insights.elliemae.com

- Ellie Mae Inc. -

Issued by DigiCert ECC Secure Server CA

About this certificate

This digital certificate with serial number 06:14:69:7a:3d:a7:5f:2e:88:60:5f:03:95:2a:a3:7a was issued on by DigiCert Inc.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ellie Mae Inc.

Organization: Ellie Mae Inc.
State / Province: California
Locality: Pleasanton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:14:69:7a:3d:a7:5f:2e:88:60:5f:03:95:2a:a3:7a
Serial Number (int): 8081353249805327649807904289250255738
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: fc:29:ae:a0:04:44:2c:87:9a:fb:57:d9:cb:34:66:db:9f:af:84:c6
AuthorityKeyId: a3:9d:e6:1f:f9:da:39:4f:c0:6e:e8:91:cb:95:a5:da:31:e2:0a:9f

Fingerprint (sha1): 00:36:61:d1:73:2d:3a:79:f5:74:3d:2b:c8:cc:20:64:ad:22:82:9f
Fingerprint (sha256): 0e:91:00:76:07:7e:73:75:3c:4d:88:63:ed:fb:df:d9:9f:84:51:fe:89:98:45:fa:4f:3e:d0:0d:d3:44:38:12

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertECCSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-ecc-g1.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-ecc-g1.crl

Check the revocation status for certificate insights.elliemae.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for insights.elliemae.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA256

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

insights.elliemae.com
coffi.elliemae.com
dialiq2-uat01.velocify.net
service-dit01.rail3.com
security-dit01.rail3.com
dialiq-uat01.velocify.net
peg.streaming.skydrive.rd.elliemae.io
dialiqrouter-uat01.velocify.net
peg.allregs.com
int.allregs.com
webapi-dit01.rail3.com
marketplace.elliemae.com
assetservice-uat01.velocify.net
agentbridge01-2-uat01.velocify.net
staging.allregs.com
agentbridge-dit02b.velocify.net
dcui-customer.dsdev.datalake.rd.elliemae.io
test.allregs.com
cdn-dit01.rail3.com
lmgateway-dit01.rail3.com
agentbridge-dit01.rail3.com
assetservice2-uat01.velocify.net
portal.data.elliemae.com
cdn-uat01.velocify.net
pulseuatservice-dit01.velocify.net
lm-dit01.rail3.com
import-dit01.rail3.com
dialiq-dit01.rail3.com
core-api-uat01.velocify.net
velocify.com
lmgateway2-uat01.velocify.net
pulseuatservice-uat01.velocify.net
dialiq-dit02b.velocify.net
agentbridge02-2-uat01.velocify.net
assetservice-dit02b.velocify.net
integrations2-api-uat01.velocify.net
integrations-api-dit01.rail3.com
shop.elliemae.com
dialiqrouter-dit01.rail3.com
cdn-dit02b.velocify.net
dialiqdashboard-dit01.rail3.com
agentbridge-uat01.velocify.net
agentbridge01-uat01.velocify.net
security-uat01.velocify.net
pulseuatservice-dit02.velocify.net
www.velocify.com
integrations-api-uat01.velocify.net
securesend-dit01.rail3.com
security2-uat01.velocify.net
inboundhandler2-uat01.velocify.net
dcui-customer.dsint2.datalake.rd.elliemae.io
admin-dit01.rail3.com
int.streaming.skydrive.rd.elliemae.io
leads-api-dit01.rail3.com
ian.qa.analytics.rd.elliemae.io
agentbridge02-dit01.rail3.com
webapi-uat01.velocify.net
pulseuatservice-qa.velocify.net
partnerportal.elliemae.com
core2-api-uat01.velocify.net
inboundhandler-uat01.velocify.net
cdn2-uat01.velocify.net
import-uat01.velocify.net
qa.streaming.skydrive.rd.elliemae.io
lm2-uat01.velocify.net
pulseuatservice-sit01.velocify.net
lmgateway-dit02b.velocify.net
agentbridge01-dit01.rail3.com
pulseuatservice-dit03.velocify.net
core-api-dit01.rail3.com
agentbridge2-uat01.velocify.net
pulseuatservice-sit02.velocify.net
lm-dit02b.velocify.net
securesend-uat01.velocify.net
agentbridge02-uat01.velocify.net
stg.gaia.elliemae.com
service-uat01.velocify.net
demo.allregs.com
qa.allregs.com
pulseuatservice-dit04.velocify.net
assetservice-dit01.rail3.com
lmgateway-uat01.velocify.net
inboundhandler-dit01.rail3.com
gaia.elliemae.com
pulseuatservice-sit03.velocify.net
cdn3-uat01.velocify.net
jobs-api-dit01.rail3.com
lm-uat01.velocify.net
dev.gaia.elliemae.com
qa.gaia.elliemae.com
pulse-api-uat01.velocify.net
lm3-uat01.velocify.net
test.streaming.skydrive.rd.elliemae.io

Other certificates including the domain name elliemae.com

(limited to 100 certificates)
website.elliemae.com
insights.elliemae.com
api.stg.gaia.elliemae.com
stg.coffi.elliemae.com
api-stage.ccs.notification.elliemae.com
stg.tsmonitor.elliemae.com
*.idp.elliemae.com
prod01.elliemae.com
phoenix.access.elliemae.com
insights.elliemae.com
docs.concept.partner.elliemae.com
us-west-2.www.staging.marketing.elliemae.com
sseqadashboard.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
cds1.cvent.com
mavent.com
insights.elliemae.com
nonprod01.elliemae.com
insights-demo.elliemae.com
*.api.elliemae.com
prod01.elliemae.com
dev.emstatuscenter.elliemae.com
insights.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
api-concept.presence.notification.elliemae.com
cds1.cvent.com
prod.ns-sse-processor.notification.elliemae.com
cds1.cvent.com
docs.developer.elliemae.com
api.peg.asset.rd.elliemae.io
stg.beacon.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
stg.coffi.elliemae.com
api-concept.presence.notification.elliemae.com
*.mortgage-application.net
qa.modules.elliemaeservices.com
insights.elliemae.com
velocify.net
beacon.elliemae.com
cds1.cvent.com
api.ccs.notification.elliemae.com
cds1.cvent.com
*.api.elliemae.com
origin-api.push.notification.elliemae.com
api-stg.presence.notification.elliemae.com
us-east-1.www.staging.marketing.elliemae.com
elliemae.com
prod01.elliemae.com
qa.beacon.elliemae.com
docs.developer.elliemae.com
prod01.elliemae.com
api.coffi.elliemae.com
dev.resourcecenterapi.elliemae.com
api.stg.coffi.elliemae.com
cds1.cvent.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
*.admin.elliemae.com
dev-iceedu.elliemae.com
partnerconnect.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
education.elliemae.com
epps.elliemae.com
*.admin.elliemae.com
pemdemo.elliemae.com
dev.resourcecenterapi.elliemae.com
insights.elliemae.com
dev.rccasemgt.elliemae.com
emise1.corp.elliemae.com
concept.developer.elliemae.com
cds1.cvent.com
us-east-1.www.simplifile.prod.marketing.elliemae.com
api.subscriptions.elliemae.com
api.coffi.elliemae.com
velocify.net
dev.access.elliemae.com
beacon.elliemae.com
dev3.api.ellielabs.com
concept-tfe.api.elliemae.com
prod01.elliemae.com
qa.velocify.net
qa.education.elliemae.com
insights.elliemae.com
dev.gaia.elliemae.com
dev3.api.ellielabs.com
bazar.int.consumer-connect.rd.elliemae.io
*.api.elliemae.com
creative.elliemae.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
dnl.shop.elliemae.com
api.qa.gaia.elliemae.com
prod01.elliemae.com
phx.cf-lms.elliemae.com
api.peg.cms.rd.elliemae.io
api.ccs.notification.elliemae.com
docs2.developer.elliemae.com
us-west-2.www.velocify.staging.marketing.elliemae.com
mavent.com
cds1.cvent.com
creative.elliemae.com
forum.elliemae.com

Certificate

The complete raw certificate details for insights.elliemae.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAESlOcQIlyrDK2T35zjqwBW8qlJ6A8
yIT1a3ZlNvuGMb/Jbpn3WA14zOjO17nC/cPJaWDypCHnbXULQB3NC5Lr5A==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8081353249805327649807904289250255738
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert ECC Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ellie Mae Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'insights.elliemae.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00044a539c408972ac32b64f7e738eac015bcaa527a03cc884f56b766536fb8631bfc96e99f7580d78cce8ced7b9c2fdc3c96960f2a421e76d750b401dcd0b92ebe4
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a39de61ff9da394fc06ee891cb95a5da31e20a9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc29aea004442c879afb57d9cb3466db9faf84c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2692 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffi.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peg.streaming.skydrive.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peg.allregs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.allregs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge01-2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.allregs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcui-customer.dsdev.datalake.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.allregs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.data.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-dit01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core-api-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge02-2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations2-api-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqdashboard-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge01-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-dit02.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesend-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcui-customer.dsint2.datalake.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.streaming.skydrive.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads-api-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ian.qa.analytics.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge02-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-qa.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerportal.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core2-api-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.streaming.skydrive.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-sit01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge01-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-dit03.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core-api-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-sit02.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesend-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge02-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.gaia.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.allregs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.allregs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-dit04.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaia.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-sit03.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn3-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-api-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gaia.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.gaia.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm3-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.streaming.skydrive.rd.elliemae.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-ecc-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-ecc-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertECCSecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256)
 . . . . [c:0|t:3|false] BIT STRING (832 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28733611791075443438504698928768957021935763251467257304831433692776442053170143173988794964893082800940141556856586
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27785341937374805255497312728470610870919592780059626190777749610759929835347921703463441141659881063048509784492991