lyncgovweb01.nswgov.ucfx.com

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number 3b:81:f4:f9:19:1d:a2:08 was issued on by Starfield Technologies, Inc..

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lyncgovweb01.nswgov.ucfx.com,OU=Domain Control Validated

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3b:81:f4:f9:19:1d:a2:08
Serial Number (int): 4287977670938829320
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: ca:30:10:4d:87:c7:d9:eb:2e:9d:e4:ed:79:d1:44:8d:46:84:aa:21
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): ae:cf:de:b8:c1:e1:77:c2:34:df:88:b5:a4:16:f1:bd:20:c2:05:60
Fingerprint (sha256): f9:11:28:cb:63:3c:ee:4d:12:e9:62:9b:61:7d:e9:47:83:a9:ec:db:51:ff:54:f8:5b:5d:fa:9a:27:e8:57:55

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-149.crl

Check the revocation status for certificate lyncgovweb01.nswgov.ucfx.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lyncgovweb01.nswgov.ucfx.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lyncgovweb01.nswgov.ucfx.com
www.lyncgovweb01.nswgov.ucfx.com
lyncdiscover.wcaa.sydney
lyncdiscover.ipc.nsw.gov.au
lyncdiscover.dpc.nsw.gov.au
scheduler.nswgov.ucfx.com
lyncdiscover.bpb.nsw.gov.au
sfbext01.nswgov.ucfx.com
lyncdiscover.ovg.nsw.gov.au
lyncdiscover.govconnect.nsw.gov.au
lyncdiscover.responsiblegambling.nsw.gov.au
lyncdiscover.customerservice.nsw.gov.au
lyncdiscover.industrialrelations.nsw.gov.au
lyncdiscover.kids.nsw.gov.au
lyncdiscover.racing.nsw.gov.au
lyncdiscover.sydneystartuphub.com.au
lyncdiscover.sira.nsw.gov.au
lyncdiscover.eslinsurancemonitor.nsw.gov.au
lyncdiscover.oiicac.nsw.gov.au
lyncdiscover.gwic.nsw.gov.au
lyncdiscover.servicefirst.nsw.gov.au
lyncdiscover.property.nsw.gov.au
lyncdiscover.oipic.nsw.gov.au
lyncdiscover.jobsfornsw.com.au
lyncdiscover.nrc.nsw.gov.au
lyncdiscover.tha.nsw.gov.au
lyncdiscover.fairtrading.nsw.gov.au
lyncdiscover.smallbusiness.nsw.gov.au
lyncdiscover.revenue.nsw.gov.au
lyncdiscover.ndiswc.nsw.gov.au
sfboos01.nswgov.ucfx.com
lyncdiscover.psc.nsw.gov.au
lyncdiscover.wiro.nsw.gov.au
lyncdiscover.rgdc.nsw.gov.au
lyncdiscover.finance.nsw.gov.au
lyncdiscover.gsc.nsw.gov.au
lyncwas.nswgov.ucfx.com
lyncdiscover.kidsguardian.nsw.gov.au
lyncdiscover.centreforwhs.nsw.gov.au
lyncdiscover.treasury.nsw.gov.au
autodiscover.nswgov.ucfx.com
lync.nswgov.ucfx.com
sfbext.nswgov.ucfx.com
lyncdiscover.wcc.nsw.gov.au
lyncdiscover.sydneyaustralia.com
mail.nswgov.ucfx.com
sfboos.nswgov.ucfx.com
lyncdiscover.nswgov.ucfx.com
lyncdiscover.liquorandgaming.nsw.gov.au
lyncdiscover.mhl.nsw.gov.au
lyncdiscover.safework.nsw.gov.au

Other certificates including the domain name ucfx.com

(limited to 100 certificates)
accessedge1.nswgov.ucfx.com
accessedge2.nswgov.ucfx.com
ipfxedge.ipfx.com
idc.nswgov.ucfx.com
ucfx.com
lyncgovweb01.nswgov.ucfx.com
ukedge.ipfx.com
accessedge2.nswgov.ucfx.com
*.ucfx.com
accessedge1.nswgov.ucfx.com
sip.nswgov.ucfx.com
accessedge2.nswgov.ucfx.com
accessedge1.nswgov.ucfx.com
ucfx.com
accessedge1.nswgov.ucfx.com
ipfxedge.ipfx.com
lyncgovweb01.nswgov.ucfx.com
sip.ucfx.com
auedge.ipfx.com
sip.nswgov.ucfx.com
accessedge1.nswgov.ucfx.com
lyncgovweb01.nswgov.ucfx.com
lyncgovweb01.nswgov.ucfx.com
accessedge2.nswgov.ucfx.com
lyncgovweb01.nswgov.ucfx.com
lyncgovweb01.nswgov.ucfx.com
lyncgovweb01.nswgov.ucfx.com
lyncgovweb01.nswgov.ucfx.com
*.ucfx.com
auedge.ipfx.com
*.ucfx.com
accessedge2.nswgov.ucfx.com
ipfxedge.ipfx.com
*.ucfx.com
lyncgovweb01.nswgov.ucfx.com
accessedge2.nswgov.ucfx.com
accessedge1.nswgov.ucfx.com
accessedge1.nswgov.ucfx.com
sip.nswgov.ucfx.com
sip.nswgov.ucfx.com
*.ucfx.com
accessedge1.nswgov.ucfx.com
accessedge1.nswgov.ucfx.com
sip.nswgov.ucfx.com
ucfx.com
lyncgovweb01.nswgov.ucfx.com
accessedge1.nswgov.ucfx.com
auedge.ipfx.com
sip.nswgov.ucfx.com
accessedge1.nswgov.ucfx.com
lyncgovweb01.nswgov.ucfx.com
lyncgovweb01.nswgov.ucfx.com

Certificate

The complete raw certificate details for lyncgovweb01.nswgov.ucfx.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMtDCCC5ygAwIBAgIIO4H0+RkdoggwDQYJKoZIhvcNAQELBQAwgcYxCzAJBgNV
BAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMSUw
IwYDVQQKExxTdGFyZmllbGQgVGVjaG5vbG9naWVzLCBJbmMuMTMwMQYDVQQLEypo
dHRwOi8vY2VydHMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeS8xNDAyBgNV
BAMTK1N0YXJmaWVsZCBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIw
HhcNMTkxMDA5MDIzNDQzWhcNMjAwMjIyMDI0MjAxWjBKMSEwHwYDVQQLExhEb21h
aW4gQ29udHJvbCBWYWxpZGF0ZWQxJTAjBgNVBAMTHGx5bmNnb3Z3ZWIwMS5uc3dn
b3YudWNmeC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcnYOo
VnCH0JZM79zrBLH5wE/TykUD8eGy+hBc9LaUIPz+Rh4p4owrUQxX8Mc4qenjd+vr
rQBqC9hDg89lPIiYeUxRYhb17GhI3vj0RA5mK5BvMCAgvjTUZEkE+rP0hTSfZgCU
Cyah44yTronbO+sG19n8LjL3y4BGzYo6EFMDgtzCCU/+vCD/jUlT4L6GM9fMUZnf
KoxCkMdOvqBGRAysxt9jLcjiWH6esZ3Qvo8ZNJm5d5fktAEYllfVyOV/3EQTjc78
dZCXvUauyrlUyCeSgyLdRwCqn5+qLBPcGx3hj8GidZ55jH2cFfNuiiKRElwHU13s
HaSNmf8E1nbnvXTlAgMBAAGjggkfMIIJGzAMBgNVHRMBAf8EAjAAMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwPQYDVR0fBDYw
NDAyoDCgLoYsaHR0cDovL2NybC5zdGFyZmllbGR0ZWNoLmNvbS9zZmlnMnMxLTE0
OS5jcmwwYwYDVR0gBFwwWjBOBgtghkgBhv1uAQcXATA/MD0GCCsGAQUFBwIBFjFo
dHRwOi8vY2VydGlmaWNhdGVzLnN0YXJmaWVsZHRlY2guY29tL3JlcG9zaXRvcnkv
MAgGBmeBDAECATCBggYIKwYBBQUHAQEEdjB0MCoGCCsGAQUFBzABhh5odHRwOi8v
b2NzcC5zdGFyZmllbGR0ZWNoLmNvbS8wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jZXJ0
aWZpY2F0ZXMuc3RhcmZpZWxkdGVjaC5jb20vcmVwb3NpdG9yeS9zZmlnMi5jcnQw
HwYDVR0jBBgwFoAUJUWBaFAmOD07LSy+zWrZtj2zZmMwggZpBgNVHREEggZgMIIG
XIIcbHluY2dvdndlYjAxLm5zd2dvdi51Y2Z4LmNvbYIgd3d3Lmx5bmNnb3Z3ZWIw
MS5uc3dnb3YudWNmeC5jb22CGGx5bmNkaXNjb3Zlci53Y2FhLnN5ZG5leYIbbHlu
Y2Rpc2NvdmVyLmlwYy5uc3cuZ292LmF1ghtseW5jZGlzY292ZXIuZHBjLm5zdy5n
b3YuYXWCGXNjaGVkdWxlci5uc3dnb3YudWNmeC5jb22CG2x5bmNkaXNjb3Zlci5i
cGIubnN3Lmdvdi5hdYIYc2ZiZXh0MDEubnN3Z292LnVjZnguY29tghtseW5jZGlz
Y292ZXIub3ZnLm5zdy5nb3YuYXWCImx5bmNkaXNjb3Zlci5nb3Zjb25uZWN0Lm5z
dy5nb3YuYXWCK2x5bmNkaXNjb3Zlci5yZXNwb25zaWJsZWdhbWJsaW5nLm5zdy5n
b3YuYXWCJ2x5bmNkaXNjb3Zlci5jdXN0b21lcnNlcnZpY2UubnN3Lmdvdi5hdYIr
bHluY2Rpc2NvdmVyLmluZHVzdHJpYWxyZWxhdGlvbnMubnN3Lmdvdi5hdYIcbHlu
Y2Rpc2NvdmVyLmtpZHMubnN3Lmdvdi5hdYIebHluY2Rpc2NvdmVyLnJhY2luZy5u
c3cuZ292LmF1giRseW5jZGlzY292ZXIuc3lkbmV5c3RhcnR1cGh1Yi5jb20uYXWC
HGx5bmNkaXNjb3Zlci5zaXJhLm5zdy5nb3YuYXWCK2x5bmNkaXNjb3Zlci5lc2xp
bnN1cmFuY2Vtb25pdG9yLm5zdy5nb3YuYXWCHmx5bmNkaXNjb3Zlci5vaWljYWMu
bnN3Lmdvdi5hdYIcbHluY2Rpc2NvdmVyLmd3aWMubnN3Lmdvdi5hdYIkbHluY2Rp
c2NvdmVyLnNlcnZpY2VmaXJzdC5uc3cuZ292LmF1giBseW5jZGlzY292ZXIucHJv
cGVydHkubnN3Lmdvdi5hdYIdbHluY2Rpc2NvdmVyLm9pcGljLm5zdy5nb3YuYXWC
Hmx5bmNkaXNjb3Zlci5qb2JzZm9ybnN3LmNvbS5hdYIbbHluY2Rpc2NvdmVyLm5y
Yy5uc3cuZ292LmF1ghtseW5jZGlzY292ZXIudGhhLm5zdy5nb3YuYXWCI2x5bmNk
aXNjb3Zlci5mYWlydHJhZGluZy5uc3cuZ292LmF1giVseW5jZGlzY292ZXIuc21h
bGxidXNpbmVzcy5uc3cuZ292LmF1gh9seW5jZGlzY292ZXIucmV2ZW51ZS5uc3cu
Z292LmF1gh5seW5jZGlzY292ZXIubmRpc3djLm5zdy5nb3YuYXWCGHNmYm9vczAx
Lm5zd2dvdi51Y2Z4LmNvbYIbbHluY2Rpc2NvdmVyLnBzYy5uc3cuZ292LmF1ghxs
eW5jZGlzY292ZXIud2lyby5uc3cuZ292LmF1ghxseW5jZGlzY292ZXIucmdkYy5u
c3cuZ292LmF1gh9seW5jZGlzY292ZXIuZmluYW5jZS5uc3cuZ292LmF1ghtseW5j
ZGlzY292ZXIuZ3NjLm5zdy5nb3YuYXWCF2x5bmN3YXMubnN3Z292LnVjZnguY29t
giRseW5jZGlzY292ZXIua2lkc2d1YXJkaWFuLm5zdy5nb3YuYXWCJGx5bmNkaXNj
b3Zlci5jZW50cmVmb3J3aHMubnN3Lmdvdi5hdYIgbHluY2Rpc2NvdmVyLnRyZWFz
dXJ5Lm5zdy5nb3YuYXWCHGF1dG9kaXNjb3Zlci5uc3dnb3YudWNmeC5jb22CFGx5
bmMubnN3Z292LnVjZnguY29tghZzZmJleHQubnN3Z292LnVjZnguY29tghtseW5j
ZGlzY292ZXIud2NjLm5zdy5nb3YuYXWCIGx5bmNkaXNjb3Zlci5zeWRuZXlhdXN0
cmFsaWEuY29tghRtYWlsLm5zd2dvdi51Y2Z4LmNvbYIWc2Zib29zLm5zd2dvdi51
Y2Z4LmNvbYIcbHluY2Rpc2NvdmVyLm5zd2dvdi51Y2Z4LmNvbYInbHluY2Rpc2Nv
dmVyLmxpcXVvcmFuZGdhbWluZy5uc3cuZ292LmF1ghtseW5jZGlzY292ZXIubWhs
Lm5zdy5nb3YuYXWCIGx5bmNkaXNjb3Zlci5zYWZld29yay5uc3cuZ292LmF1MB0G
A1UdDgQWBBTKMBBNh8fZ6y6d5O150USNRoSqITCCAQQGCisGAQQB1nkCBAIEgfUE
gfIA8AB3AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABba5eYr4A
AAQDAEgwRgIhAK+Rx1E885POXkozW/Gljta4FmyqoeTKoSZwleC41INRAiEAuCOF
lvsjT5gbgJzWDLtBkSY/Inhyoot++O81xIXw2ecAdQBep3P531bA57U2SH3QSeAy
epGaDIShEhKEGHWWgXFFWAAAAW2uXmSOAAAEAwBGMEQCIFmJ37VFF9ZRMHm2Eh9X
4BQ4rcmMs8qhOC8XrGns14yuAiA/y5q/l/ftDr5skpJc5jqOVCoSvrFZ73tAPIpm
h1yMBzANBgkqhkiG9w0BAQsFAAOCAQEAWpnNSn2d/AB6WiOlahWzRwREYPBzkN3L
0PbQpKBvJxx2Hkjt00j/Fa1F1JpPaxBnZjv5LuzBi13GnYis4kOSOcJQgtm1lVqv
+GUGeypLF8LjM6++1UHVlkdnsDJ5JYLWYFLlVDqoi3pNySijUJgmkNJ4jKvuXPlt
O+pKXAOEPekzGP14Omayl6ISM7qkhU9NH9oXiO8e20ESgebEMzcrE0p61zWRpqMb
/d9ODmmd+7PWo7tDmsi8q1sodU7SLdF+BsMDB5Y6Ci8QY0+Xh7EtlEQUoHA+bmaN
D7eT20L8xxGXpvGdRHDFqCXBaWaZEiN2OsxnH77GaR4AsAa2g0m/Tw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3J2DqFZwh9CWTO/c6wSx
+cBP08pFA/HhsvoQXPS2lCD8/kYeKeKMK1EMV/DHOKnp43fr660AagvYQ4PPZTyI
mHlMUWIW9exoSN749EQOZiuQbzAgIL401GRJBPqz9IU0n2YAlAsmoeOMk66J2zvr
BtfZ/C4y98uARs2KOhBTA4LcwglP/rwg/41JU+C+hjPXzFGZ3yqMQpDHTr6gRkQM
rMbfYy3I4lh+nrGd0L6PGTSZuXeX5LQBGJZX1cjlf9xEE43O/HWQl71Grsq5VMgn
koMi3UcAqp+fqiwT3Bsd4Y/BonWeeYx9nBXzbooikRJcB1Nd7B2kjZn/BNZ25710
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4287977670938829320
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 02:34:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 02:42:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lyncgovweb01.nswgov.ucfx.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27850100282558801663815301991660611938482514589926696209893873415315568891435736420721444334145115689422236355667112856472667025420593040899840956782472790898050567420096729332362152605878510814348248849242222307786936120367000281375796225743306898633598590568958921141424003799925720644988624677392450669040172203623480541360240475632249027962778726709512377933529941313671912646990624523289876478269664673570871976099454526773693682800489648017888330106817981987143457690443961827780236333601129319704249488328906959743839631335261518186444946386191396345185326828583800143950192790794713579392446888698967389730021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-149.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1632 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncgovweb01.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lyncgovweb01.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.wcaa.sydney'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ipc.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.dpc.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheduler.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bpb.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbext01.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ovg.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.govconnect.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.responsiblegambling.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.customerservice.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.industrialrelations.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.kids.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.racing.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.sydneystartuphub.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.sira.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.eslinsurancemonitor.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.oiicac.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.gwic.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.servicefirst.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.property.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.oipic.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.jobsfornsw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.nrc.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.tha.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.fairtrading.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.smallbusiness.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.revenue.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ndiswc.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfboos01.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.psc.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.wiro.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.rgdc.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.finance.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.gsc.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncwas.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.kidsguardian.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.centreforwhs.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.treasury.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbext.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.wcc.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.sydneyaustralia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfboos.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.nswgov.ucfx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.liquorandgaming.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.mhl.nsw.gov.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.safework.nsw.gov.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca30104d87c7d9eb2e9de4ed79d1448d4684aa21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016dae5e62be0000040300483046022100af91c7513cf393ce5e4a335bf1a58ed6b8166caaa1e4caa1267095e0b8d48351022100b8238596fb234f981b809cd60cbb4191263f227872a28b7ef8ef35c485f0d9e70075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dae5e648e000004030046304402205989dfb54517d6513079b6121f57e01438adc98cb3caa1382f17ac69ecd78cae02203fcb9abf97f7ed0ebe6c92925ce63a8e542a12beb159ef7b403c8a66875c8c07
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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