CertificatePinning.plist   [plain text]


<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<array>
	<integer>30</integer>
	<dict>
		<key>domains</key>
		<array>
			<dict>
				<key>labelRegex</key>
				<string>^p..-content$|^p..-content-|^p..-ckdatabase$|^p..-ckdatabase-|^p..-ckshare$|^p..-ckshare-|^p..-ckdevice$|^p..-ckdevice-|^p..-ckcoderouter$|^p..-ckcoderouter-|^gateway|^p..-keyvalueservice$|^p..-keyvalueservice-|^keyvalueservice|^p..-pairingws$|^p..-pairingws-|^pairingws</string>
				<key>suffix</key>
				<string>icloud.com</string>
			</dict>
			<dict>
				<key>labelRegex</key>
				<string>^p..-content$|^p..-content-|^p..-ckdatabase$|^p..-ckdatabase-|^p..-ckshare$|^p..-ckshare-|^p..-ckdevice$|^p..-ckdevice-|^p..-ckcoderouter$|^p..-ckcoderouter-|^gateway|^p..-keyvalueservice$|^p..-keyvalueservice-|^keyvalueservice|^p..-pairingws$|^p..-pairingws-|^pairingws</string>
				<key>suffix</key>
				<string>icloud.cn</string>
			</dict>
			<dict>
				<key>labelRegex</key>
				<string>^p..-content$|^p..-content-|^p..-ckdatabase$|^p..-ckdatabase-|^p..-ckshare$|^p..-ckshare-|^p..-ckdevice$|^p..-ckdevice-|^p..-ckcoderouter$|^p..-ckcoderouter-|^gateway|^p..-keyvalueservice$|^p..-keyvalueservice-|^keyvalueservice|^p..-pairingws$|^p..-pairingws-|^pairingws</string>
				<key>suffix</key>
				<string>icloud.com.cn</string>
			</dict>
			<dict>
				<key>labelRegex</key>
				<string>^api$</string>
				<key>suffix</key>
				<string>apple-cloudkit.com</string>
			</dict>
		</array>
		<key>policyName</key>
		<string>MMCS</string>
		<key>rules</key>
		<array>
			<dict>
				<key>AnchorApple</key>
				<dict/>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateMarkerOid</key>
				<string>1.2.840.113635.100.6.2.12</string>
				<key>CheckLeafMarkersProdAndQA</key>
				<dict>
					<key>ProdMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.11.2</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.11.2</string>
						</dict>
					</array>
					<key>QAMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.11.1</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.11.1</string>
						</dict>
					</array>
				</dict>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
			<dict>
				<key>AnchorSHA256</key>
				<data>/4VqLSUdzYjTZlb0UBJnmM+rqt5AeZxyLeTStds2pzo=</data>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateCountry</key>
				<string>US</string>
				<key>CheckIntermediateOrganization</key>
				<string>Apple Inc.</string>
				<key>CheckLeafMarkersProdAndQA</key>
				<dict>
					<key>ProdMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.11.2</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.11.2</string>
						</dict>
					</array>
					<key>QAMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.11.1</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.11.1</string>
						</dict>
					</array>
				</dict>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>domains</key>
		<array>
			<dict>
				<key>labelRegex</key>
				<string>registration|aggregator|profile|query|identity|sms|group</string>
				<key>suffix</key>
				<string>ess.apple.com</string>
			</dict>
			<dict>
				<key>labelRegex</key>
				<string>ps2ls|sc5mv</string>
				<key>suffix</key>
				<string>apple.com</string>
			</dict>
		</array>
		<key>policyName</key>
		<string>IDS</string>
		<key>rules</key>
		<array>
			<dict>
				<key>AnchorApple</key>
				<dict/>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateMarkerOid</key>
				<string>1.2.840.113635.100.6.2.12</string>
				<key>CheckLeafMarkersProdAndQA</key>
				<dict>
					<key>ProdMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.4.2</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.4.2</string>
						</dict>
					</array>
					<key>QAMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.4.1</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.4.1</string>
						</dict>
					</array>
				</dict>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>domains</key>
		<array>
			<dict>
				<key>labelRegex</key>
				<string>^courier$|int-courier|homekit|^courier2$</string>
				<key>suffix</key>
				<string>push.apple.com</string>
			</dict>
			<dict>
				<key>labelRegex</key>
				<string>^courier$|^courier2$</string>
				<key>suffix</key>
				<string>sandbox.push.apple.com</string>
			</dict>
			<dict>
				<key>labelRegex</key>
				<string>pass|report</string>
				<key>suffix</key>
				<string>homekit.push.apple.com</string>
			</dict>
		</array>
		<key>policyName</key>
		<string>APN</string>
		<key>rules</key>
		<array>
			<dict>
				<key>AnchorApple</key>
				<dict/>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateMarkerOid</key>
				<string>1.2.840.113635.100.6.2.12</string>
				<key>CheckLeafMarkersProdAndQA</key>
				<dict>
					<key>ProdMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.5.2</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.5.2</string>
						</dict>
					</array>
					<key>QAMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.5.1</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.5.1</string>
						</dict>
					</array>
				</dict>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>domains</key>
		<array>
			<dict>
				<key>labelRegex</key>
				<string>^humb$|^humb-int$|^humb-stg$</string>
				<key>suffix</key>
				<string>apple.com</string>
			</dict>
		</array>
		<key>policyName</key>
		<string>BAA</string>
		<key>rules</key>
		<array>
			<dict>
				<key>AnchorApple</key>
				<dict/>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateMarkerOid</key>
				<string>1.2.840.113635.100.6.2.12</string>
				<key>CheckLeafMarkerOid</key>
				<string>1.2.840.113635.100.6.27.18</string>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>domains</key>
		<array>
			<dict>
				<key>labelRegex</key>
				<string>^gdmf$|-pallas-|^gdmf-staging-int$</string>
				<key>suffix</key>
				<string>apple.com</string>
			</dict>
		</array>
		<key>policyName</key>
		<string>Pallas</string>
		<key>rules</key>
		<array>
			<dict>
				<key>AnchorApple</key>
				<dict/>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateMarkerOid</key>
				<string>1.2.840.113635.100.6.2.12</string>
				<key>CheckLeafMarkerOid</key>
				<string>1.2.840.113635.100.6.27.16</string>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>domains</key>
		<array>
			<dict>
				<key>labelRegex</key>
				<string>^ingest$</string>
				<key>suffix</key>
				<string>apple-studies.com</string>
			</dict>
			<dict>
				<key>labelRegex</key>
				<string>^ingest$</string>
				<key>suffix</key>
				<string>stg.apple-studies.com</string>
			</dict>
			<dict>
				<key>labelRegex</key>
				<string>.*</string>
				<key>suffix</key>
				<string>teams.apple-studies.com</string>
			</dict>
			<dict>
				<key>labelRegex</key>
				<string>^ingest$</string>
				<key>suffix</key>
				<string>ais-test.apple-studies.com</string>
			</dict>
			<dict>
				<key>labelRegex</key>
				<string>^ingest$</string>
				<key>suffix</key>
				<string>stg.ais-test.apple-studies.com</string>
			</dict>
			<dict>
				<key>labelRegex</key>
				<string>^ingest$</string>
				<key>suffix</key>
				<string>apple-programs.com</string>
			</dict>
			<dict>
				<key>labelRegex</key>
				<string>^ingest$</string>
				<key>suffix</key>
				<string>stg.apple-programs.com</string>
			</dict>
			<dict>
				<key>labelRegex</key>
				<string>.*</string>
				<key>suffix</key>
				<string>teams.apple-programs.com</string>
			</dict>
			<dict>
				<key>labelRegex</key>
				<string>^ingest$</string>
				<key>suffix</key>
				<string>ais-test.apple-programs.com</string>
			</dict>
			<dict>
				<key>labelRegex</key>
				<string>^ingest$</string>
				<key>suffix</key>
				<string>stg.ais-test.apple-programs.com</string>
			</dict>
		</array>
		<key>policyName</key>
		<string>AppleStudies</string>
		<key>rules</key>
		<array>
			<dict>
				<key>AnchorApple</key>
				<dict/>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateMarkerOid</key>
				<string>1.2.840.113635.100.6.2.12</string>
				<key>CheckLeafMarkerOid</key>
				<string>1.2.840.113635.100.6.27.23</string>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>domains</key>
		<array>
			<dict>
				<key>labelRegex</key>
				<string>^p..-escrowproxy$|^p..-escrowproxy|^escrowproxy</string>
				<key>suffix</key>
				<string>icloud.com</string>
			</dict>
		</array>
		<key>policyName</key>
		<string>Escrow</string>
		<key>rules</key>
		<array>
			<dict>
				<key>AnchorApple</key>
				<dict/>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateMarkerOid</key>
				<string>1.2.840.113635.100.6.2.12</string>
				<key>CheckLeafMarkersProdAndQA</key>
				<dict>
					<key>ProdMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.7.2</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.7.2</string>
						</dict>
					</array>
					<key>QAMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.7.1</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.7.1</string>
						</dict>
					</array>
				</dict>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
			<dict>
				<key>AnchorSHA256</key>
				<data>/4VqLSUdzYjTZlb0UBJnmM+rqt5AeZxyLeTStds2pzo=</data>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateCountry</key>
				<string>US</string>
				<key>CheckIntermediateOrganization</key>
				<string>Apple Inc.</string>
				<key>CheckLeafMarkersProdAndQA</key>
				<dict>
					<key>ProdMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.7.2</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.7.2</string>
						</dict>
					</array>
					<key>QAMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.7.1</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.7.1</string>
						</dict>
					</array>
				</dict>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>domains</key>
		<array>
			<dict>
				<key>labelRegex</key>
				<string>^iphonesubmissions</string>
				<key>suffix</key>
				<string>corp.apple.com</string>
			</dict>
			<dict>
				<key>labelRegex</key>
				<string>^iphonesubmissions$</string>
				<key>suffix</key>
				<string>apple.com</string>
			</dict>
		</array>
		<key>policyName</key>
		<string>D&amp;U</string>
		<key>rules</key>
		<array>
			<dict>
				<key>AnchorApple</key>
				<dict/>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateMarkerOid</key>
				<string>1.2.840.113635.100.6.2.12</string>
				<key>CheckLeafMarkersProdAndQA</key>
				<dict>
					<key>ProdMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.17.2</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.17.2</string>
						</dict>
					</array>
					<key>QAMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.17.1</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.17 .1</string>
						</dict>
					</array>
				</dict>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
			<dict>
				<key>AnchorSHA256</key>
				<data>/4VqLSUdzYjTZlb0UBJnmM+rqt5AeZxyLeTStds2pzo=</data>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateCountry</key>
				<string>US</string>
				<key>CheckIntermediateOrganization</key>
				<string>Apple Inc.</string>
				<key>CheckLeafMarkersProdAndQA</key>
				<dict>
					<key>ProdMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.17.2</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.17.2</string>
						</dict>
					</array>
					<key>QAMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.17.1</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.17.1</string>
						</dict>
					</array>
				</dict>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>domains</key>
		<array>
			<dict>
				<key>labelRegex</key>
				<string>^p..-setup$|^p..-setup-|^setup</string>
				<key>suffix</key>
				<string>icloud.com</string>
			</dict>
		</array>
		<key>policyName</key>
		<string>iCloudSetup</string>
		<key>rules</key>
		<array>
			<dict>
				<key>AnchorApple</key>
				<dict/>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateMarkerOid</key>
				<string>1.2.840.113635.100.6.2.12</string>
				<key>CheckLeafMarkersProdAndQA</key>
				<dict>
					<key>ProdMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.15.2</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.15.2</string>
						</dict>
					</array>
					<key>QAMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.15.1</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.15.1</string>
						</dict>
					</array>
				</dict>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
			<dict>
				<key>AnchorSHA256</key>
				<data>/4VqLSUdzYjTZlb0UBJnmM+rqt5AeZxyLeTStds2pzo=</data>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateCountry</key>
				<string>US</string>
				<key>CheckIntermediateOrganization</key>
				<string>Apple Inc.</string>
				<key>CheckLeafMarkersProdAndQA</key>
				<dict>
					<key>ProdMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.15.2</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.15.2</string>
						</dict>
					</array>
					<key>QAMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.15.1</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.15.1</string>
						</dict>
					</array>
				</dict>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>domains</key>
		<array>
			<dict>
				<key>labelRegex</key>
				<string>^provider-</string>
				<key>suffix</key>
				<string>health.apple.com</string>
			</dict>
		</array>
		<key>policyName</key>
		<string>HealthProvider</string>
		<key>rules</key>
		<array>
			<dict>
				<key>AnchorApple</key>
				<dict/>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateMarkerOid</key>
				<string>1.2.840.113635.100.6.2.12</string>
				<key>CheckLeafMarkerOid</key>
				<string>1.2.840.113635.100.6.27.19</string>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>domains</key>
		<array>
			<dict>
				<key>labelRegex</key>
				<string>^playgrounds-cdn$|^playgrounds-assets-cdn$</string>
				<key>suffix</key>
				<string>apple.com</string>
			</dict>
		</array>
		<key>policyName</key>
		<string>Playgrounds</string>
		<key>rules</key>
		<array>
			<dict>
				<key>AnchorApple</key>
				<dict/>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateMarkerOid</key>
				<string>1.2.840.113635.100.6.2.12</string>
				<key>CheckLeafMarkerOid</key>
				<string>1.2.840.113635.100.6.27.26</string>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>domains</key>
		<array>
			<dict>
				<key>labelRegex</key>
				<string>^aidc$|^aidc-uat$|^aidc-nwk$|^aidc-nc$</string>
				<key>suffix</key>
				<string>apple.com</string>
			</dict>
		</array>
		<key>policyName</key>
		<string>AIDC</string>
		<key>rules</key>
		<array>
			<dict>
				<key>AnchorApple</key>
				<dict/>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateMarkerOid</key>
				<string>1.2.840.113635.100.6.2.12</string>
				<key>CheckLeafMarkerOid</key>
				<string>1.2.840.113635.100.6.27.25</string>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>domains</key>
		<array>
			<dict>
				<key>labelRegex</key>
				<string>^idmsa$|^idmsa-.+-s$</string>
				<key>suffix</key>
				<string>apple.com</string>
			</dict>
		</array>
		<key>policyName</key>
		<string>IdMS</string>
		<key>rules</key>
		<array>
			<dict>
				<key>AnchorApple</key>
				<dict/>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateMarkerOid</key>
				<string>1.2.840.113635.100.6.2.12</string>
				<key>CheckLeafMarkersProdAndQA</key>
				<dict>
					<key>ProdMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.24.2</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.24.2</string>
						</dict>
					</array>
					<key>QAMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.24.1</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.24.1</string>
						</dict>
					</array>
				</dict>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
			<dict>
				<key>AnchorSHA256</key>
				<data>/4VqLSUdzYjTZlb0UBJnmM+rqt5AeZxyLeTStds2pzo=</data>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateCountry</key>
				<string>US</string>
				<key>CheckIntermediateOrganization</key>
				<string>Apple Inc.</string>
				<key>CheckLeafMarkersProdAndQA</key>
				<dict>
					<key>ProdMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.24.2</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.24.2</string>
						</dict>
					</array>
					<key>QAMarker</key>
					<array>
						<string>1.2.840.113635.100.6.27.24.1</string>
						<dict>
							<key>1.2.840.113635.100.6.48.1</key>
							<string>1.2.840.113635.100.6.27.24.1</string>
						</dict>
					</array>
				</dict>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>domains</key>
		<array>
			<dict>
				<key>labelRegex</key>
				<string>^sylvan$</string>
				<key>suffix</key>
				<string>apple.com</string>
			</dict>
		</array>
		<key>policyName</key>
		<string>Aerials</string>
		<key>rules</key>
		<array>
			<dict>
				<key>AnchorApple</key>
				<dict/>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateMarkerOid</key>
				<string>1.2.840.113635.100.6.2.12</string>
				<key>CheckLeafMarkerOid</key>
				<string>1.2.840.113635.100.6.27.27</string>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>domains</key>
		<array>
			<dict>
				<key>labelRegex</key>
				<string>^meridian-test$|^meridian$</string>
				<key>suffix</key>
				<string>cdn-apple.com</string>
			</dict>
		</array>
		<key>policyName</key>
		<string>S911</string>
		<key>rules</key>
		<array>
			<dict>
				<key>AnchorApple</key>
				<dict/>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateMarkerOid</key>
				<string>1.2.840.113635.100.6.2.12</string>
				<key>CheckLeafMarkerOid</key>
				<array>
					<string>1.2.840.113635.100.6.27.30</string>
					<dict>
						<key>1.2.840.113635.100.6.48.1</key>
						<string>1.2.840.113635.100.6.27.30</string>
					</dict>
				</array>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>domains</key>
		<array>
			<dict>
				<key>labelRegex</key>
				<string>^gspe35-ssl-carry$</string>
				<key>suffix</key>
				<string>ls.apple.com</string>
			</dict>
		</array>
		<key>policyName</key>
		<string>MapsTemp</string>
		<key>rules</key>
		<array>
			<dict>
				<key>AnchorApple</key>
				<dict/>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateMarkerOid</key>
				<string>1.2.840.113635.100.6.2.12</string>
				<key>CheckLeafMarkerOid</key>
				<string>1.2.840.113635.100.6.27.22.2</string>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
			<dict>
				<key>AnchorSHA256</key>
				<data>/4VqLSUdzYjTZlb0UBJnmM+rqt5AeZxyLeTStds2pzo=</data>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateCountry</key>
				<string>US</string>
				<key>CheckIntermediateOrganization</key>
				<string>Apple Inc.</string>
				<key>CheckLeafMarkerOid</key>
				<string>1.2.840.113635.100.6.27.22.2</string>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
		</array>
	</dict>
	<dict>
		<key>domains</key>
		<array>
			<dict>
				<key>labelRegex</key>
				<string>^clientflow$</string>
				<key>suffix</key>
				<string>apple.com</string>
			</dict>
		</array>
		<key>policyName</key>
		<string>SiriClientFlow</string>
		<key>rules</key>
		<array>
			<dict>
				<key>AnchorApple</key>
				<dict/>
				<key>ChainLength</key>
				<integer>3</integer>
				<key>CheckIntermediateMarkerOid</key>
				<string>1.2.840.113635.100.6.2.12</string>
				<key>CheckLeafMarkerOid</key>
				<array>
					<string>1.2.840.113635.100.6.27.31</string>
					<dict>
						<key>1.2.840.113635.100.6.48.1</key>
						<string>1.2.840.113635.100.6.27.31</string>
					</dict>
				</array>
				<key>Revocation</key>
				<string>AnyRevocationMethod</string>
			</dict>
		</array>
	</dict>
</array>
</plist>