diversity.comcast.com
Issued by R3
About this certificate
This digital certificate with serial number 03:a7:87:cd:d0:6f:b3:0c:57:14:d7:91:c7:90:00:2c:35:ab was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=diversity.comcast.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:a7:87:cd:d0:6f:b3:0c:57:14:d7:91:c7:90:00:2c:35:abSerial Number (int): 318344527498955362954490118757496486901163
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a6:d8:ea:c0:3b:1c:c4:c4:ad:5d:13:b2:c5:10:03:3a:92:36:1b:ba
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): a2:af:3b:af:d1:90:2f:62:b0:a1:4f:55:9b:01:c7:26:8e:73:5f:7d
Fingerprint (sha256): 00:f8:76:cc:67:31:56:14:70:5f:98:8b:af:74:1c:3b:bf:43:87:c2:67:2f:37:8b:53:38:70:ac:ac:36:ea:a1
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate diversity.comcast.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for diversity.comcast.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
diversity.comcast.com
Other certificates including the domain name comcast.com
(limited to 100 certificates)
cronaas.stage.rules.comcast.com
xfwaaa.partners.sys.comcast.net
remote.comcast.com
ss-payment-ctnt-qa.np.digital.business.comcast.com
apsportal.cable.comcast.com
portal.sandbox.rules.comcast.com
*.jns2.gumby.comcast.com
elasticsearchpoc.xfinitysats.com
p2-elearning.comcast.com
www.salesspace.comcast.com
observability-poc-content-pqa.np.digital.business.comcast.com
ss-help-shared-content-stg-va.np.digital.business.comcast.com
utrccesxvdi01.cable.comcast.com
lift.comcast.com
tintaiih.comcast.net
ncovrec-ho-1p.cable.comcast.com
key-retail.cable.comcast.com
waf-setup-poc-stg-va.np.digital.business.comcast.com
compass.static.np.digital.business.comcast.com
partner.comcast.com
nds.cable.comcast.com
www.xfinity.comcast.net
ncovlb-as-1p.cable.comcast.com
otto.snp.comcast.com
promotion.stg.ss.np.api-business.comcast.com
penguin.dev.ibis.comcast.com
secure08.lithium.com
ss-cpni-content-prod-va.digital.business.comcast.com
5753952654065664-fe1.pantheonsite.io
vault-po.autobahn.comcast.com
activation4.comcast.com
sonarqube.comcast.com
audit.staging.vault.comcast.com
ss-help-article-ui-qa.np.digital.business.comcast.com
gavinv11ris02.cable.comcast.com
diversity.comcast.com
servicestab.dh.comcast.com
ss-order-summary-ui-dev.np.digital.business.comcast.com
*.jns-test.gumby.comcast.com
jobs-stg.comcast.com
ncovrec-as-8p.cable.comcast.com
ss-billing-ui-int.np.digital.business.comcast.com
cbhdb2-ch2-1p.cable.comcast.com
ss-user-directory-cntnt-pqa.np.digital.business.comcast.com
streamhvbr-ch2-e01p.sys.comcast.net
ama-gpt-api-comcastnow-stg.comcast.com
cafeapp-wc-a3p.cable.comcast.com
cdxocproc-il-1p.cable.comcast.com
secure09.lithium.com
ncovrec-as-9p.cable.comcast.com
res-api.svc-dev.thor.comcast.com
pawchscmspweb01.cable.comcast.com
*.business.comcast.com
ieapply-stg.internetessentials.com
pawayvapmbpmp02.cable.comcast.com
ss-payment-ctnt-pqa.np.digital.business.comcast.com
ss-voice-security-cntnt-dev.np.digital.business.comcast.com
qa.g.gears.comcast.com
edge.myriad-lite.top.comcast.net
copdcvnx01-cs1.cable.comcast.com
njswl-c031207.cable.comcast.com
password-reset-bff.qa.np.api-business.comcast.com
ieapi.internetessentials.com
ss-help-home-ui-qa.np.digital.business.comcast.com
api-staging.xfinitymfa.com
ss-billing-ui-int.np.digital.business.comcast.com
api-prod.salesx.business.comcast.com
wifilogin-st.xfinity.com
advomswebdev.comcast.com
*.np.salesx.comcast.com
secure08.lithium.com
design.comcast.com
aquaweb-wc-7p.cable.comcast.com
gisstrm-po-c7p.cable.comcast.com
ucm.cable.comcast.com
observability-poc-content-qa.np.digital.business.comcast.com
ss-help-search-micro-ui-qa.np.digital.business.comcast.com
sample-ui-01-test.digital.business.comcast.com
bsd-global-nav-content-int.np.digital.business.comcast.com
umd-cablehelp.comcast.com
ss-help-topic-ui-pqa.np.digital.business.comcast.com
cwa.comcast.com
amagcweb-as-1p.cable.comcast.com
integration-contingent.comcast.com
customer-hub-content-prod-va.digital.business.comcast.com
secure05.stage.lithium.com
rocketfuel-ui-assets-qa.np.digital.business.comcast.com
voice-security-content-prod.digital.business.comcast.com
user-invite-service.internal.int.np.api-business.comcast.com
ncovem-ho-2p.cable.comcast.com
bomui.g.cable.comcast.com
nde-portal.cb-es.comcast.com
testvot.cable.comcast.com
cenacew04-il-1p.cable.comcast.com
site-terms-ui-prod-va.digital.business.comcast.com
telesales-registration-ui-qa.np.digital.business.comcast.com
gavinv11rec06.cable.comcast.com
aquaweb-po-8p.cable.comcast.com
digitalnow.comcast.com
activecore.web.np.digital.business.comcast.com
xfwaaa.partners.sys.comcast.net
remote.comcast.com
ss-payment-ctnt-qa.np.digital.business.comcast.com
apsportal.cable.comcast.com
portal.sandbox.rules.comcast.com
*.jns2.gumby.comcast.com
elasticsearchpoc.xfinitysats.com
p2-elearning.comcast.com
www.salesspace.comcast.com
observability-poc-content-pqa.np.digital.business.comcast.com
ss-help-shared-content-stg-va.np.digital.business.comcast.com
utrccesxvdi01.cable.comcast.com
lift.comcast.com
tintaiih.comcast.net
ncovrec-ho-1p.cable.comcast.com
key-retail.cable.comcast.com
waf-setup-poc-stg-va.np.digital.business.comcast.com
compass.static.np.digital.business.comcast.com
partner.comcast.com
nds.cable.comcast.com
www.xfinity.comcast.net
ncovlb-as-1p.cable.comcast.com
otto.snp.comcast.com
promotion.stg.ss.np.api-business.comcast.com
penguin.dev.ibis.comcast.com
secure08.lithium.com
ss-cpni-content-prod-va.digital.business.comcast.com
5753952654065664-fe1.pantheonsite.io
vault-po.autobahn.comcast.com
activation4.comcast.com
sonarqube.comcast.com
audit.staging.vault.comcast.com
ss-help-article-ui-qa.np.digital.business.comcast.com
gavinv11ris02.cable.comcast.com
diversity.comcast.com
servicestab.dh.comcast.com
ss-order-summary-ui-dev.np.digital.business.comcast.com
*.jns-test.gumby.comcast.com
jobs-stg.comcast.com
ncovrec-as-8p.cable.comcast.com
ss-billing-ui-int.np.digital.business.comcast.com
cbhdb2-ch2-1p.cable.comcast.com
ss-user-directory-cntnt-pqa.np.digital.business.comcast.com
streamhvbr-ch2-e01p.sys.comcast.net
ama-gpt-api-comcastnow-stg.comcast.com
cafeapp-wc-a3p.cable.comcast.com
cdxocproc-il-1p.cable.comcast.com
secure09.lithium.com
ncovrec-as-9p.cable.comcast.com
res-api.svc-dev.thor.comcast.com
pawchscmspweb01.cable.comcast.com
*.business.comcast.com
ieapply-stg.internetessentials.com
pawayvapmbpmp02.cable.comcast.com
ss-payment-ctnt-pqa.np.digital.business.comcast.com
ss-voice-security-cntnt-dev.np.digital.business.comcast.com
qa.g.gears.comcast.com
edge.myriad-lite.top.comcast.net
copdcvnx01-cs1.cable.comcast.com
njswl-c031207.cable.comcast.com
password-reset-bff.qa.np.api-business.comcast.com
ieapi.internetessentials.com
ss-help-home-ui-qa.np.digital.business.comcast.com
api-staging.xfinitymfa.com
ss-billing-ui-int.np.digital.business.comcast.com
api-prod.salesx.business.comcast.com
wifilogin-st.xfinity.com
advomswebdev.comcast.com
*.np.salesx.comcast.com
secure08.lithium.com
design.comcast.com
aquaweb-wc-7p.cable.comcast.com
gisstrm-po-c7p.cable.comcast.com
ucm.cable.comcast.com
observability-poc-content-qa.np.digital.business.comcast.com
ss-help-search-micro-ui-qa.np.digital.business.comcast.com
sample-ui-01-test.digital.business.comcast.com
bsd-global-nav-content-int.np.digital.business.comcast.com
umd-cablehelp.comcast.com
ss-help-topic-ui-pqa.np.digital.business.comcast.com
cwa.comcast.com
amagcweb-as-1p.cable.comcast.com
integration-contingent.comcast.com
customer-hub-content-prod-va.digital.business.comcast.com
secure05.stage.lithium.com
rocketfuel-ui-assets-qa.np.digital.business.comcast.com
voice-security-content-prod.digital.business.comcast.com
user-invite-service.internal.int.np.api-business.comcast.com
ncovem-ho-2p.cable.comcast.com
bomui.g.cable.comcast.com
nde-portal.cb-es.comcast.com
testvot.cable.comcast.com
cenacew04-il-1p.cable.comcast.com
site-terms-ui-prod-va.digital.business.comcast.com
telesales-registration-ui-qa.np.digital.business.comcast.com
gavinv11rec06.cable.comcast.com
aquaweb-po-8p.cable.comcast.com
digitalnow.comcast.com
activecore.web.np.digital.business.comcast.com
Certificate
The complete raw certificate details for diversity.comcast.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgISA6eHzdBvswxXFNeRx5AALDWrMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MDUwNTIzNDRaFw0yNDA3MDQwNTIzNDNaMCAxHjAcBgNVBAMT FWRpdmVyc2l0eS5jb21jYXN0LmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC AgoCggIBAMO9fkBg2kDo3P3LPvTK4RPxCEsXQXjKgasMIdNJeOc1y6qTLvxcq0gJ 7LBeMx52o/e2EmHJCmAL0KMd6Pqkq/7llLLHpOLSNBsta3c8EqBs0BjhdDoFRttv R0DYwxZscfhZcbRKdb2TBX5In1+mM2uT/9e6z9MjYDoGJ01CCAj6YlLS+B8pJ4fs WE3HoHbDVUfpQDut3TJHRo+DKD/7hJQBrkroVIUn3lo3V2WQmvgNqdgnYGfF/dgf MTjdCBnbcVXxo82uvSyxzn9eD58OpN9WsOKFFdxuXS7s3S3SRhYhEwFPlf3N9+Xc do4TdI6VOgPXum07fuxsJoTUo5ajJAd4DGdBoxasnuCQ7MGw0vunZtCLVcTp8Lv8 E+zTldnuBV+sKNRrWVog1UX8VfevDu1QQ1px0/63VKwEZkBsDLvd5h8fTxeh0eQv P1gkQe9RTx8viu6zJxklDXFPKBwp1zJg5OBs8s8oCItIcqePehxUyug7KxMjz/nA zoT0Zxafz8dOtn8GVsXmo0wQc3p75/7HcCfzUdk2FP3Mc+Fd5/AS0y3KprWr9/VH RvOki2Ebc61IFcT/WsJTHXE/7dKdjgiGRrProfOX/R93pfJJvFUnQwxjw+9TI3gs YYmPid8Fq6vfItAh9nLTx/qrQSXsEoRqEE96IL+rHSA+mXKm4HdFAgMBAAGjggIY MIICFDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKbY6sA7HMTErV0TssUQAzqSNhu6 MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkw RzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAC hhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCAGA1UdEQQZMBeCFWRpdmVyc2l0eS5j b21jYXN0LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIE gfYEgfMA8QB3ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjqzt a5MAAAQDAEgwRgIhAPot12ACLGew4WcuICW2hHb/BStZFiJ1Bl1dwcjtvaSLAiEA mVy5m/LXjOx2+sfNLRC0VAmJTd0LFk55YkiLUdjvmd8AdgAZmBBxCfDWUi4wgNKe P2S7g24ozPkPUo7u385KPxa0ygAAAY6s7WuZAAAEAwBHMEUCIAtSzYanT0n45jlQ Bty//hHhALo0QIsfjsKQ0z+6VQj1AiEAzNWVqetfsilb2uoi2YXccaC3BQKhcQqs jPNOJjtUh0MwDQYJKoZIhvcNAQELBQADggEBAEgVQF6K9Cz31yqRhlWveg6PBCp2 FUqifS2wBi1tnuwIEWH93MZAYhhDHjhgTvtyLh8AkI9Ayvp/xAM6IEFtdjijcItN TwSZfmC5Q9O/aQXfR2SyK+wmMv0q29gOos0Iy1l03NEfCjFowEZC0k/YRJ8o5JnW CfHOVBERj+hFP7tgc7ZG3nOuDedlvHiEhrEnXHkRVFGEPsetOC5u/zEvzg2pS4Kc sOehmvDX7ikQ2oCF0cUGg3OymPSUOMxr+OrUcfd6fc1zJEF2G9rwtZAdXnL6uQmG EelVkusSAcIKK9oHhof7WuURjYHgyVLYMfkDIEVC6EpHuCHXQEq4kQtUajk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw71+QGDaQOjc/cs+9Mrh E/EISxdBeMqBqwwh00l45zXLqpMu/FyrSAnssF4zHnaj97YSYckKYAvQox3o+qSr /uWUssek4tI0Gy1rdzwSoGzQGOF0OgVG229HQNjDFmxx+FlxtEp1vZMFfkifX6Yz a5P/17rP0yNgOgYnTUIICPpiUtL4Hyknh+xYTcegdsNVR+lAO63dMkdGj4MoP/uE lAGuSuhUhSfeWjdXZZCa+A2p2CdgZ8X92B8xON0IGdtxVfGjza69LLHOf14Pnw6k 31aw4oUV3G5dLuzdLdJGFiETAU+V/c335dx2jhN0jpU6A9e6bTt+7GwmhNSjlqMk B3gMZ0GjFqye4JDswbDS+6dm0ItVxOnwu/wT7NOV2e4FX6wo1GtZWiDVRfxV968O 7VBDWnHT/rdUrARmQGwMu93mHx9PF6HR5C8/WCRB71FPHy+K7rMnGSUNcU8oHCnX MmDk4GzyzygIi0hyp496HFTK6DsrEyPP+cDOhPRnFp/Px062fwZWxeajTBBzenvn /sdwJ/NR2TYU/cxz4V3n8BLTLcqmtav39UdG86SLYRtzrUgVxP9awlMdcT/t0p2O CIZGs+uh85f9H3el8km8VSdDDGPD71MjeCxhiY+J3wWrq98i0CH2ctPH+qtBJewS hGoQT3ogv6sdID6Zcqbgd0UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 318344527498955362954490118757496486901163 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-05 05:23:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-04 05:23:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'diversity.comcast.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 798550377194585562132273849369515318033955892347965231280757811762647704194757742543643687742729071619129660600402829004828574334933031737567810383027788366884104383787001225609098386797578548809493822289324386591091913296466779435982867163996999015793327883405761665509247848734183040864232735878549562259980801584516986707560547961348182769348945686633221965842639451677497638527380852073910449570375275309640218656064418844921950934510513657909379906341796411346635837738231637697867923601363504516390471986763965820219931550149929054227269006602460626090486568893240235345133931752201116609943303683149897667874601223139661992089108341220458305050660097476297487438629734651894152283629962522856278768503655031061539276416023902613787399962296650043608417033124271100397815158785701258527296498927938671725055992164646432928816239438853395785736991814263386326705059480977063788905470219012083217322264552794536005199521354541211478766907054871116423311451744668810383802611050593561305235755309373956560164195534583571372088676322720455276070126450631056129656743003758035540385007935335017201260720893779016728911172277416103882090666319098004085463539046403843496510348071193046200757724897299356824504471020265159316195014469 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a6d8eac03b1cc4c4ad5d13b2c510033a92361bba . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diversity.comcast.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018eaced6b930000040300483046022100fa2dd760022c67b0e1672e2025b68476ff052b59162275065d5dc1c8edbda48b022100995cb99bf2d78cec76fac7cd2d10b45409894ddd0b164e7962488b51d8ef99df0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018eaced6b99000004030047304502200b52cd86a74f49f8e6395006dcbffe11e100ba34408b1f8ec290d33fba5508f5022100ccd595a9eb5fb2295bdaea22d985dc71a0b70502a1710aac8cf34e263b548743 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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