website.elliemae.com

- ELLIE MAE, INC. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 09:0b:a3:1e:36:b4:6c:f5:e9:ff:4b:30:54:59:55:1c was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ELLIE MAE, INC.

Organization: ELLIE MAE, INC.
State / Province: California
Locality: Pleasanton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:0b:a3:1e:36:b4:6c:f5:e9:ff:4b:30:54:59:55:1c
Serial Number (int): 12023475654048708340034323354375247132
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f2:15:8e:e1:92:7c:ad:89:bb:b8:2a:c5:a1:e6:ea:86:c2:14:5b:8e
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 8c:c0:ee:ff:77:08:00:0f:f3:b1:64:c0:32:ff:27:bc:e5:a9:f0:f4
Fingerprint (sha256): 00:17:f2:1d:1a:61:96:d3:cc:70:01:86:97:2a:4b:ff:0a:46:eb:83:e0:a0:10:20:22:34:c3:1e:c5:c0:fe:46

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate website.elliemae.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for website.elliemae.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

website.elliemae.com
qa.raven.elliemae.com
stg.chat.elliemae.com
chat.elliemae.com

Other certificates including the domain name elliemae.com

(limited to 100 certificates)
website.elliemae.com
insights.elliemae.com
api.stg.gaia.elliemae.com
stg.coffi.elliemae.com
api-stage.ccs.notification.elliemae.com
stg.tsmonitor.elliemae.com
*.idp.elliemae.com
prod01.elliemae.com
phoenix.access.elliemae.com
insights.elliemae.com
docs.concept.partner.elliemae.com
us-west-2.www.staging.marketing.elliemae.com
sseqadashboard.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
cds1.cvent.com
mavent.com
insights.elliemae.com
nonprod01.elliemae.com
insights-demo.elliemae.com
*.api.elliemae.com
prod01.elliemae.com
dev.emstatuscenter.elliemae.com
insights.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
api-concept.presence.notification.elliemae.com
cds1.cvent.com
prod.ns-sse-processor.notification.elliemae.com
cds1.cvent.com
docs.developer.elliemae.com
api.peg.asset.rd.elliemae.io
stg.beacon.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
stg.coffi.elliemae.com
api-concept.presence.notification.elliemae.com
*.mortgage-application.net
qa.modules.elliemaeservices.com
insights.elliemae.com
velocify.net
beacon.elliemae.com
cds1.cvent.com
api.ccs.notification.elliemae.com
cds1.cvent.com
*.api.elliemae.com
origin-api.push.notification.elliemae.com
api-stg.presence.notification.elliemae.com
us-east-1.www.staging.marketing.elliemae.com
elliemae.com
prod01.elliemae.com
qa.beacon.elliemae.com
docs.developer.elliemae.com
prod01.elliemae.com
api.coffi.elliemae.com
dev.resourcecenterapi.elliemae.com
api.stg.coffi.elliemae.com
cds1.cvent.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
*.admin.elliemae.com
dev-iceedu.elliemae.com
partnerconnect.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
education.elliemae.com
epps.elliemae.com
*.admin.elliemae.com
pemdemo.elliemae.com
dev.resourcecenterapi.elliemae.com
insights.elliemae.com
dev.rccasemgt.elliemae.com
emise1.corp.elliemae.com
concept.developer.elliemae.com
cds1.cvent.com
us-east-1.www.simplifile.prod.marketing.elliemae.com
api.subscriptions.elliemae.com
api.coffi.elliemae.com
velocify.net
dev.access.elliemae.com
beacon.elliemae.com
dev3.api.ellielabs.com
concept-tfe.api.elliemae.com
prod01.elliemae.com
qa.velocify.net
qa.education.elliemae.com
insights.elliemae.com
dev.gaia.elliemae.com
dev3.api.ellielabs.com
bazar.int.consumer-connect.rd.elliemae.io
*.api.elliemae.com
creative.elliemae.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
dnl.shop.elliemae.com
api.qa.gaia.elliemae.com
prod01.elliemae.com
phx.cf-lms.elliemae.com
api.peg.cms.rd.elliemae.io
api.ccs.notification.elliemae.com
docs2.developer.elliemae.com
us-west-2.www.velocify.staging.marketing.elliemae.com
mavent.com
cds1.cvent.com
creative.elliemae.com
forum.elliemae.com

Certificate

The complete raw certificate details for website.elliemae.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lUrRL7BHHRDBgPAWxvM
cz16Sm10auBzmPmd0zJBg/LJ3YGPok0aZOJWXonh3VowVxIHp82orUldkBu7MOfD
ib+8nCKj3c7zPsxuhZU88pjpA/Qua53Z1RK3/LrqI/KOKJKviv0zK5xahclLf/68
5gUnY6raBbURori0fDCzNK2VRFxKBtTyZi8SVmxzkWTvP0mgxLRO/UIBLoFtwgS6
SPmRBmxEWTAI+rOh78mz+H0L74cFtAzazPOJ5cbSYT8eJlYAENap5N1KPTT98b1E
t4n3P2gNc3m4ktszM9x7mReoF3WP9r/MmX4OHWDqvO292Id8Wb1nHWO1brXti2Vr
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12023475654048708340034323354375247132
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ELLIE MAE, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'website.elliemae.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28066902110403613889755921207838211343947726987286600588818414320142611893734708536864715488920160510128502673603269701650717262191331273930851657311443048048143782023397843966562965345139185760220486362578148046094377537569462454559461373805345440559735454593069337182978816480786223628951719308991069871306966830251176258017524325944093107956878006034306756739103244091577609175285341246600753212292276109204567745454933379475855905817830813643566814816523051505220035315804232998426380849794699415235710113685325454915032571854038653824609685720065014767161170734370079319605369668443898028642246037623545086176177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2158ee1927cad89bbb82ac5a1e6ea86c2145b8e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'website.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.raven.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.chat.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.elliemae.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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