xapi.xfinity.com

- Comcast Corporation -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 7d:af:ed:0e:83:45:50:72:00:bd:8e:ef:db:12:1b:69 was issued on by COMODO CA Limited.

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Comcast Corporation

Organization: Comcast Corporation
State / Province: Pennsylvania
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 7d:af:ed:0e:83:45:50:72:00:bd:8e:ef:db:12:1b:69
Serial Number (int): 167066959504254751654010344522755742569
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c8:a1:65:a7:93:39:6b:b1:6e:58:1c:9a:44:77:a4:b2:f7:2b:5c:e8
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 2a:83:e9:e2:9e:50:25:ce:67:df:64:db:e2:1b:04:87:11:b5:0b:5d
Fingerprint (sha256): 06:d9:15:75:ce:2d:d0:1f:71:b3:14:76:0b:b0:42:a1:b5:ae:0d:5e:bd:f7:e4:18:29:50:6b:98:21:98:95:e9

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate xapi.xfinity.com

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for xapi.xfinity.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

xapi.xfinity.com
cdn.business.comcast.com
cdn.ch2.business.comcast.com
cdn.ch2.comcast.com
cdn.ch2.customer.comcast.com
cdn.comcast.com
cdn.customer.comcast.com
cdn.pdc.business.comcast.com
cdn.pdc.comcast.com
cdn.pdc.customer.comcast.com
cdn.wcdc.business.comcast.com
cdn.wcdc.comcast.com
cdn.wcdc.customer.comcast.com
customer.xfinity.com
delivery.xfinity.com
idm.xfinity.com
login.xfinity.com
oauth.xfinity.com
preview.api.ch2.prd.xfinity.com
preview.api.pdc.prd.xfinity.com
preview.api.wcdc.prd.xfinity.com
preview.api.xfinity.com
preview.services.ch2.prd.comcast.com
preview.services.pdc.prd.comcast.com
preview.services.wcdc.prd.comcast.com
preview.services.xfinity.com
preview.www.ch2.prd.xfinity.com
preview.www.pdc.prd.xfinity.com
preview.www.wcdc.prd.xfinity.com
preview.www.xfinity.com
preview.xapi.ch2.prd.xfinity.com
preview.xapi.pdc.prd.xfinity.com
preview.xapi.wcdc.prd.xfinity.com
preview.xapi.xfinity.com
prv.www.prd.xfinity.com
services.xfinity.com
www.xfinity.com

Other certificates including the domain name xfinity.com

(limited to 100 certificates)
cdn-le4.arkadiumhosted.com
*.xfn-ops.xfinity.com
sit2-hop.cybersource.xfinity.com
*.identity.xfinity.com
approval.xfinity.com
payments.xfinity.com
www.xfinity.comcast.net
brand-staging.xfinity.com
imap.email.comcast.net
*.wifi-stage.connected.xfinity.com
*.iotplatform-int.eu.xfinity.com
*.xcp.xfinity.com
research.xfinity.com
wificouponmanager.xfinity.com
emailplus.xfinity.com
edge.cirrus-config.xcr.comcast.net
wifilogin-st.xfinity.com
pcat-beta.mobile.xfinity.com
*.xcp-ep-prod.xfinity.com
gamex-staging.np.gpe.xfinity.com
*.agentcoach.xfinity.com
iota-staging.xfinity.com
cms9.xfinity.com
developers.xfinity.com
communitystage.re.xfinity.com
developer.xfinity.com
pcat-alpha.mobile.xfinity.com
bill-pay-staging.maw-pci.xfinity.com
events.biggestfantour.com
api.wcdc.int.xfinity.com
stg-tech360-os-hoa-tdb-4.techtools.xfinity.com
missioncontrol.xfinity.com
research.staging.xfinity.com
movableink.xfinity.com
research.staging.xfinity.com
prod.mdu.xfinity.com
bill-pay-qa.maw-pci.xfinity.com
diagnosticapi-stage.traxion.xfinity.com
upload-qa.cvr.comcast.net
approval.xfinity.com
sit-hop.cybersource.xfinity.com
cdn-le4.arkadiumhosted.com
*.oauthlink.iot-prod.xfinity.com
bill-pay-pre-prod.maw-pci.xfinity.com
gql-dev-py.np.gpe.xfinity.com
cdn-le4.arkadiumhosted.com
stage.ipie.xfinity.com
cdn-le4.arkadiumhosted.com
nextray-preprod.traxion.xfinity.com
staging.cx.xfinity.com
gql-dev-node.np.gpe.xfinity.com
my.xfinity.com
*.spil.xfinity.com
bpm-auth.cac.xfinity.com
lab-controller.msn.comcast.net
research.staging.xfinity.com
xfinity.com
*.wifi-stage.connected.xfinity.com
internet.xfinity.com
san1.yext-cdn.com
pcat-alpha.mobile.xfinity.com
secure07.lithium.com
login-dev.comcast.net
xapi.xfinity.com
hawkeye.traxion.xfinity.com
autodiscover.comcast.net
carriers.xfinity.com
xray-stage.traxion.xfinity.com
*.xchat.xfinity.com
experience.xfinity.com
www.xfinity.com
api.dhtimeline.xfinity.com
es.xfinity.com
answers-autozone.pagescdn.com
import.xfinity.com
www.sc.xfinity.com
core.mqtt.iot-qa.eu.xfinity.com
secure07.lithium.com
client-events-gw.gpe.xfinity.com
www.xfinity.com
events.biggestfantour.com
signal-dev-vid.gslb2.xfinity.com
*.cws.xfinity.com

prod-hop.cybersource.xfinity.com
api.ch2.prd.xfinity.com
livecache-ng-prod.cvr.comcast.net
activatecablecard.xfinity.com
validation.slb.comcast.com
api.pdc.int.xfinity.com
communitytd3.re.xfinity.com
traffic-test.np.gpe.xfinity.com
livecache-stg-cvr.gslb2.xfinity.com
secure05.stage.lithium.com
*.np.sdp.xfinity.com
brand.xfinity.com
www.xfinity.comcast.net
*.oauthlink.iot-int.xfinity.com
livecache-cvr.gslb2.xfinity.com
cdn-le4.arkadiumhosted.com

Certificate

The complete raw certificate details for xapi.xfinity.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW4ZEHDoNj66HlGAYw3L
iKG4pQxGNTxIs6is0NxoK9u7UDOVoRT0Busu3zWNQYozRvT6yYWDYm3yL/WOmBYc
DpEqDSX5L6n687weRGDe1MjopoS5Ue3k21nzyn3LvMRaU42Zt8odOa2dsYy2zz7M
0sBRrUUxxhQO07BNzRJ4WBHXf+gOICzvPnQ6hHl4PuqfaILoJ+1HFpadkouX7mhy
OLCdxPbSLTk/3ImSBkJ2vwB3MoMFR+Mzph9tq4eCNYT2HLtBhoR8vkGVSnj51+tp
s4NTpsIJRFdilzZDupHdlaITlUR5NEF7o0+gytXm5HK5ysjiCcSySZwv0P3zzXSd
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 167066959504254751654010344522755742569
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Comcast Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xapi.xfinity.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21893518060593732565244898713950221556992364837219080183339762218070075470211824336618800486220333504553584503787552654743195360741691933433465480769485073236618418722812087573990841912554157280065863073933711440584154152139501667350075168741511586056290342540082197173442027833323069711376060750176920565252942663974720151117525470721672613985087800291279889409512773506876723400398771212017905614868805134648061726405270547421935597313795881983657548089845120417202755702225539419243221563500904044934171336984984046164494011621270412515121276822767997748405452483898874931207680297457739286501596780310635769797991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c8a165a793396bb16e581c9a4477a4b2f72b5ce8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1024 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xapi.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.business.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ch2.business.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ch2.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ch2.customer.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.customer.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.pdc.business.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.pdc.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.pdc.customer.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wcdc.business.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wcdc.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wcdc.customer.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idm.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauth.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.api.ch2.prd.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.api.pdc.prd.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.api.wcdc.prd.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.api.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.services.ch2.prd.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.services.pdc.prd.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.services.wcdc.prd.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.services.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.www.ch2.prd.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.www.pdc.prd.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.www.wcdc.prd.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.www.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.xapi.ch2.prd.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.xapi.pdc.prd.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.xapi.wcdc.prd.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.xapi.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prv.www.prd.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xfinity.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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