elliemae.com

- Ellie Mae Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 06:fb:18:48:2e:3d:cf:ad:5b:d2:2c:3f:23:ae:7f:09 was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ellie Mae Inc.

Organization: Ellie Mae Inc.
Organization unit: IT
State / Province: California
Locality: Pleasanton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:fb:18:48:2e:3d:cf:ad:5b:d2:2c:3f:23:ae:7f:09
Serial Number (int): 9279126982770961293849922171074150153
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 84:5a:2f:f1:ed:d4:5b:db:ec:e3:b6:ba:72:43:a5:2d:75:ec:6a:44
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 43:9f:69:f2:e5:d5:ed:2a:63:fd:c9:ba:bb:e2:85:44:d1:49:51:7c
Fingerprint (sha256): 11:a2:1f:63:15:f7:11:f2:82:b6:fa:35:68:ec:b7:db:44:bc:50:ed:08:31:83:16:84:b8:f9:7b:d2:76:d6:cf

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate elliemae.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elliemae.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

elliemae.com
webapi.prod.velocify.com
assetservice.dev1.velocify.net
cdn.prod.velocify.com
www.secure-loandirect.com
preprod-dialiq.stg.velocify.com
preprod-lmgateway.prod.velocify.com
www.encompasswebcenter.com
preprod-dialiq.prod.velocify.com
test.allregsloanlibrary.com
email-api.dev1.velocify.net
appraisalcenter.elliemae.com
leadcenter.elliemaeservices.com
lmgateway.stg.velocify.com
preprod-dialiqrouter.stg.velocify.com
lm.stg.velocify.com
security.dev1.velocify.net
mrweb.mortgagereturns.com
webapi.stg.velocify.com
service.dev1.velocify.net
service.prod.velocify.com
dialiq.stg.velocify.com
agentbridge.prod.velocify.com
encompass.dev1.velocify.net
pulse-api.stg.velocify.com
preprod-agentbridge.prod.velocify.com
integrations-api.stg.velocify.com
inboundhandler.prod.velocify.com
www1.elliemae.com
email-api.stg.velocify.com
webapi.dev1.velocify.net
assetservice.prod.velocify.com
integrations-api.dev1.velocify.net
encompass.stg.velocify.com
mrweb2.mortgagereturns.com
integrations-api.prod.velocify.com
downloadspecial.elliemae.com
cdn-na02.prod.velocify.com
velocify.com
lm.prod.velocify.com
img.ecrm.ellielabs.com
inboundhandler.dev1.velocify.net
preprod-dialiqrouter.prod.velocify.com
www.velocify.com
agentbridge.dev1.velocify.net
titlecenter.elliemae.com
email-api.prod.velocify.com
allregs.elliemae.com
ian.qa.analytics.rd.elliemae.io
agentbridge.stg.velocify.com
perf.encompassmobile.com
epps-staging.elliemae.com
preprod-lmgateway.stg.velocify.com
encompass.prod.velocify.com
www.encompassmobile.com
import.prod.velocify.com
ep9.encompassmobile.com
lm-na02.prod.velocify.com
security.stg.velocify.com
import.stg.velocify.com
cdn.stg.velocify.com
lm-na02.stg.velocify.com
preprod-integrations-api.prod.velocify.com
experience.elliemae.com
preprod-security.stg.velocify.com
lm.dev1.velocify.net
dialiq.dev1.velocify.net
www.elliemae.com
mtgpricing.com
security.prod.velocify.com
pulse-api.prod.velocify.com
lmgateway.dev1.velocify.net
www.mtgpricing.com
assetservice.stg.velocify.com
preprod-agentbridge.stg.velocify.com
preprod-inboundhandler.stg.velocify.com
cdn.dev1.velocify.net
preprod-assetservice.prod.velocify.com
dialiq.prod.velocify.com
ep3.encompassmobile.com
ecrm.ellielabs.com
9857689037.brokersite.com
allregsloanlibrary.com
epps.elliemae.com
service.stg.velocify.com
lmgateway.prod.velocify.com
encompasswebcenter.com
import.dev1.velocify.net
preprod-security.prod.velocify.com
inboundhandler.stg.velocify.com
preprod-inboundhandler.prod.velocify.com
preprod-integrations-api.stg.velocify.com
pulse-api.dev1.velocify.net
preprod-assetservice.stg.velocify.com
cdn-na02.stg.velocify.com

Other certificates including the domain name elliemae.com

(limited to 100 certificates)
website.elliemae.com
insights.elliemae.com
api.stg.gaia.elliemae.com
stg.coffi.elliemae.com
api-stage.ccs.notification.elliemae.com
stg.tsmonitor.elliemae.com
*.idp.elliemae.com
prod01.elliemae.com
phoenix.access.elliemae.com
insights.elliemae.com
docs.concept.partner.elliemae.com
us-west-2.www.staging.marketing.elliemae.com
sseqadashboard.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
cds1.cvent.com
mavent.com
insights.elliemae.com
nonprod01.elliemae.com
insights-demo.elliemae.com
*.api.elliemae.com
prod01.elliemae.com
dev.emstatuscenter.elliemae.com
insights.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
api-concept.presence.notification.elliemae.com
cds1.cvent.com
prod.ns-sse-processor.notification.elliemae.com
cds1.cvent.com
docs.developer.elliemae.com
api.peg.asset.rd.elliemae.io
stg.beacon.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
stg.coffi.elliemae.com
api-concept.presence.notification.elliemae.com
*.mortgage-application.net
qa.modules.elliemaeservices.com
insights.elliemae.com
velocify.net
beacon.elliemae.com
cds1.cvent.com
api.ccs.notification.elliemae.com
cds1.cvent.com
*.api.elliemae.com
origin-api.push.notification.elliemae.com
api-stg.presence.notification.elliemae.com
us-east-1.www.staging.marketing.elliemae.com
elliemae.com
prod01.elliemae.com
cert3344.elliemae.com
qa.beacon.elliemae.com
docs.developer.elliemae.com
prod01.elliemae.com
api.coffi.elliemae.com
dev.resourcecenterapi.elliemae.com
api.stg.coffi.elliemae.com
cds1.cvent.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
*.admin.elliemae.com
dev-iceedu.elliemae.com
partnerconnect.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
education.elliemae.com
epps.elliemae.com
*.admin.elliemae.com
pemdemo.elliemae.com
dev.resourcecenterapi.elliemae.com
insights.elliemae.com
dev.rccasemgt.elliemae.com
emise1.corp.elliemae.com
concept.developer.elliemae.com
cds1.cvent.com
us-east-1.www.simplifile.prod.marketing.elliemae.com
api.subscriptions.elliemae.com
api.coffi.elliemae.com
velocify.net
dev.access.elliemae.com
beacon.elliemae.com
dev3.api.ellielabs.com
concept-tfe.api.elliemae.com
prod01.elliemae.com
qa.velocify.net
qa.education.elliemae.com
insights.elliemae.com
dev.gaia.elliemae.com
dev3.api.ellielabs.com
bazar.int.consumer-connect.rd.elliemae.io
*.api.elliemae.com
creative.elliemae.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
dnl.shop.elliemae.com
api.qa.gaia.elliemae.com
prod01.elliemae.com
phx.cf-lms.elliemae.com
api.peg.cms.rd.elliemae.io
api.ccs.notification.elliemae.com
docs2.developer.elliemae.com
us-west-2.www.velocify.staging.marketing.elliemae.com
mavent.com
cds1.cvent.com
creative.elliemae.com

Certificate

The complete raw certificate details for elliemae.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQkzCCD3ugAwIBAgIQBvsYSC49z61b0iw/I65/CTANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODEwMTcwMDAwMDBaFw0xOTAzMTUxMjAwMDBaMHQxCzAJBgNVBAYTAlVTMRMw
EQYDVQQIEwpDYWxpZm9ybmlhMRMwEQYDVQQHEwpQbGVhc2FudG9uMRcwFQYDVQQK
Ew5FbGxpZSBNYWUgSW5jLjELMAkGA1UECxMCSVQxFTATBgNVBAMTDGVsbGllbWFl
LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOChP5wEcMOlbCqR
Sz7h5Ot+lPGjP4q9jLsnhWjRtxrCxDiV58PtHdNeFe0WlTWaOMAZwdd+mc+orsXs
oNFdpOUu5+1fGGgC6AOwjEd9tis72AZYCv2HZdfnxMhXtRIROVOJnVysUQOvKoXg
gDaVnL4jyxC08hvyOqrJ01QoYuSrG8236XR+HOLc1nIGG9/eD4f0yVzHy7oVlmCk
s+VimRL0viNrpf0cwuPmxnWJ1bLt55c9Aj1NSgkyC71zSrh/oR+UGS1JTYe01JoP
kzIQVB+uSYOO/BdIIC6lvWmlOSo5AoTjFhIVL6+bZdo+GIo5HY8FqYkNv2BQERub
5USbZmkCAwEAAaOCDTUwgg0xMB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKjQxY4
nmzFMB0GA1UdDgQWBBSEWi/x7dRb2+zjtrpyQ6UtdexqRDCCCqYGA1UdEQSCCp0w
ggqZggxlbGxpZW1hZS5jb22CGHdlYmFwaS5wcm9kLnZlbG9jaWZ5LmNvbYIeYXNz
ZXRzZXJ2aWNlLmRldjEudmVsb2NpZnkubmV0ghVjZG4ucHJvZC52ZWxvY2lmeS5j
b22CGXd3dy5zZWN1cmUtbG9hbmRpcmVjdC5jb22CH3ByZXByb2QtZGlhbGlxLnN0
Zy52ZWxvY2lmeS5jb22CI3ByZXByb2QtbG1nYXRld2F5LnByb2QudmVsb2NpZnku
Y29tghp3d3cuZW5jb21wYXNzd2ViY2VudGVyLmNvbYIgcHJlcHJvZC1kaWFsaXEu
cHJvZC52ZWxvY2lmeS5jb22CG3Rlc3QuYWxscmVnc2xvYW5saWJyYXJ5LmNvbYIb
ZW1haWwtYXBpLmRldjEudmVsb2NpZnkubmV0ghxhcHByYWlzYWxjZW50ZXIuZWxs
aWVtYWUuY29tgh9sZWFkY2VudGVyLmVsbGllbWFlc2VydmljZXMuY29tghpsbWdh
dGV3YXkuc3RnLnZlbG9jaWZ5LmNvbYIlcHJlcHJvZC1kaWFsaXFyb3V0ZXIuc3Rn
LnZlbG9jaWZ5LmNvbYITbG0uc3RnLnZlbG9jaWZ5LmNvbYIac2VjdXJpdHkuZGV2
MS52ZWxvY2lmeS5uZXSCGW1yd2ViLm1vcnRnYWdlcmV0dXJucy5jb22CF3dlYmFw
aS5zdGcudmVsb2NpZnkuY29tghlzZXJ2aWNlLmRldjEudmVsb2NpZnkubmV0ghlz
ZXJ2aWNlLnByb2QudmVsb2NpZnkuY29tghdkaWFsaXEuc3RnLnZlbG9jaWZ5LmNv
bYIdYWdlbnRicmlkZ2UucHJvZC52ZWxvY2lmeS5jb22CG2VuY29tcGFzcy5kZXYx
LnZlbG9jaWZ5Lm5ldIIacHVsc2UtYXBpLnN0Zy52ZWxvY2lmeS5jb22CJXByZXBy
b2QtYWdlbnRicmlkZ2UucHJvZC52ZWxvY2lmeS5jb22CIWludGVncmF0aW9ucy1h
cGkuc3RnLnZlbG9jaWZ5LmNvbYIgaW5ib3VuZGhhbmRsZXIucHJvZC52ZWxvY2lm
eS5jb22CEXd3dzEuZWxsaWVtYWUuY29tghplbWFpbC1hcGkuc3RnLnZlbG9jaWZ5
LmNvbYIYd2ViYXBpLmRldjEudmVsb2NpZnkubmV0gh5hc3NldHNlcnZpY2UucHJv
ZC52ZWxvY2lmeS5jb22CImludGVncmF0aW9ucy1hcGkuZGV2MS52ZWxvY2lmeS5u
ZXSCGmVuY29tcGFzcy5zdGcudmVsb2NpZnkuY29tghptcndlYjIubW9ydGdhZ2Vy
ZXR1cm5zLmNvbYIiaW50ZWdyYXRpb25zLWFwaS5wcm9kLnZlbG9jaWZ5LmNvbYIc
ZG93bmxvYWRzcGVjaWFsLmVsbGllbWFlLmNvbYIaY2RuLW5hMDIucHJvZC52ZWxv
Y2lmeS5jb22CDHZlbG9jaWZ5LmNvbYIUbG0ucHJvZC52ZWxvY2lmeS5jb22CFmlt
Zy5lY3JtLmVsbGllbGFicy5jb22CIGluYm91bmRoYW5kbGVyLmRldjEudmVsb2Np
ZnkubmV0giZwcmVwcm9kLWRpYWxpcXJvdXRlci5wcm9kLnZlbG9jaWZ5LmNvbYIQ
d3d3LnZlbG9jaWZ5LmNvbYIdYWdlbnRicmlkZ2UuZGV2MS52ZWxvY2lmeS5uZXSC
GHRpdGxlY2VudGVyLmVsbGllbWFlLmNvbYIbZW1haWwtYXBpLnByb2QudmVsb2Np
ZnkuY29tghRhbGxyZWdzLmVsbGllbWFlLmNvbYIfaWFuLnFhLmFuYWx5dGljcy5y
ZC5lbGxpZW1hZS5pb4IcYWdlbnRicmlkZ2Uuc3RnLnZlbG9jaWZ5LmNvbYIYcGVy
Zi5lbmNvbXBhc3Ntb2JpbGUuY29tghllcHBzLXN0YWdpbmcuZWxsaWVtYWUuY29t
giJwcmVwcm9kLWxtZ2F0ZXdheS5zdGcudmVsb2NpZnkuY29tghtlbmNvbXBhc3Mu
cHJvZC52ZWxvY2lmeS5jb22CF3d3dy5lbmNvbXBhc3Ntb2JpbGUuY29tghhpbXBv
cnQucHJvZC52ZWxvY2lmeS5jb22CF2VwOS5lbmNvbXBhc3Ntb2JpbGUuY29tghls
bS1uYTAyLnByb2QudmVsb2NpZnkuY29tghlzZWN1cml0eS5zdGcudmVsb2NpZnku
Y29tghdpbXBvcnQuc3RnLnZlbG9jaWZ5LmNvbYIUY2RuLnN0Zy52ZWxvY2lmeS5j
b22CGGxtLW5hMDIuc3RnLnZlbG9jaWZ5LmNvbYIqcHJlcHJvZC1pbnRlZ3JhdGlv
bnMtYXBpLnByb2QudmVsb2NpZnkuY29tghdleHBlcmllbmNlLmVsbGllbWFlLmNv
bYIhcHJlcHJvZC1zZWN1cml0eS5zdGcudmVsb2NpZnkuY29tghRsbS5kZXYxLnZl
bG9jaWZ5Lm5ldIIYZGlhbGlxLmRldjEudmVsb2NpZnkubmV0ghB3d3cuZWxsaWVt
YWUuY29tgg5tdGdwcmljaW5nLmNvbYIac2VjdXJpdHkucHJvZC52ZWxvY2lmeS5j
b22CG3B1bHNlLWFwaS5wcm9kLnZlbG9jaWZ5LmNvbYIbbG1nYXRld2F5LmRldjEu
dmVsb2NpZnkubmV0ghJ3d3cubXRncHJpY2luZy5jb22CHWFzc2V0c2VydmljZS5z
dGcudmVsb2NpZnkuY29tgiRwcmVwcm9kLWFnZW50YnJpZGdlLnN0Zy52ZWxvY2lm
eS5jb22CJ3ByZXByb2QtaW5ib3VuZGhhbmRsZXIuc3RnLnZlbG9jaWZ5LmNvbYIV
Y2RuLmRldjEudmVsb2NpZnkubmV0giZwcmVwcm9kLWFzc2V0c2VydmljZS5wcm9k
LnZlbG9jaWZ5LmNvbYIYZGlhbGlxLnByb2QudmVsb2NpZnkuY29tghdlcDMuZW5j
b21wYXNzbW9iaWxlLmNvbYISZWNybS5lbGxpZWxhYnMuY29tghk5ODU3Njg5MDM3
LmJyb2tlcnNpdGUuY29tghZhbGxyZWdzbG9hbmxpYnJhcnkuY29tghFlcHBzLmVs
bGllbWFlLmNvbYIYc2VydmljZS5zdGcudmVsb2NpZnkuY29tghtsbWdhdGV3YXku
cHJvZC52ZWxvY2lmeS5jb22CFmVuY29tcGFzc3dlYmNlbnRlci5jb22CGGltcG9y
dC5kZXYxLnZlbG9jaWZ5Lm5ldIIicHJlcHJvZC1zZWN1cml0eS5wcm9kLnZlbG9j
aWZ5LmNvbYIfaW5ib3VuZGhhbmRsZXIuc3RnLnZlbG9jaWZ5LmNvbYIocHJlcHJv
ZC1pbmJvdW5kaGFuZGxlci5wcm9kLnZlbG9jaWZ5LmNvbYIpcHJlcHJvZC1pbnRl
Z3JhdGlvbnMtYXBpLnN0Zy52ZWxvY2lmeS5jb22CG3B1bHNlLWFwaS5kZXYxLnZl
bG9jaWZ5Lm5ldIIlcHJlcHJvZC1hc3NldHNlcnZpY2Uuc3RnLnZlbG9jaWZ5LmNv
bYIZY2RuLW5hMDIuc3RnLnZlbG9jaWZ5LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0
dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNybDBMBgNV
HSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5k
aWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB1BggrBgEFBQcBAQRpMGcwJgYIKwYB
BQUHMAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD0GCCsGAQUFBzAChjFo
dHRwOi8vY2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3J0
MAkGA1UdEwQCMAAwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdwC72d+8H4pxtZOU
I5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWaDdPOrAAAEAwBIMEYCIQCgysrkRxow
I1oBuugsxOabT5KF0V7EgwCFxBeBHQ67hgIhAJT9wUJ7dLMIO3qx3XhC5zb1joNu
Rv7w9239S1dbseGmAHUAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8A
AAFmg3TznQAABAMARjBEAiAgmOOpK/D1mj8ruJfEdyw1NNnj44Ikc1VFJwgtmsou
VwIgBphh+3CuilpS2Pt1I04tOAEN9afbaxof0MHp2tJcogwwDQYJKoZIhvcNAQEL
BQADggEBAI6/m5o73QGc/z0f1tvf0o9MDcgAwI3OsqcE8dNRCPwy2sHOcXlQaKzv
wIcc7HA7rFV3yoEPLmg1u0FnHD63MWpnfuo4bWrlxMbVwFTaRiQMKOWDG3AwAuRG
JKatWMJyDzlubNXmTHG2B/V7jXPVicPIHABe5g6+aWIDzi40Z3sZ1udYs+GzyeQA
Sq+A8rVuKDtNKWplcJ+TomlxtpCn1+mp30rcACxqzDpPq7dFC8GDqIeMiUZi0OYX
FZ/5QEgLA1CgRhC3KsCe0CXb4BpfaFWzJXZwAtTvTctpI7OUVONyTze8asaOdymA
bFHDniXeSCTa4GCrC+5+CLJxNe0v/xI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KE/nARww6VsKpFLPuHk
636U8aM/ir2MuyeFaNG3GsLEOJXnw+0d014V7RaVNZo4wBnB136Zz6iuxeyg0V2k
5S7n7V8YaALoA7CMR322KzvYBlgK/Ydl1+fEyFe1EhE5U4mdXKxRA68qheCANpWc
viPLELTyG/I6qsnTVChi5KsbzbfpdH4c4tzWcgYb394Ph/TJXMfLuhWWYKSz5WKZ
EvS+I2ul/RzC4+bGdYnVsu3nlz0CPU1KCTILvXNKuH+hH5QZLUlNh7TUmg+TMhBU
H65Jg478F0ggLqW9aaU5KjkChOMWEhUvr5tl2j4YijkdjwWpiQ2/YFARG5vlRJtm
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9279126982770961293849922171074150153
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ellie Mae Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elliemae.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28356894898665968047280449295394555419032308291138148387589032794160676052828894593808985613663081534924469703178852796737055315222628999679165988332193324072223503370985788927276959125256984760352590978276229577113699756521440072834063375532440793543688401488996833234934809977256536890212988982343605909733479314029604172139747812713831292778689769822027615296449007805185190982970210832355668607849880674144702357265323388806785414290741751741410313016173518976207226563600772208305042135398760648420107745484302505358556902920321493397344502174327966648091850460539831984413121442189888598344814989477055787918953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							845a2ff1edd45bdbece3b6ba7243a52d75ec6a44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2717 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure-loandirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiq.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-lmgateway.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encompasswebcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiq.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email-api.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisalcenter.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadcenter.elliemaeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiqrouter.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrweb.mortgagereturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-agentbridge.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrweb2.mortgagereturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadspecial.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-na02.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.ecrm.ellielabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiqrouter.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titlecenter.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allregs.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ian.qa.analytics.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epps-staging.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-lmgateway.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep9.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-na02.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-na02.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-integrations-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-security.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtgpricing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtgpricing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-agentbridge.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-inboundhandler.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-assetservice.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep3.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecrm.ellielabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9857689037.brokersite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epps.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompasswebcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-security.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-inboundhandler.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-integrations-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-assetservice.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-na02.stg.velocify.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001668374f3ab0000040300483046022100a0cacae4471a30235a01bae82cc4e69b4f9285d15ec4830085c417811d0ebb8602210094fdc1427b74b3083b7ab1dd7842e736f58e836e46fef0f76dfd4b575bb1e1a60075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001668374f39d000004030046304402202098e3a92bf0f59a3f2bb897c4772c3534d9e3e3822473554527082d9aca2e570220069861fb70ae8a5a52d8fb75234e2d38010df5a7db6b1a1fd0c1e9dad25ca20c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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