sbz.apple.com comment rdar://147442412 labelRegex ^xcode-cdn$ suffix apple.com comment rdar://164319789 labelRegex ^sse-ws$|^sa-fcd-ause1$|^sa-fcd-ausw2$|^sa-fcd-aeuw1$|^sa-fcd-aapse1$ suffix apple.com comment rdar://167864899 labelRegex ^demoloop-api$|^demoloop-api-stg$|^ncs$ suffix dcota.apple.com comment rdar://169626786 policyName AppleIssued rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkerOid 1.2.840.113635.100.6.86 1.2.840.113635.100.6.87 Revocation AnyRevocationMethod AnchorSHA256 Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= dDHl9MPBzkaQd08LYeBUQIg7qaAe0Aumq9eAbtOxGM8= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= 16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ= F5OSegYUVJeJrc4vjzT38LZtDzrjo7hNIewV27pPrcc= 55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= ChainLength 3 CheckIntermediateCountry US CheckIntermediateOrganization Apple Inc. CheckLeafMarkerOid 1.2.840.113635.100.6.86 1.2.840.113635.100.6.87 Revocation AnyRevocationMethod transparentConnection domains labelRegex ^mesu$ suffix apple.com comment rdar://143592041 policyName AppleIssuedTransparent rules AnchorApple ChainLength 3 CheckIntermediateMarkerOid 1.2.840.113635.100.6.2.12 CheckLeafMarkerOid 1.2.840.113635.100.6.86 1.2.840.113635.100.6.87 Revocation AnyRevocationMethod AnchorSHA256 Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA= dDHl9MPBzkaQd08LYeBUQIg7qaAe0Aumq9eAbtOxGM8= yzzLt2Ax5eATj43TmiP53kf/w15DwRRM6ifUalqxy18= 16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ= F5OSegYUVJeJrc4vjzT38LZtDzrjo7hNIewV27pPrcc= 55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I= e7ZHpirurIi/JXqlItAf/qOV4KtFxz+T9lZU7DjyWgY= yQ8m8PsbQBiyIidRm1yitT4spbO+XPGO/hvvRzgMU4M= ChainLength 3 CheckIntermediateCountry US CheckIntermediateOrganization Apple Inc. CheckLeafMarkerOid 1.2.840.113635.100.6.86 1.2.840.113635.100.6.87 Revocation AnyRevocationMethod