communitystage.re.xfinity.com
Issued by R3
About this certificate
This digital certificate with serial number 04:76:4e:76:78:4d:cf:46:80:6c:bd:c5:60:3c:6c:c2:f9:a8 was issued on by Let's Encrypt.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=communitystage.re.xfinity.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:76:4e:76:78:4d:cf:46:80:6c:bd:c5:60:3c:6c:c2:f9:a8Serial Number (int): 388706757938466125403028494166920748267944
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 6b:77:7c:50:a6:98:bd:dc:5d:17:22:f6:dc:23:fb:09:24:84:61:d3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 2b:4a:b5:30:be:fe:28:5c:9d:99:2a:8d:65:a5:aa:4b:fd:07:b4:33
Fingerprint (sha256): 02:cc:e8:2d:13:ee:e7:a3:b1:a4:be:9f:6a:49:22:02:08:cc:c6:a3:fa:55:c5:ae:f7:1a:84:69:2d:1e:a9:5a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate communitystage.re.xfinity.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for communitystage.re.xfinity.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
communitystage.re.xfinity.com
Other certificates including the domain name xfinity.com
(limited to 100 certificates)
cdn-le4.arkadiumhosted.com
*.xfn-ops.xfinity.com
sit2-hop.cybersource.xfinity.com
*.identity.xfinity.com
approval.xfinity.com
payments.xfinity.com
www.xfinity.comcast.net
brand-staging.xfinity.com
imap.email.comcast.net
*.wifi-stage.connected.xfinity.com
*.iotplatform-int.eu.xfinity.com
*.xcp.xfinity.com
research.xfinity.com
wificouponmanager.xfinity.com
emailplus.xfinity.com
edge.cirrus-config.xcr.comcast.net
wifilogin-st.xfinity.com
pcat-beta.mobile.xfinity.com
*.xcp-ep-prod.xfinity.com
gamex-staging.np.gpe.xfinity.com
*.agentcoach.xfinity.com
iota-staging.xfinity.com
cms9.xfinity.com
developers.xfinity.com
communitystage.re.xfinity.com
developer.xfinity.com
pcat-alpha.mobile.xfinity.com
bill-pay-staging.maw-pci.xfinity.com
events.biggestfantour.com
api.wcdc.int.xfinity.com
stg-tech360-os-hoa-tdb-4.techtools.xfinity.com
missioncontrol.xfinity.com
research.staging.xfinity.com
movableink.xfinity.com
research.staging.xfinity.com
prod.mdu.xfinity.com
bill-pay-qa.maw-pci.xfinity.com
diagnosticapi-stage.traxion.xfinity.com
upload-qa.cvr.comcast.net
approval.xfinity.com
sit-hop.cybersource.xfinity.com
cdn-le4.arkadiumhosted.com
*.oauthlink.iot-prod.xfinity.com
bill-pay-pre-prod.maw-pci.xfinity.com
gql-dev-py.np.gpe.xfinity.com
cdn-le4.arkadiumhosted.com
stage.ipie.xfinity.com
cdn-le4.arkadiumhosted.com
nextray-preprod.traxion.xfinity.com
staging.cx.xfinity.com
gql-dev-node.np.gpe.xfinity.com
my.xfinity.com
*.spil.xfinity.com
bpm-auth.cac.xfinity.com
lab-controller.msn.comcast.net
research.staging.xfinity.com
xfinity.com
*.wifi-stage.connected.xfinity.com
internet.xfinity.com
san1.yext-cdn.com
pcat-alpha.mobile.xfinity.com
secure07.lithium.com
login-dev.comcast.net
xapi.xfinity.com
hawkeye.traxion.xfinity.com
autodiscover.comcast.net
carriers.xfinity.com
xray-stage.traxion.xfinity.com
*.xchat.xfinity.com
experience.xfinity.com
www.xfinity.com
api.dhtimeline.xfinity.com
es.xfinity.com
answers-autozone.pagescdn.com
import.xfinity.com
www.sc.xfinity.com
core.mqtt.iot-qa.eu.xfinity.com
secure07.lithium.com
client-events-gw.gpe.xfinity.com
www.xfinity.com
events.biggestfantour.com
signal-dev-vid.gslb2.xfinity.com
*.cws.xfinity.com
prod-hop.cybersource.xfinity.com
api.ch2.prd.xfinity.com
livecache-ng-prod.cvr.comcast.net
activatecablecard.xfinity.com
validation.slb.comcast.com
api.pdc.int.xfinity.com
communitytd3.re.xfinity.com
traffic-test.np.gpe.xfinity.com
livecache-stg-cvr.gslb2.xfinity.com
secure05.stage.lithium.com
*.np.sdp.xfinity.com
brand.xfinity.com
www.xfinity.comcast.net
*.oauthlink.iot-int.xfinity.com
livecache-cvr.gslb2.xfinity.com
cdn-le4.arkadiumhosted.com
*.xfn-ops.xfinity.com
sit2-hop.cybersource.xfinity.com
*.identity.xfinity.com
approval.xfinity.com
payments.xfinity.com
www.xfinity.comcast.net
brand-staging.xfinity.com
imap.email.comcast.net
*.wifi-stage.connected.xfinity.com
*.iotplatform-int.eu.xfinity.com
*.xcp.xfinity.com
research.xfinity.com
wificouponmanager.xfinity.com
emailplus.xfinity.com
edge.cirrus-config.xcr.comcast.net
wifilogin-st.xfinity.com
pcat-beta.mobile.xfinity.com
*.xcp-ep-prod.xfinity.com
gamex-staging.np.gpe.xfinity.com
*.agentcoach.xfinity.com
iota-staging.xfinity.com
cms9.xfinity.com
developers.xfinity.com
communitystage.re.xfinity.com
developer.xfinity.com
pcat-alpha.mobile.xfinity.com
bill-pay-staging.maw-pci.xfinity.com
events.biggestfantour.com
api.wcdc.int.xfinity.com
stg-tech360-os-hoa-tdb-4.techtools.xfinity.com
missioncontrol.xfinity.com
research.staging.xfinity.com
movableink.xfinity.com
research.staging.xfinity.com
prod.mdu.xfinity.com
bill-pay-qa.maw-pci.xfinity.com
diagnosticapi-stage.traxion.xfinity.com
upload-qa.cvr.comcast.net
approval.xfinity.com
sit-hop.cybersource.xfinity.com
cdn-le4.arkadiumhosted.com
*.oauthlink.iot-prod.xfinity.com
bill-pay-pre-prod.maw-pci.xfinity.com
gql-dev-py.np.gpe.xfinity.com
cdn-le4.arkadiumhosted.com
stage.ipie.xfinity.com
cdn-le4.arkadiumhosted.com
nextray-preprod.traxion.xfinity.com
staging.cx.xfinity.com
gql-dev-node.np.gpe.xfinity.com
my.xfinity.com
*.spil.xfinity.com
bpm-auth.cac.xfinity.com
lab-controller.msn.comcast.net
research.staging.xfinity.com
xfinity.com
*.wifi-stage.connected.xfinity.com
internet.xfinity.com
san1.yext-cdn.com
pcat-alpha.mobile.xfinity.com
secure07.lithium.com
login-dev.comcast.net
xapi.xfinity.com
hawkeye.traxion.xfinity.com
autodiscover.comcast.net
carriers.xfinity.com
xray-stage.traxion.xfinity.com
*.xchat.xfinity.com
experience.xfinity.com
www.xfinity.com
api.dhtimeline.xfinity.com
es.xfinity.com
answers-autozone.pagescdn.com
import.xfinity.com
www.sc.xfinity.com
core.mqtt.iot-qa.eu.xfinity.com
secure07.lithium.com
client-events-gw.gpe.xfinity.com
www.xfinity.com
events.biggestfantour.com
signal-dev-vid.gslb2.xfinity.com
*.cws.xfinity.com
prod-hop.cybersource.xfinity.com
api.ch2.prd.xfinity.com
livecache-ng-prod.cvr.comcast.net
activatecablecard.xfinity.com
validation.slb.comcast.com
api.pdc.int.xfinity.com
communitytd3.re.xfinity.com
traffic-test.np.gpe.xfinity.com
livecache-stg-cvr.gslb2.xfinity.com
secure05.stage.lithium.com
*.np.sdp.xfinity.com
brand.xfinity.com
www.xfinity.comcast.net
*.oauthlink.iot-int.xfinity.com
livecache-cvr.gslb2.xfinity.com
cdn-le4.arkadiumhosted.com
Certificate
The complete raw certificate details for communitystage.re.xfinity.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGBzCCBO+gAwIBAgISBHZOdnhNz0aAbL3FYDxswvmoMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MDgwODMwMzVaFw0yNDA3MDcwODMwMzRaMCgxJjAkBgNVBAMT HWNvbW11bml0eXN0YWdlLnJlLnhmaW5pdHkuY29tMIICIjANBgkqhkiG9w0BAQEF AAOCAg8AMIICCgKCAgEAssn2FQa6GrzvB1UedxNemunOiMwiW8os8rsmD4IagDlG glS/khdCMJ2ItYx5/MYCUbhf5wf1fK7UGTKiRGrLdFFJce6VUEPfxHWd3h20gwxp ZZoxRbn8PwQDKzAjfosh+M3X3d/eNTKGdqNFC8eV3z9g9d1zxyB7JO047PEeFS3W Iu6Wesj6wcVdeYkMwKUXKylPSEDAjO/H+mmfR65XkCd3hPxNhRxfySHBnjOFjuIl fnuJY2H2s+n0uAOzbL2kbv8IATPLOKp04qLB60LNUIGbaQQav91uFvq6yoUZqqKb 2AuW66U9k1BBS8eua/WRhp6MkOeej6ARbNEGYH5RTeBpwIAi58y422HWTiEm63gj tP34cx8sB1NjsflvEEGLNqZ1MFqGDOm8udSa9JiTbK7Qn9n5bG5dWLBRbtWXpEOA 0YIczn4B4ipw14DgqCDZPaSB2vvz8Is6FRPNLzZRullP7lmedvA2uun9jQ0Sakka rdnmhKp7uCvpv6OFcjTj/CuKDhrw1qY1/+cpburUwMWcM/rP9mGavriK2q5DVBIZ sZYyyR1kLh07RDIgbLbjZXJozCwG1d16LGXLQHSfS57ucKg+hGvBepmocgUXq6qE KSJFVMvw78Qe6whEmok6mrTmPSrCFk4CxFV5lZg+mI/D8ZDuqZ1K8Stgf1z/GCsC AwEAAaOCAh8wggIbMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUa3d8UKaYvdxdFyL2 3CP7CSSEYdMwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYB BQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYI KwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wKAYDVR0RBCEwH4IdY29t bXVuaXR5c3RhZ2UucmUueGZpbml0eS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEw ggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+F auvBvyiF7PhkbgAAAY69C5G4AAAEAwBHMEUCIQDIt7kMwbTakLlzQPF7uNr78WHq e9HQOdVUifiwbqUGaAIgEDhvUyIbUzoDlm0mxp1VJ5sBRAjBzwgQL2apODDVhBIA dgAZmBBxCfDWUi4wgNKeP2S7g24ozPkPUo7u385KPxa0ygAAAY69C5HMAAAEAwBH MEUCIQCn56ogu0lbo7mzp239C6vDmhnvNLrgEMSHgjY4cH4m0AIgIiJndo7zqnUh 9CRcHgq3TCrg+7wjJwB+6DIJj56N1a8wDQYJKoZIhvcNAQELBQADggEBACesyIhw BjNHOxaIMcABCdRSbovUBDsbddY4Ux2ewFdM1Rs58Vo6+rE5dfYzxJkWBR+3KnST 2tAFgHxktcol6dOQcj9vkd/sn6Xogg8rIGMrDByyBbLUy6dlKC37bLoYIneohlyD YYxfUiIu5AJviNRu9n9RdefrQVy+qTkpSYaoyebvfsfLyc9KYxvtX3FPeV4Ye/T6 +FOFO6AfL4PKMqflE2A+OTLvS5sQQlRqb5CNuZIZY/D9gzYZOOVPmhWmCRrVcbSj s2o50eKJqgfaNSq1ctqPb+QWu4do15aM5msDOKzgXMqviiYODBOIoRUl3F1ODWDy fcZA7BqvfyqLP5c= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAssn2FQa6GrzvB1UedxNe munOiMwiW8os8rsmD4IagDlGglS/khdCMJ2ItYx5/MYCUbhf5wf1fK7UGTKiRGrL dFFJce6VUEPfxHWd3h20gwxpZZoxRbn8PwQDKzAjfosh+M3X3d/eNTKGdqNFC8eV 3z9g9d1zxyB7JO047PEeFS3WIu6Wesj6wcVdeYkMwKUXKylPSEDAjO/H+mmfR65X kCd3hPxNhRxfySHBnjOFjuIlfnuJY2H2s+n0uAOzbL2kbv8IATPLOKp04qLB60LN UIGbaQQav91uFvq6yoUZqqKb2AuW66U9k1BBS8eua/WRhp6MkOeej6ARbNEGYH5R TeBpwIAi58y422HWTiEm63gjtP34cx8sB1NjsflvEEGLNqZ1MFqGDOm8udSa9JiT bK7Qn9n5bG5dWLBRbtWXpEOA0YIczn4B4ipw14DgqCDZPaSB2vvz8Is6FRPNLzZR ullP7lmedvA2uun9jQ0SakkardnmhKp7uCvpv6OFcjTj/CuKDhrw1qY1/+cpburU wMWcM/rP9mGavriK2q5DVBIZsZYyyR1kLh07RDIgbLbjZXJozCwG1d16LGXLQHSf S57ucKg+hGvBepmocgUXq6qEKSJFVMvw78Qe6whEmok6mrTmPSrCFk4CxFV5lZg+ mI/D8ZDuqZ1K8Stgf1z/GCsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 388706757938466125403028494166920748267944 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-08 08:30:35 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-07 08:30:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'communitystage.re.xfinity.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 729395120863592060529087161433174432221560435460488440045042838870071195816293409669198482985251622460627283518445385713862843823062346424406068315634911076560112990043154148817668537957473549824779363479367241298875124565288897668962362488126698235712127164615059270460041729522222032476630053344090837225181102476685990618519126224118225497378292712562003738770917137803720336900074805726581069086121594063431070793203907817927021662479441909598461873749757111340132260510336356983215176327535628945861176269302897452994124233228142768203878305857008372126459093819226475119807828949821861260307677381658429146672176992547958666263511769414795914656962148441752812998362967751301573835097694905709250222884757088704463854659061839483594732803582965152559360380751258608758712772033819853442467044643393889400849721420702598901236012318337619054363922154465935870439345577415653664276607549319434350702164634105689314035470564967579857722905183743361568578466488290774566787711537095386486412561583903447914207293440885214069308609700857721018871834134843891099185347443370035734083381185984747911123162567543886258289388581961487236484845159974909911461570316632709019949930206698930701579966812241950298969087320738214166302496811 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6b777c50a698bddc5d1722f6dc23fb09248461d3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'communitystage.re.xfinity.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018ebd0b91b80000040300473045022100c8b7b90cc1b4da90b97340f17bb8dafbf161ea7bd1d039d55489f8b06ea50668022010386f53221b533a03966d26c69d55279b014408c1cf08102f66a93830d584120076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ebd0b91cc0000040300473045022100a7e7aa20bb495ba3b9b3a76dfd0babc39a19ef34bae010c487823638707e26d00220222267768ef3aa7521f4245c1e0ab74c2ae0fbbc2327007ee832098f9e8dd5af . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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