elliemae.com

- Ellie Mae Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0f:40:26:14:e1:65:a0:71:46:c6:02:60:c5:79:29:27 was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ellie Mae Inc.

Organization: Ellie Mae Inc.
State / Province: California
Locality: Pleasanton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:40:26:14:e1:65:a0:71:46:c6:02:60:c5:79:29:27
Serial Number (int): 20271499321605142496348743260534548775
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 78:32:84:40:cc:f9:23:b4:31:6e:00:b3:45:5c:66:2f:cf:de:7a:53
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 03:81:2e:55:ca:67:9c:9a:21:87:94:83:98:82:03:7c:13:5b:ae:94
Fingerprint (sha256): 08:57:78:be:fc:79:cb:f1:79:0e:f8:c1:ea:1f:ac:86:0c:16:33:16:e0:63:53:1c:b1:4c:b5:59:ad:d7:b3:45

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate elliemae.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elliemae.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www1.elliemae.com
www.velocify.com
www.secure-loandirect.com
www.mtgpricing.com
www.encompasswebcenter.com
www.encompassmobile.com
www.elliemae.com
www.allregsloanlibrary.com
webapi.stg.velocify.com
webapi.prod.velocify.com
webapi.dev1.velocify.net
velocify.com
titlecenter.elliemae.com
test.allregsloanlibrary.com
stg.api.subscriptions.elliemae.com
service.stg.velocify.com
service.prod.velocify.com
service.dev1.velocify.net
security.stg.velocify.com
security.prod.velocify.com
security.dev1.velocify.net
qa.api.subscriptions.elliemae.com
pulse-api.stg.velocify.com
pulse-api.prod.velocify.com
pulse-api.dev1.velocify.net
preprod-security.stg.velocify.com
preprod-security.prod.velocify.com
preprod-lmgateway.stg.velocify.com
preprod-lmgateway.prod.velocify.com
preprod-integrations-api.stg.velocify.com
preprod-integrations-api.prod.velocify.com
preprod-inboundhandler.stg.velocify.com
preprod-inboundhandler.prod.velocify.com
preprod-dialiqrouter.stg.velocify.com
preprod-dialiqrouter.prod.velocify.com
preprod-dialiq.stg.velocify.com
preprod-dialiq.prod.velocify.com
preprod-assetservice.stg.velocify.com
preprod-assetservice.prod.velocify.com
preprod-agentbridge.stg.velocify.com
preprod-agentbridge.prod.velocify.com
perf.encompassmobile.com
partnerportal.elliemae.com
mtgpricing.com
mrweb2.mortgagereturns.com
mrweb.mortgagereturns.com
lmgateway.stg.velocify.com
lmgateway.prod.velocify.com
lmgateway.dev1.velocify.net
lm.stg.velocify.com
lm.prod.velocify.com
lm.dev1.velocify.net
lm-na02.stg.velocify.com
lm-na02.prod.velocify.com
leadcenter.elliemaeservices.com
integrations-api.stg.velocify.com
integrations-api.prod.velocify.com
integrations-api.dev1.velocify.net
inboundhandler.stg.velocify.com
inboundhandler.prod.velocify.com
inboundhandler.dev1.velocify.net
import.stg.velocify.com
import.prod.velocify.com
import.dev1.velocify.net
img.ecrm.ellielabs.com
ian.qa.analytics.rd.elliemae.io
experience.elliemae.com
epps.elliemae.com
epps-staging.elliemae.com
ep9.encompassmobile.com
ep3.encompassmobile.com
encompasswebcenter.com
encompass.stg.velocify.com
encompass.prod.velocify.com
encompass.dev1.velocify.net
elliemae.com
ecrm.ellielabs.com
downloadspecial.elliemae.com
dialiqrouter.stg.velocify.com
dialiqrouter.prod.velocify.com
dialiqrouter.dev1.velocify.net
dialiq.stg.velocify.com
dialiq.prod.velocify.com
dialiq.dev1.velocify.net
cdn.stg.velocify.com
cdn.prod.velocify.com
cdn.dev1.velocify.net
cdn-na02.stg.velocify.com
cdn-na02.prod.velocify.com
assetservice.stg.velocify.com
assetservice.prod.velocify.com
assetservice.dev1.velocify.net
appraisalcenter.elliemae.com
api.subscriptions.elliemae.com
allregsloanlibrary.com
allregs.elliemae.com
agentbridge.stg.velocify.com
agentbridge.prod.velocify.com
agentbridge.dev1.velocify.net
9857689037.brokersite.com

Other certificates including the domain name elliemae.com

(limited to 100 certificates)
website.elliemae.com
insights.elliemae.com
api.stg.gaia.elliemae.com
stg.coffi.elliemae.com
api-stage.ccs.notification.elliemae.com
stg.tsmonitor.elliemae.com
*.idp.elliemae.com
prod01.elliemae.com
phoenix.access.elliemae.com
insights.elliemae.com
docs.concept.partner.elliemae.com
us-west-2.www.staging.marketing.elliemae.com
sseqadashboard.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
cds1.cvent.com
mavent.com
insights.elliemae.com
nonprod01.elliemae.com
insights-demo.elliemae.com
*.api.elliemae.com
prod01.elliemae.com
dev.emstatuscenter.elliemae.com
insights.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
api-concept.presence.notification.elliemae.com
cds1.cvent.com
prod.ns-sse-processor.notification.elliemae.com
cds1.cvent.com
docs.developer.elliemae.com
api.peg.asset.rd.elliemae.io
stg.beacon.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
stg.coffi.elliemae.com
api-concept.presence.notification.elliemae.com
*.mortgage-application.net
qa.modules.elliemaeservices.com
insights.elliemae.com
velocify.net
beacon.elliemae.com
cds1.cvent.com
api.ccs.notification.elliemae.com
cds1.cvent.com
*.api.elliemae.com
origin-api.push.notification.elliemae.com
api-stg.presence.notification.elliemae.com
us-east-1.www.staging.marketing.elliemae.com
elliemae.com
prod01.elliemae.com
qa.beacon.elliemae.com
docs.developer.elliemae.com
prod01.elliemae.com
api.coffi.elliemae.com
dev.resourcecenterapi.elliemae.com
api.stg.coffi.elliemae.com
cds1.cvent.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
*.admin.elliemae.com
dev-iceedu.elliemae.com
partnerconnect.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
education.elliemae.com
epps.elliemae.com
*.admin.elliemae.com
pemdemo.elliemae.com
dev.resourcecenterapi.elliemae.com
insights.elliemae.com
dev.rccasemgt.elliemae.com
emise1.corp.elliemae.com
concept.developer.elliemae.com
cds1.cvent.com
us-east-1.www.simplifile.prod.marketing.elliemae.com
api.subscriptions.elliemae.com
api.coffi.elliemae.com
velocify.net
dev.access.elliemae.com
beacon.elliemae.com
dev3.api.ellielabs.com
concept-tfe.api.elliemae.com
prod01.elliemae.com
qa.velocify.net
qa.education.elliemae.com
insights.elliemae.com
dev.gaia.elliemae.com
dev3.api.ellielabs.com
bazar.int.consumer-connect.rd.elliemae.io
*.api.elliemae.com
creative.elliemae.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
dnl.shop.elliemae.com
api.qa.gaia.elliemae.com
prod01.elliemae.com
phx.cf-lms.elliemae.com
api.peg.cms.rd.elliemae.io
api.ccs.notification.elliemae.com
docs2.developer.elliemae.com
us-west-2.www.velocify.staging.marketing.elliemae.com
mavent.com
cds1.cvent.com
creative.elliemae.com
forum.elliemae.com

Certificate

The complete raw certificate details for elliemae.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTU3xLz5EZ6fN7ayk9DI
Edbaqnr6xmGjA+9bm7fn3XVDmrq7sKGJBm36Hw7meVECVWWONXTHp6JN6KFop8m7
Vq4HujBxaOFPWmOaYOHph+Qq5JmOGdvYlFveROPXAjZSk3M51xSq/evR+3xLLhNc
ZXwHX11vHdrGh5dOeC4tW56ZaoWcJaRMVZsPnGHlW8lfif3C7Clh6f4QB8zBOZiQ
E3BZ4etqUI6fqHtAFuIcVie51cpTHro32c3ERUfmLLHbLhDwuYedda0UN9KpWTxB
KIdA3h2WnUQUR16UIkjI+DwL8xb3hU90uCAw2hy90/j0HltMzZgkWLYJuWCcTlT5
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20271499321605142496348743260534548775
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ellie Mae Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elliemae.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24895188776124869944328658460981828010272490453459549683183141225394353270839983040200794578785339671332712673124495507409572520873987430877863776424637474977672140914694249825692320254961769510447242285573765326538917504954562659164228397624912792412981307404453121288006365804093037743729614190599074815988850585683809421087019269288465043868525631519733421286986406277611824313839822149977165148650508094622524942253321466849929152944524560815545700602727269393576405722131628889890362925716503843345343870427100770179773535469642121482285415161256376009191263745449795997317417522250297678422330783312018679331249
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78328440ccf923b4316e00b3455c662fcfde7a53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2885 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure-loandirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtgpricing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encompasswebcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titlecenter.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.api.subscriptions.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.api.subscriptions.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-security.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-security.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-lmgateway.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-lmgateway.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-integrations-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-integrations-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-inboundhandler.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-inboundhandler.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiqrouter.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiqrouter.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiq.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiq.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-assetservice.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-assetservice.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-agentbridge.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-agentbridge.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerportal.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtgpricing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrweb2.mortgagereturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrweb.mortgagereturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-na02.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-na02.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadcenter.elliemaeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.ecrm.ellielabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ian.qa.analytics.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epps.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epps-staging.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep9.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep3.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompasswebcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecrm.ellielabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadspecial.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-na02.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-na02.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisalcenter.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.subscriptions.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allregs.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9857689037.brokersite.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00275939904ede99c796e5fa875b74388520621c8ccf5b3a907e772dca19da0144eacfa28d58a4daa916a8d16552c27d5ed5c6047a109f5f1984b8bdd6b704452bbbfa2d704102cef9b1ba4fa052ea89ccb30213775af397c3ca9060ee322caafed3f46cf5c49d00d5436112ba947c6e3cce9ffeef644857c41e44deb91955d0c1ba467ee7c226bd66dfbebbed879765a050603ffda0e8dab786cd4e207dd2f53180e0b18d041d90b57bbd33a1468b7c2ec38c60badf5a216fe29461feeda82b11bad942553dda8b76dc2c955972ef00cba726c4d5dc0f21cbfc4c14bd4f60ae7f1644b0336d479d072ea6b46e8b57a067680f14c2133c7817130d0a1b73f679fa