www.xfinity.com

- Comcast Corporation -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 1c:d9:97:05:85:2c:f7:d1:b7:8e:7f:8a:24:2d:c7:2e was issued on by COMODO CA Limited.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Comcast Corporation

Organization: Comcast Corporation
Organization unit: NSO
Address: 1 Comcast Center
Postal code: 19103
State / Province: Pennsylvania
Locality: Philadelphia
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:d9:97:05:85:2c:f7:d1:b7:8e:7f:8a:24:2d:c7:2e
Serial Number (int): 38348175381486535345672786812624291630
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 7e:73:c4:c8:41:32:53:ea:c7:7f:50:b2:ec:d7:f3:c4:86:b0:b9:88
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): c2:1f:4e:61:0e:7c:84:de:49:ea:e2:f1:10:cb:5f:ae:e2:99:5d:09
Fingerprint (sha256): 07:8a:2d:aa:97:50:79:ef:50:73:e8:a1:c9:2c:af:da:78:f0:8d:b7:7b:1f:7a:40:55:8e:ed:bd:12:ad:d7:33

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate www.xfinity.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.xfinity.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.xfinity.com
api.ch2.int.xfinity.com
api.ch2.prd.xfinity.com
api.ch2.stg.xfinity.com
api.int.xfinity.com
api.pdc.int.xfinity.com
api.pdc.prd.xfinity.com
api.pdc.stg.xfinity.com
api.stg.xfinity.com
api.wcdc.int.xfinity.com
api.wcdc.prd.xfinity.com
api.wcdc.stg.xfinity.com
api.xfinity.com
approval.cws.xfinity.com
approval.xfinity.com
auth.xfinity.com
cdn.ch2.comcast.com
cdn.ch2.customer.comcast.com
cdn.ch2.int.comcast.com
cdn.ch2.int.customer.comcast.com
cdn.ch2.stg.comcast.com
cdn.ch2.stg.customer.comcast.com
cdn.comcast.com
cdn.customer.comcast.com
cdn.int.comcast.com
cdn.int.customer.comcast.com
cdn.pdc.comcast.com
cdn.pdc.customer.comcast.com
cdn.pdc.int.comcast.com
cdn.pdc.int.customer.comcast.com
cdn.pdc.stg.comcast.com
cdn.pdc.stg.customer.comcast.com
cdn.stg.comcast.com
cdn.stg.customer.comcast.com
cdn.wcdc.comcast.com
cdn.wcdc.customer.comcast.com
cdn.wcdc.int.comcast.com
cdn.wcdc.int.customer.comcast.com
cdn.wcdc.stg.comcast.com
cdn.wcdc.stg.customer.comcast.com
chat.xfinity.com
cmp.cws.xfinity.com
customer.comcast.com
customer.int.xfinity.com
customer.stg.xfinity.com
customer.xfinity.com
edge.static-assets.top.comcast.net
es.comcast.com
idm.xfinity.com
int-approval.cws.xfinity.com
int-approval.xfinity.com
internet.xfinity.com
login.xfinity.com
metrics.comcast.com
mydeviceinfo-prod.codebig2.net
mydeviceinfo.xfinity.com
oauth.xfinity.com
preproduction-approval.cws.xfinity.com
preproduction-approval.xfinity.com
secure.comcast.net
secure.xfinity.com
smetrics.comcast.com
staging-approval.cws.xfinity.com
staging-approval.xfinity.com
t.xfinity.com
www.ch2.int.xfinity.com
www.ch2.prd.xfinity.com
www.ch2.stg.xfinity.com
www.comcast.com
www.comcast.net
www.comcastsupport.com
www.int.comcast.com
www.int.comcast.net
www.int.xfinity.com
www.pdc.int.xfinity.com
www.pdc.prd.xfinity.com
www.pdc.stg.xfinity.com
www.stg.comcast.com
www.stg.comcast.net
www.stg.xfinity.com
www.wcdc.int.xfinity.com
www.wcdc.prd.xfinity.com
www.wcdc.stg.xfinity.com
xapi.ch2.int.xfinity.com
xapi.ch2.prd.xfinity.com
xapi.ch2.stg.xfinity.com
xapi.int.xfinity.com
xapi.pdc.int.xfinity.com
xapi.pdc.prd.xfinity.com
xapi.pdc.stg.xfinity.com
xapi.stg.xfinity.com
xapi.wcdc.int.xfinity.com
xapi.wcdc.prd.xfinity.com
xapi.wcdc.stg.xfinity.com
xapi.xfinity.com
xfinity.com

Other certificates including the domain name xfinity.com

(limited to 100 certificates)
cdn-le4.arkadiumhosted.com
*.xfn-ops.xfinity.com
sit2-hop.cybersource.xfinity.com
*.identity.xfinity.com
approval.xfinity.com
payments.xfinity.com
www.xfinity.comcast.net
brand-staging.xfinity.com
imap.email.comcast.net
*.wifi-stage.connected.xfinity.com
*.iotplatform-int.eu.xfinity.com
*.xcp.xfinity.com
research.xfinity.com
wificouponmanager.xfinity.com
emailplus.xfinity.com
edge.cirrus-config.xcr.comcast.net
wifilogin-st.xfinity.com
pcat-beta.mobile.xfinity.com
*.xcp-ep-prod.xfinity.com
gamex-staging.np.gpe.xfinity.com
*.agentcoach.xfinity.com
iota-staging.xfinity.com
cms9.xfinity.com
developers.xfinity.com
communitystage.re.xfinity.com
developer.xfinity.com
pcat-alpha.mobile.xfinity.com
bill-pay-staging.maw-pci.xfinity.com
events.biggestfantour.com
api.wcdc.int.xfinity.com
stg-tech360-os-hoa-tdb-4.techtools.xfinity.com
missioncontrol.xfinity.com
research.staging.xfinity.com
movableink.xfinity.com
research.staging.xfinity.com
prod.mdu.xfinity.com
bill-pay-qa.maw-pci.xfinity.com
diagnosticapi-stage.traxion.xfinity.com
upload-qa.cvr.comcast.net
approval.xfinity.com
sit-hop.cybersource.xfinity.com
cdn-le4.arkadiumhosted.com
*.oauthlink.iot-prod.xfinity.com
bill-pay-pre-prod.maw-pci.xfinity.com
gql-dev-py.np.gpe.xfinity.com
cdn-le4.arkadiumhosted.com
stage.ipie.xfinity.com
cdn-le4.arkadiumhosted.com
nextray-preprod.traxion.xfinity.com
staging.cx.xfinity.com
gql-dev-node.np.gpe.xfinity.com
my.xfinity.com
*.spil.xfinity.com
bpm-auth.cac.xfinity.com
lab-controller.msn.comcast.net
research.staging.xfinity.com
xfinity.com
*.wifi-stage.connected.xfinity.com
internet.xfinity.com
san1.yext-cdn.com
pcat-alpha.mobile.xfinity.com
secure07.lithium.com
login-dev.comcast.net
xapi.xfinity.com
hawkeye.traxion.xfinity.com
autodiscover.comcast.net
carriers.xfinity.com
xray-stage.traxion.xfinity.com
*.xchat.xfinity.com
experience.xfinity.com
www.xfinity.com
api.dhtimeline.xfinity.com
es.xfinity.com
answers-autozone.pagescdn.com
import.xfinity.com
www.sc.xfinity.com
core.mqtt.iot-qa.eu.xfinity.com
secure07.lithium.com
client-events-gw.gpe.xfinity.com
www.xfinity.com
events.biggestfantour.com
signal-dev-vid.gslb2.xfinity.com
*.cws.xfinity.com

prod-hop.cybersource.xfinity.com
api.ch2.prd.xfinity.com
livecache-ng-prod.cvr.comcast.net
activatecablecard.xfinity.com
validation.slb.comcast.com
api.pdc.int.xfinity.com
communitytd3.re.xfinity.com
traffic-test.np.gpe.xfinity.com
livecache-stg-cvr.gslb2.xfinity.com
secure05.stage.lithium.com
*.np.sdp.xfinity.com
brand.xfinity.com
www.xfinity.comcast.net
*.oauthlink.iot-int.xfinity.com
livecache-cvr.gslb2.xfinity.com
cdn-le4.arkadiumhosted.com

Certificate

The complete raw certificate details for www.xfinity.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfPUg+3DBC13V+NJIvp7
qV82hVHvCessa3BoLIMPRPAq9NywHQoikNRNsuL/x1gCugkre24bvLu1Q060vREO
iMW+nrHcQMP8TzXGT6lqMtpg/9gsqdgjtyeU6l43Mr3bbeTBNqScFTySr6TQ5Qza
V5reewl/0tbUfb1D9lsaeahqVcI4VaUaeAvK+WyG5uaqd5WaL0+vkn43FmMpKZez
gwMjRMsrWy8xuc0Xhc0YBX44AocaxVpaalx9wBSVXs/rITV/7wKP5CpIVnlZrRdO
Uj0CgfCQVjkkASZo5veNNek42h2f/raDMBnv1zHAcfSY9tLsw1eRdY4rHk/BGqwK
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38348175381486535345672786812624291630
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '19103'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Philadelphia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1 Comcast Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Comcast Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NSO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.xfinity.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22969370321239364023502666489519897483379266960076891887958126207756097350804458643014308283828257829249612738835171559446593923263727126108380270775144173692428578572739412124242059067461308981943001986658744978802447408622157530112420785492726070437031315452862097977044706480494342268092189385303467602172965690656195318439718447875183597536396630649758855802252247440315571149987572122066078508809671017680624306829554797131841777150472200440150078462212068975652728765735595364071668611748864544020632156529760736188004177463614612456600006178263912666625974221741903580584090038736296447853488521070718816619141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e73c4c8413253eac77f50b2ecd7f3c486b0b988
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2372 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ch2.int.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ch2.prd.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ch2.stg.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.int.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.pdc.int.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.pdc.prd.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.pdc.stg.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stg.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.wcdc.int.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.wcdc.prd.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.wcdc.stg.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'approval.cws.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'approval.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ch2.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ch2.customer.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ch2.int.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ch2.int.customer.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ch2.stg.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ch2.stg.customer.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.customer.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.int.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.int.customer.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.pdc.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.pdc.customer.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.pdc.int.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.pdc.int.customer.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.pdc.stg.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.pdc.stg.customer.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.stg.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.stg.customer.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wcdc.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wcdc.customer.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wcdc.int.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wcdc.int.customer.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wcdc.stg.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wcdc.stg.customer.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmp.cws.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.int.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.stg.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.static-assets.top.comcast.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idm.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-approval.cws.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-approval.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internet.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrics.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydeviceinfo-prod.codebig2.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydeviceinfo.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauth.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preproduction-approval.cws.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preproduction-approval.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.comcast.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smetrics.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-approval.cws.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-approval.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ch2.int.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ch2.prd.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ch2.stg.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comcast.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comcastsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.int.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.int.comcast.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.int.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdc.int.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdc.prd.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pdc.stg.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg.comcast.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stg.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wcdc.int.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wcdc.prd.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wcdc.stg.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xapi.ch2.int.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xapi.ch2.prd.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xapi.ch2.stg.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xapi.int.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xapi.pdc.int.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xapi.pdc.prd.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xapi.pdc.stg.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xapi.stg.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xapi.wcdc.int.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xapi.wcdc.prd.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xapi.wcdc.stg.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xapi.xfinity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xfinity.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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