mail.lea.co.bw

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 62:5a:51:3d:22:5f:31:57:99:33:e1:91:e3:89:47:99 was issued on by COMODO CA Limited.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mail.lea.co.bw,OU=Domain Control Validated+OU=COMODO SSL Unified Communications

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 62:5a:51:3d:22:5f:31:57:99:33:e1:91:e3:89:47:99
Serial Number (int): 130733298022923270485222701772543969177
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 2f:96:ac:17:01:2c:85:06:85:df:f9:dd:a6:ca:93:06:03:35:1e:ce
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): a3:8e:00:46:68:15:f7:60:4f:4e:c1:87:9e:b3:a8:af:91:b4:4d:a5
Fingerprint (sha256): 89:e7:82:9c:45:e1:26:5f:36:83:31:38:ee:b1:80:22:b7:78:27:8b:db:22:ae:98:7d:e0:46:fe:90:48:44:17

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate mail.lea.co.bw

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.lea.co.bw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.lea.co.bw
dcmisexc03.lea.co.bw
dcmishub01.lea.co.bw

Other certificates including the domain name lea.co.bw

(limited to 100 certificates)
support.bluerockre.com
helpdesk.fintonhouse.org.uk
support.bluerockre.com
webmarketer-admin.webmarketer-staging.me
servicedesk.energyexemplar.com
tickets.andirect.org
leaservicedesk.lea.co.bw
support.mastercardfdn.org
helpdesk.fintonhouse.org.uk
lea.co.bw
helpdesk.fintonhouse.org.uk
support.bluerockre.com
www.treatsby.me
www.shawprogroup.com
admin.adam.anyware.software
assetmgmt.jennycraig.com
smeregistration.lea.co.bw
sjuh.nl
mail.lea.co.bw
helpdesk.fintonhouse.org.uk
vinayp.com
applicationsupport.fqml.com
servicedesk.odc.co.bw
servicedesk.gmhec.org
support.bluerockre.com
leaservicedesk.lea.co.bw
leaservicedesk.lea.co.bw
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
micollab.lea.co.bw
servicedesk.projecthope.org
helpdesk.secureauth.com
helpline.petron.com
support.bluerockre.com
accre.zoeames.com
shannonlau.com
helpline.petron.com
servicedesk.kings.edu.au
leaservicedesk.lea.co.bw
helpdesk.neopharm.ca
www.studiomedico-izzo-arduino.it
helpdesk.utimco.org
helpdesk.sparkswebapps.com
www.shawprogroup.com
helpdesk.trimaxamericas.com
incom.xyz
vinayp.com
support.embelton.com
blossom-natural-health.com
support.bluerockre.com
helpdesk.empg.com
support.bluerockre.com
ithelpdesk.optomed.com
helpdesk.dbsupply.com
helpdesk.fintonhouse.org.uk
support.bluerockre.com
lea.co.bw
leafytech.ca
ithelp.dreamliveprosper.com
helpdesk.brandontrust.org
levis4000.megataxi.com
mail.lea.co.bw
ayudati.auteco.com.co
support.bluerockre.com
helpdesk.fintonhouse.org.uk
gurubargoa.in
support.bluerockre.com
helpdesk.fintonhouse.org.uk
support.bluerockre.com
*.lea.co.bw
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
turnips.sandysandy.net
help.btvi.edu.bs
ithelpdesk.sgmc.org
mail.lea.co.bw
lea.co.bw
support.tg-sec.com
itservicedesk.cda.org
itsupport.laborie.com
helpdesk.harvestbible.org
mbg.lea.co.bw
support.bluerockre.com
itservicedesk.cda.org
link.panierhalal.fr
leaservicedesk.lea.co.bw
helpdesk.fintonhouse.org.uk
disruptlabs.xyz
smeregistration.lea.co.bw
booking.royalhaircare.lk
admin.hlm.at
apteach.org
leaservicedesk.lea.co.bw
helpdesk.empg.com
MBG.lea.co.bw
www.proexata.com
helpdesk.fintonhouse.org.uk
support.bluerockre.com
support.genesis-tec.com
support.bluerockre.com

Certificate

The complete raw certificate details for mail.lea.co.bw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIQYlpRPSJfMVeZM+GR44lHmTANBgkqhkiG9w0BAQsFADCB
kDELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxNjA0BgNV
BAMTLUNPTU9ETyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD
QTAeFw0xODA5MTcwMDAwMDBaFw0xOTA5MDcyMzU5NTlaMGgxITAfBgNVBAsTGERv
bWFpbiBDb250cm9sIFZhbGlkYXRlZDEqMCgGA1UECxMhQ09NT0RPIFNTTCBVbmlm
aWVkIENvbW11bmljYXRpb25zMRcwFQYDVQQDEw5tYWlsLmxlYS5jby5idzCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANkCdFpg9eknDKTRctlpLXSZG6dU
SawZVaEzEAwVW4Qm6jzBH1AX1OkCDn8fx7aBIeAYqKEaMhnlfSh4q0u+P3FAN6Rm
4m9/IkrEH7AvKrM0EC+B2Xn+aP61P91+IHGr7XS/3a8em33RD79NSCOgWM+RtcMa
N4pOOhFl5ibESTg9vSJPOEzcO0W7vWrI/xDdqg2AFsmVYb5ccSHdE78Vd+OzMah3
gi0Aty9b9N3AfRiBHX4vfqpkBo0tJT3alfTJWthJRs4BS5FPJrnhqcFOk/D3vCcm
LKZZTYUmohZdXAm6AbU2Rl3sqeM2MpF/NoCaFyKtT2H6z7zQtwazkVu6eJUCAwEA
AaOCAgwwggIIMB8GA1UdIwQYMBaAFJCvajqUWgvYkOoSVnPfQ7Q6KNrnMB0GA1Ud
DgQWBBQvlqwXASyFBoXf+d2mypMGAzUezjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0T
AQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTwYDVR0gBEgw
RjA6BgsrBgEEAbIxAQICBzArMCkGCCsGAQUFBwIBFh1odHRwczovL3NlY3VyZS5j
b21vZG8uY29tL0NQUzAIBgZngQwBAgEwVAYDVR0fBE0wSzBJoEegRYZDaHR0cDov
L2NybC5jb21vZG9jYS5jb20vQ09NT0RPUlNBRG9tYWluVmFsaWRhdGlvblNlY3Vy
ZVNlcnZlckNBLmNybDCBhQYIKwYBBQUHAQEEeTB3ME8GCCsGAQUFBzAChkNodHRw
Oi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9SU0FEb21haW5WYWxpZGF0aW9uU2Vj
dXJlU2VydmVyQ0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9j
YS5jb20wEwYKKwYBBAHWeQIEAwEB/wQCBQAwRQYDVR0RBD4wPIIObWFpbC5sZWEu
Y28uYneCFGRjbWlzZXhjMDMubGVhLmNvLmJ3ghRkY21pc2h1YjAxLmxlYS5jby5i
dzANBgkqhkiG9w0BAQsFAAOCAQEAMwPGlwvjpJuALC431Y7+7LSS4Dq3tIQtgIwC
oOmlr18PTGEpGMW40qtq/9o11P7MFax+kz4ZumwjEjYKFrSg/UJi5vLvXLLCmIZU
6cdA+hXtcnR+GOq/uZm/qGgwIObGjydoaiEt/GCf60b5Ubn8keNd6fUbAuQnZRO5
M0UK0dk1dcPOctjEqZT9DuKhDc6Gk2kKlzCKZWJcouqqcMGatiVd2S2T/IrU5i+4
g9fr8rBfrkGHumL020RhIwMwZhmQdgJoNq/ZZ/S642rvLt/3t449R/eEaZUhFAjw
vwfydL/Njut0jY5H70bkcKi+C2VhOhO6xOfrxOZyrnOd4qoI0Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QJ0WmD16ScMpNFy2Wkt
dJkbp1RJrBlVoTMQDBVbhCbqPMEfUBfU6QIOfx/HtoEh4BiooRoyGeV9KHirS74/
cUA3pGbib38iSsQfsC8qszQQL4HZef5o/rU/3X4gcavtdL/drx6bfdEPv01II6BY
z5G1wxo3ik46EWXmJsRJOD29Ik84TNw7Rbu9asj/EN2qDYAWyZVhvlxxId0TvxV3
47MxqHeCLQC3L1v03cB9GIEdfi9+qmQGjS0lPdqV9Mla2ElGzgFLkU8mueGpwU6T
8Pe8JyYspllNhSaiFl1cCboBtTZGXeyp4zYykX82gJoXIq1PYfrPvNC3BrORW7p4
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 130733298022923270485222701772543969177
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.lea.co.bw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27394922538702569157288708594215614641215826007100739678860460509650581308016944723896157041559578726460898727614057231412338508003864262165393035201477470012527668126854614759197919231783240665200008721234022355740900911580301337482348100110622198427036699838001631881131457059968013002116065748720889737364144366170324535849592647950968576779945848956349213803962017027230838004559920815662556891993280666932494107862374069638305181302484906112231999661032271343050558673055395100056933686391048859823330317913968602410143430323604927045172447460211647071410895731630416087866959898229905625390224774709193914087573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f96ac17012c850685dff9dda6ca930603351ece
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lea.co.bw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcmisexc03.lea.co.bw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcmishub01.lea.co.bw'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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