insights.elliemae.com

- Ellie Mae Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0a:1c:70:3d:b2:34:f6:2c:eb:93:e1:df:f4:a1:8f:1e was issued on by DigiCert Inc.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ellie Mae Inc.

Organization: Ellie Mae Inc.
State / Province: California
Locality: Pleasanton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:1c:70:3d:b2:34:f6:2c:eb:93:e1:df:f4:a1:8f:1e
Serial Number (int): 13439940787834014681455067696872918814
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0d:eb:23:d1:81:10:e3:09:91:d2:38:2d:69:3d:1e:cc:2f:c2:c5:ec
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 86:44:f7:32:4b:60:61:4d:80:50:0c:c3:4c:3d:9e:c5:d1:bf:05:b8
Fingerprint (sha256): 0b:fb:a3:b5:60:2e:ea:3a:ba:91:85:e8:a6:19:bb:83:bc:45:2f:ac:db:68:24:8c:e3:09:92:90:a5:2e:99:f0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate insights.elliemae.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for insights.elliemae.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

insights.elliemae.com
service-dit01.rail3.com
import-uat01.velocify.net
lmgateway-dit01.rail3.com
security-uat01.velocify.net
agentbridge-dit02b.velocify.net
security-dit01.rail3.com
lm3-uat01.velocify.net
core2-api-uat01.velocify.net
demo.allregs.com
dialiqrouter-uat01.velocify.net
agentbridge01-uat01.velocify.net
peg.allregs.com
cdn-dit02b.velocify.net
pulse-api-uat01.velocify.net
lmgateway-uat01.velocify.net
import-dit01.rail3.com
agentbridge02-dit01.rail3.com
agentbridge-dit01.rail3.com
lm-dit02b.velocify.net
dialiq-uat01.velocify.net
velocify.com
jobs-api-dit01.rail3.com
inboundhandler-uat01.velocify.net
dialiq-dit02b.velocify.net
qa.streaming.skydrive.rd.elliemae.io
integrations-api-dit01.rail3.com
assetservice2-uat01.velocify.net
pulseuatservice-dit03.velocify.net
pulseuatservice-qa.velocify.net
pulseuatservice-dit01.velocify.net
shop.elliemae.com
www.velocify.com
ian.qa.analytics.rd.elliemae.io
cdn3-uat01.velocify.net
cdn2-uat01.velocify.net
dialiqdashboard-dit01.rail3.com
cdn-dit01.rail3.com
assetservice-dit02b.velocify.net
gaia.elliemae.com
agentbridge2-uat01.velocify.net
int.streaming.skydrive.rd.elliemae.io
peg.streaming.skydrive.rd.elliemae.io
lm-uat01.velocify.net
dialiqrouter-dit01.rail3.com
pulseuatservice-sit01.velocify.net
lm-dit01.rail3.com
webapi-uat01.velocify.net
lmgateway-dit02b.velocify.net
test.streaming.skydrive.rd.elliemae.io
inboundhandler2-uat01.velocify.net
security2-uat01.velocify.net
dialiq-dit01.rail3.com
service-uat01.velocify.net
pulseuatservice-uat01.velocify.net
dev.gaia.elliemae.com
agentbridge01-2-uat01.velocify.net
agentbridge02-uat01.velocify.net
pulseuatservice-sit02.velocify.net
assetservice-uat01.velocify.net
agentbridge02-2-uat01.velocify.net
admin-dit01.rail3.com
int.allregs.com
qa.allregs.com
coffi.elliemae.com
qa.gaia.elliemae.com
integrations-api-uat01.velocify.net
agentbridge01-dit01.rail3.com
dialiq2-uat01.velocify.net
securesend-uat01.velocify.net
partnerportal.elliemae.com
core-api-uat01.velocify.net
webapi-dit01.rail3.com
test.allregs.com
lmgateway2-uat01.velocify.net
cdn-uat01.velocify.net
marketplace.elliemae.com
leads-api-dit01.rail3.com
lm2-uat01.velocify.net
integrations2-api-uat01.velocify.net
agentbridge-uat01.velocify.net
securesend-dit01.rail3.com
pulseuatservice-dit02.velocify.net
core-api-dit01.rail3.com
stg.gaia.elliemae.com
assetservice-dit01.rail3.com
inboundhandler-dit01.rail3.com
pulseuatservice-dit04.velocify.net
pulseuatservice-sit03.velocify.net

Other certificates including the domain name elliemae.com

(limited to 100 certificates)
website.elliemae.com
insights.elliemae.com
api.stg.gaia.elliemae.com
stg.coffi.elliemae.com
api-stage.ccs.notification.elliemae.com
stg.tsmonitor.elliemae.com
*.idp.elliemae.com
prod01.elliemae.com
phoenix.access.elliemae.com
insights.elliemae.com
docs.concept.partner.elliemae.com
us-west-2.www.staging.marketing.elliemae.com
sseqadashboard.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
cds1.cvent.com
mavent.com
insights.elliemae.com
nonprod01.elliemae.com
insights-demo.elliemae.com
*.api.elliemae.com
prod01.elliemae.com
dev.emstatuscenter.elliemae.com
insights.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
api-concept.presence.notification.elliemae.com
cds1.cvent.com
prod.ns-sse-processor.notification.elliemae.com
cds1.cvent.com
docs.developer.elliemae.com
api.peg.asset.rd.elliemae.io
stg.beacon.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
stg.coffi.elliemae.com
api-concept.presence.notification.elliemae.com
*.mortgage-application.net
qa.modules.elliemaeservices.com
insights.elliemae.com
velocify.net
beacon.elliemae.com
cds1.cvent.com
api.ccs.notification.elliemae.com
cds1.cvent.com
*.api.elliemae.com
origin-api.push.notification.elliemae.com
api-stg.presence.notification.elliemae.com
us-east-1.www.staging.marketing.elliemae.com
elliemae.com
prod01.elliemae.com
qa.beacon.elliemae.com
docs.developer.elliemae.com
prod01.elliemae.com
api.coffi.elliemae.com
dev.resourcecenterapi.elliemae.com
api.stg.coffi.elliemae.com
cds1.cvent.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
*.admin.elliemae.com
dev-iceedu.elliemae.com
partnerconnect.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
education.elliemae.com
epps.elliemae.com
*.admin.elliemae.com
pemdemo.elliemae.com
dev.resourcecenterapi.elliemae.com
insights.elliemae.com
dev.rccasemgt.elliemae.com
emise1.corp.elliemae.com
concept.developer.elliemae.com
cds1.cvent.com
us-east-1.www.simplifile.prod.marketing.elliemae.com
api.subscriptions.elliemae.com
api.coffi.elliemae.com
velocify.net
dev.access.elliemae.com
beacon.elliemae.com
dev3.api.ellielabs.com
concept-tfe.api.elliemae.com
prod01.elliemae.com
qa.velocify.net
qa.education.elliemae.com
insights.elliemae.com
dev.gaia.elliemae.com
dev3.api.ellielabs.com
bazar.int.consumer-connect.rd.elliemae.io
*.api.elliemae.com
creative.elliemae.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
dnl.shop.elliemae.com
api.qa.gaia.elliemae.com
prod01.elliemae.com
phx.cf-lms.elliemae.com
api.peg.cms.rd.elliemae.io
api.ccs.notification.elliemae.com
docs2.developer.elliemae.com
us-west-2.www.velocify.staging.marketing.elliemae.com
mavent.com
cds1.cvent.com
creative.elliemae.com
forum.elliemae.com

Certificate

The complete raw certificate details for insights.elliemae.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IpbJuz8b1jhudW0C00i
XM1aWx0OOoW19xPXviCn1/igfpIIwJGjabnlOWgaKwD0oCkqLVhVB7n5QeofG2+A
Wr1FAHXqwpbkLM3r8/eW0zvpTBduT7QuPHOssA1R3txudTybaq5q2vRPHMeajV+i
gBC3E5/fT5CqPABFSDKdmRWYSFPc2azpYkDJESdJecsyYAluyt41UxSyctzTNfaB
Loe/K95KU2ZlzlVPA3rSzimp8EZSL1T+qkjhLGWIMxa4I7idtgnrzX3S0qrgEQpA
+BE5+4FneNMQzGUqCcnsK2EA7qM4LKz+miouwccJ/mJvXzT0ZY0cIM8HCI1YI4Nq
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13439940787834014681455067696872918814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ellie Mae Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'insights.elliemae.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28850559449598160127934376219419814731420876497777136552195172003910464561113536055556308851704255248672232184019617518362624557592466879845762036431978425162336818713340967178101802225581817047869374803432705337829124656622815728035979508273206487889278114978379139464446502287676298475292395963791621795520748608278690678288460437892192769898653689632052400193245853429793270857896885770912133283387957235898458378990442598954805515720067486179321527006849068634808611540214671978545874766900780493140498871600538424429514484006923717841131682106137403713328909003826607831500171499928710881622608438522479561108089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0deb23d18110e30991d2382d693d1ecc2fc2c5ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2554 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm3-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core2-api-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.allregs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge01-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peg.allregs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge02-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-api-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.streaming.skydrive.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-dit03.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-qa.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-dit01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ian.qa.analytics.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn3-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqdashboard-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaia.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.streaming.skydrive.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peg.streaming.skydrive.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-sit01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.streaming.skydrive.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gaia.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge01-2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge02-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-sit02.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge02-2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.allregs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.allregs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffi.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.gaia.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge01-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesend-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerportal.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core-api-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.allregs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads-api-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations2-api-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesend-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-dit02.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core-api-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.gaia.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-dit04.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-sit03.velocify.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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