insights.elliemae.com

- Ellie Mae Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 03:75:26:ab:02:5a:c6:09:76:06:49:f8:9a:1a:22:6d was issued on by DigiCert Inc.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ellie Mae Inc.

Organization: Ellie Mae Inc.
State / Province: California
Locality: Pleasanton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:75:26:ab:02:5a:c6:09:76:06:49:f8:9a:1a:22:6d
Serial Number (int): 4595967000112759700424205637657436781
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 05:d1:f3:05:ff:cc:cd:0d:82:37:99:cf:42:64:8d:21:cc:63:e5:0d
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): c3:a7:a3:6d:04:5a:65:12:c1:ed:4e:d5:ed:70:64:fb:65:a1:53:36
Fingerprint (sha256): 01:e5:a8:55:45:ad:e8:7c:63:ae:ba:77:28:c5:f2:b0:ce:e9:e4:f9:cc:a1:e1:52:d1:ae:b1:41:97:b1:e5:bb

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate insights.elliemae.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for insights.elliemae.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

insights.elliemae.com
securesend-uat01.velocify.net
dialiq2-uat01.velocify.net
lmgateway-dit02b.velocify.net
import-dit01.rail3.com
pulseuatservice-dit01.velocify.net
inboundhandler-uat01.velocify.net
jobs-api-dit01.rail3.com
lm-dit02b.velocify.net
agentbridge-uat01.velocify.net
www.velocify.com
service-dit01.rail3.com
cdn-dit02b.velocify.net
agentbridge02-2-uat01.velocify.net
agentbridge02-dit01.rail3.com
inboundhandler2-uat01.velocify.net
dev.gaia.elliemae.com
agentbridge01-2-uat01.velocify.net
webapi-dit01.rail3.com
int.streaming.skydrive.rd.elliemae.io
partnerportal.elliemae.com
dialiqrouter-uat01.velocify.net
pulseuatservice-sit01.velocify.net
dialiq-dit01.rail3.com
coffi.elliemae.com
securesend-dit01.rail3.com
lmgateway-uat01.velocify.net
dialiq-uat01.velocify.net
service-uat01.velocify.net
inboundhandler-dit01.rail3.com
integrations2-api-uat01.velocify.net
integrations-api-uat01.velocify.net
integrations-api-dit01.rail3.com
cdn-dit01.rail3.com
lmgateway-dit01.rail3.com
peg.streaming.skydrive.rd.elliemae.io
dialiqdashboard-dit01.rail3.com
gaia.elliemae.com
cdn2-uat01.velocify.net
pulseuatservice-dit04.velocify.net
lm-dit01.rail3.com
agentbridge-dit01.rail3.com
webapi-uat01.velocify.net
pulseuatservice-dit03.velocify.net
agentbridge-dit02b.velocify.net
import-uat01.velocify.net
test.allregs.com
security-dit01.rail3.com
lm3-uat01.velocify.net
test.streaming.skydrive.rd.elliemae.io
cdn-uat01.velocify.net
stg.gaia.elliemae.com
leads-api-dit01.rail3.com
lm-uat01.velocify.net
assetservice2-uat01.velocify.net
agentbridge02-uat01.velocify.net
velocify.com
pulseuatservice-qa.velocify.net
shop.elliemae.com
core-api-uat01.velocify.net
assetservice-uat01.velocify.net
admin-dit01.rail3.com
agentbridge2-uat01.velocify.net
assetservice-dit02b.velocify.net
lmgateway2-uat01.velocify.net
core2-api-uat01.velocify.net
security-uat01.velocify.net
pulseuatservice-sit02.velocify.net
dialiq-dit02b.velocify.net
qa.gaia.elliemae.com
ian.qa.analytics.rd.elliemae.io
qa.streaming.skydrive.rd.elliemae.io
assetservice-dit01.rail3.com
security2-uat01.velocify.net
pulseuatservice-dit02.velocify.net
core-api-dit01.rail3.com
agentbridge01-uat01.velocify.net
agentbridge01-dit01.rail3.com
pulseuatservice-uat01.velocify.net
cdn3-uat01.velocify.net
pulseuatservice-sit03.velocify.net
lm2-uat01.velocify.net
pulse-api-uat01.velocify.net
marketplace.elliemae.com
dialiqrouter-dit01.rail3.com

Other certificates including the domain name elliemae.com

(limited to 100 certificates)
website.elliemae.com
insights.elliemae.com
api.stg.gaia.elliemae.com
stg.coffi.elliemae.com
api-stage.ccs.notification.elliemae.com
stg.tsmonitor.elliemae.com
*.idp.elliemae.com
prod01.elliemae.com
phoenix.access.elliemae.com
insights.elliemae.com
docs.concept.partner.elliemae.com
us-west-2.www.staging.marketing.elliemae.com
sseqadashboard.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
cds1.cvent.com
mavent.com
insights.elliemae.com
nonprod01.elliemae.com
insights-demo.elliemae.com
*.api.elliemae.com
prod01.elliemae.com
dev.emstatuscenter.elliemae.com
insights.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
api-concept.presence.notification.elliemae.com
cds1.cvent.com
prod.ns-sse-processor.notification.elliemae.com
cds1.cvent.com
docs.developer.elliemae.com
api.peg.asset.rd.elliemae.io
stg.beacon.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
stg.coffi.elliemae.com
api-concept.presence.notification.elliemae.com
*.mortgage-application.net
qa.modules.elliemaeservices.com
insights.elliemae.com
velocify.net
beacon.elliemae.com
cds1.cvent.com
api.ccs.notification.elliemae.com
cds1.cvent.com
*.api.elliemae.com
origin-api.push.notification.elliemae.com
api-stg.presence.notification.elliemae.com
us-east-1.www.staging.marketing.elliemae.com
elliemae.com
prod01.elliemae.com
qa.beacon.elliemae.com
docs.developer.elliemae.com
prod01.elliemae.com
api.coffi.elliemae.com
api.stg.coffi.elliemae.com
cds1.cvent.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
*.admin.elliemae.com
dev-iceedu.elliemae.com
partnerconnect.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
education.elliemae.com
epps.elliemae.com
*.admin.elliemae.com
pemdemo.elliemae.com
dev.resourcecenterapi.elliemae.com
insights.elliemae.com
dev.rccasemgt.elliemae.com
emise1.corp.elliemae.com
concept.developer.elliemae.com
cds1.cvent.com
us-east-1.www.simplifile.prod.marketing.elliemae.com
api.subscriptions.elliemae.com
api.coffi.elliemae.com
velocify.net
dev.access.elliemae.com
beacon.elliemae.com
dev3.api.ellielabs.com
concept-tfe.api.elliemae.com
prod01.elliemae.com
qa.velocify.net
qa.education.elliemae.com
insights.elliemae.com
dev.gaia.elliemae.com
dev3.api.ellielabs.com
bazar.int.consumer-connect.rd.elliemae.io
*.api.elliemae.com
creative.elliemae.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
dnl.shop.elliemae.com
api.qa.gaia.elliemae.com
prod01.elliemae.com
phx.cf-lms.elliemae.com
api.peg.cms.rd.elliemae.io
api.ccs.notification.elliemae.com
docs2.developer.elliemae.com
us-west-2.www.velocify.staging.marketing.elliemae.com
mavent.com
cds1.cvent.com
creative.elliemae.com
forum.elliemae.com
stg.raven.elliemae.com

Certificate

The complete raw certificate details for insights.elliemae.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqul1nxRorbv1DjA5+Af9
yJL5qTL/3knc2Ool0SJOrZQ9p3R25/MrBD1E+mejai7tMif7SlCZDGuSlgtlD2xP
ZHr5eSSiahtSsHLTHnXgrNmfGychEBjm1SDyjz4hwd4i+Ls9jqyBbmCgT7bjyLKB
4cfjRJAAhXe5Da4+bU3ewM9bcwgheU4fhR7qfmTv7CuOJMxt+UII1TXGRFwWcZ5B
jb0TCI9IyCS8id1fJvCJUy805jRgaREV36cLfUgWPGF4fXQYkcked8ZCuzvsJ77/
WDpDcEAb77UH2tD3tuhUfA9J8tFRNdPK2KU0wG8VkyxOwmReEDjuB641Uv/q39Su
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4595967000112759700424205637657436781
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ellie Mae Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'insights.elliemae.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21575634993971042977181601581123360067280367546212003825661960811746395143929270889042520013364930112765645957181785412718294408469134844521262934693138906461738802938864151599798459303730740348465232001308819548825428788826389193581370485689418038917457709567600826032361732271645598242408082586401523586811548634990020186261121603184800792423652550050909470314306020167075495959403105796749235222186294584250999525412277209442115202878665716176072420816328832574522357712054359482389267800922736463639460884960633011366582831650624478828394926411106821367775614056186138537421219270252848888525486831784633373601311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05d1f305ffcccd0d823799cf42648d21cc63e50d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesend-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-dit01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-api-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge02-2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge02-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gaia.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge01-2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.streaming.skydrive.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerportal.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-sit01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffi.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesend-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations2-api-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peg.streaming.skydrive.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqdashboard-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaia.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-dit04.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-dit03.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.allregs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm3-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.streaming.skydrive.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.gaia.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads-api-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge02-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-qa.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core-api-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core2-api-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-sit02.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.gaia.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ian.qa.analytics.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.streaming.skydrive.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-dit02.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core-api-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge01-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge01-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn3-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-sit03.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter-dit01.rail3.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167a8815b8e000004030047304502206d1411b91aef36a39bf0a9a4dcc97407600dcc840e57fd527797d41c597dd2c9022100849f8c700614b467d2d32b36c6b98da572b424620b80c4aad1c52f273f16fd6d0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000167a8815c5400000403004630440220100c4cf8efeb3a3a76b3e7a4e687df38926586ba80f376cdaf639fa37a3979810220129d76c90a70105596f3dfb52270b9690a68aab8827421fba2ffb27c53125b52
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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