lyncgovweb01.nswgov.ucfx.com

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number b4:61:2e:3b:93:01:53:4a was issued on by Starfield Technologies, Inc..

With 55 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lyncgovweb01.nswgov.ucfx.com,OU=Domain Control Validated

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b4:61:2e:3b:93:01:53:4a
Serial Number (int): 12997720832972247882
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 21:20:a6:76:4c:cd:9c:ad:ab:99:0a:49:b7:49:3f:d1:bd:5c:af:3f
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): 80:39:52:61:1d:23:41:da:84:7a:b2:3f:fb:0a:89:cd:fa:99:b6:32
Fingerprint (sha256): 5c:6a:4c:b6:23:5e:03:7a:c2:4a:82:83:a8:74:d2:ae:6b:dc:69:bf:e4:d7:83:e6:09:af:cd:a3:c0:c4:30:9f

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-240.crl

Check the revocation status for certificate lyncgovweb01.nswgov.ucfx.com

55

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lyncgovweb01.nswgov.ucfx.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lyncgovweb01.nswgov.ucfx.com
www.lyncgovweb01.nswgov.ucfx.com
lyncdiscover.nrc.nsw.gov.au
lyncdiscover.psc.nsw.gov.au
lyncdiscover.fairtrading.nsw.gov.au
lyncdiscover.tha.nsw.gov.au
lyncdiscover.revenue.nsw.gov.au
scheduler.nswgov.ucfx.com
sfboos01.nswgov.ucfx.com
lyncdiscover.ndiswc.nsw.gov.au
lyncdiscover.wiro.nsw.gov.au
lyncdiscover.treasury.nsw.gov.au
lyncdiscover.finance.nsw.gov.au
lyncdiscover.rgdc.nsw.gov.au
lyncwas.nswgov.ucfx.com
lyncdiscover.smallbusiness.nsw.gov.au
lyncdiscover.centreforwhs.nsw.gov.au
lyncdiscover.kidsguardian.nsw.gov.au
lyncdiscover.wcaa.sydney
sfbext01.nswgov.ucfx.com
lyncdiscover.dpc.nsw.gov.au
lyncdiscover.ipc.nsw.gov.au
lyncdiscover.bpb.nsw.gov.au
lyncdiscover.safework.nsw.gov.au
mail.nswgov.ucfx.com
lyncdiscover.sydneyaustralia.com
lyncdiscover.longservice.nsw.gov.au
lyncdiscover.eslinsurancemonitor.nsw.gov.au
lyncdiscover.sira.nsw.gov.au
lyncdiscover.gwic.nsw.gov.au
lyncdiscover.oiicac.nsw.gov.au
lyncdiscover.nswgov.ucfx.com
lyncdiscover.wcc.nsw.gov.au
lyncdiscover.mhl.nsw.gov.au
lyncdiscover.liquorandgaming.nsw.gov.au
autodiscover.nswgov.ucfx.com
sfboos.nswgov.ucfx.com
sfbext.nswgov.ucfx.com
lync.nswgov.ucfx.com
lyncdiscover.racing.nsw.gov.au
lyncdiscover.kids.nsw.gov.au
lyncdiscover.ovg.nsw.gov.au
lyncdiscover.sydneystartuphub.com.au
lyncdiscover.service.nsw.gov.au
lyncdiscover.gsc.nsw.gov.au
lyncdiscover.industrialrelations.nsw.gov.au
lyncdiscover.psa.nsw.gov.au
lyncdiscover.oipic.nsw.gov.au
lyncdiscover.property.nsw.gov.au
lyncdiscover.wpca.sydney
lyncdiscover.jobsfornsw.com.au
lyncdiscover.responsiblegambling.nsw.gov.au
lyncdiscover.govconnect.nsw.gov.au
lyncdiscover.servicefirst.nsw.gov.au
lyncdiscover.customerservice.nsw.gov.au

Other certificates including the domain name ucfx.com

(limited to 100 certificates)
accessedge1.nswgov.ucfx.com
accessedge2.nswgov.ucfx.com
ipfxedge.ipfx.com
idc.nswgov.ucfx.com
ucfx.com
lyncgovweb01.nswgov.ucfx.com
ukedge.ipfx.com
accessedge2.nswgov.ucfx.com
*.ucfx.com
accessedge1.nswgov.ucfx.com
sip.nswgov.ucfx.com
accessedge2.nswgov.ucfx.com
accessedge1.nswgov.ucfx.com
ucfx.com
accessedge1.nswgov.ucfx.com
ipfxedge.ipfx.com
lyncgovweb01.nswgov.ucfx.com
sip.ucfx.com
auedge.ipfx.com
sip.nswgov.ucfx.com
accessedge1.nswgov.ucfx.com
lyncgovweb01.nswgov.ucfx.com
lyncgovweb01.nswgov.ucfx.com
accessedge2.nswgov.ucfx.com
lyncgovweb01.nswgov.ucfx.com
lyncgovweb01.nswgov.ucfx.com
lyncgovweb01.nswgov.ucfx.com
lyncgovweb01.nswgov.ucfx.com
*.ucfx.com
auedge.ipfx.com
*.ucfx.com
accessedge2.nswgov.ucfx.com
ipfxedge.ipfx.com
*.ucfx.com
lyncgovweb01.nswgov.ucfx.com
accessedge2.nswgov.ucfx.com
accessedge1.nswgov.ucfx.com
accessedge1.nswgov.ucfx.com
sip.nswgov.ucfx.com
sip.nswgov.ucfx.com
*.ucfx.com
accessedge1.nswgov.ucfx.com
accessedge1.nswgov.ucfx.com
sip.nswgov.ucfx.com
ucfx.com
lyncgovweb01.nswgov.ucfx.com
accessedge1.nswgov.ucfx.com
auedge.ipfx.com
sip.nswgov.ucfx.com
accessedge1.nswgov.ucfx.com
lyncgovweb01.nswgov.ucfx.com
lyncgovweb01.nswgov.ucfx.com

Certificate

The complete raw certificate details for lyncgovweb01.nswgov.ucfx.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn/6QftZcKPI0L8K9TJi
yaZ+6AyKoxHRFK1EwvnraaaQ7SqO6P9NjVoTQkcPv6b5xAK647fgj7X6WrRVgKGc
YF5l5foY2Ausmstij0yUR2LHexNLZzuMya18Hh2JtGHyV39pdPDuj3DMtsdQvszO
tQEwqyRGjH4j3wvGRIEu/pxU3TYTyN0sE/In3GD4EwOPkeeGKLWdoD1mJ5NJgVz/
weZJ/KOi6WQTVMxbdwFEEElBiDvgiva2hwyGqU2N+n+c402PXoctIsRw6kbO4OXR
67Q7Zr5d9u68TNp4L6IHvvbJAnMtSIQ6ZipLpFxUCuruE92gPw0t5TK3HiV2YxlF
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12997720832972247882
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-25 03:32:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-22 09:15:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lyncgovweb01.nswgov.ucfx.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23038479595316699628281233810842908287907186122710351778067092406514918935141658375949321903820077912678856409114964916569825452884769948970292300055815322930655310998682592579187007781149405700614519606614270035697354607786960786301825902670523084700543351378159149852927360100868627104217094731867971054755023432867454676834568878451245719570006130483348077965671868498323510452010491538822551957713180238634826537048277861782519449825604185450797327954984516330319181563163765982387777320838512007951313733507672913467406737163038284241794507397359281295964218369470598438554082608165727948073715435362053292377569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-240.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1757 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncgovweb01.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lyncgovweb01.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.nrc.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.psc.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.fairtrading.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.tha.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.revenue.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheduler.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfboos01.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ndiswc.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.wiro.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.treasury.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.finance.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.rgdc.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncwas.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.smallbusiness.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.centreforwhs.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.kidsguardian.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.wcaa.sydney'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbext01.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.dpc.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ipc.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bpb.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.safework.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.sydneyaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.longservice.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.eslinsurancemonitor.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.sira.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.gwic.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.oiicac.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.wcc.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.mhl.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.liquorandgaming.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfboos.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbext.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.racing.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.kids.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ovg.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.sydneystartuphub.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.service.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.gsc.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.industrialrelations.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.psa.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.oipic.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.property.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.wpca.sydney'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.jobsfornsw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.responsiblegambling.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.govconnect.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.servicefirst.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.customerservice.nsw.gov.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2120a6764ccd9cadab990a49b7493fd1bd5caf3f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000174c351bd690000040300483046022100f21e3adad9e2647377303c6186d1142784c48c20fbf550a20206b09758a04e9a022100cda836b4019a94044c19aac5f22854f5dde2853158431652817289cf9d9a7b730076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000174c351be93000004030047304502203d7e12d7b9fb76a6fc56f373da1ce80fdaddae5b1aea6c275405344300e3fe1b022100d9918db91933273c2a9f148b50b82f70625d55278b00436f28f8965ccb8f69d4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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