insights.elliemae.com

- Ellie Mae Inc. -

Issued by DigiCert ECC Secure Server CA

About this certificate

This digital certificate with serial number 08:75:02:36:5e:92:82:71:ef:8b:e7:ee:3e:20:1b:06 was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ellie Mae Inc.

Organization: Ellie Mae Inc.
State / Province: California
Locality: Pleasanton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:75:02:36:5e:92:82:71:ef:8b:e7:ee:3e:20:1b:06
Serial Number (int): 11241367571136594991639773208589114118
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 73:16:c3:a4:02:82:a6:b2:69:bd:4a:89:66:12:8e:df:ed:ff:c8:03
AuthorityKeyId: a3:9d:e6:1f:f9:da:39:4f:c0:6e:e8:91:cb:95:a5:da:31:e2:0a:9f

Fingerprint (sha1): d9:21:7a:06:e2:71:d5:39:15:0e:5e:d4:70:94:6f:ed:a8:d1:1c:02
Fingerprint (sha256): 14:4d:48:64:a2:f2:d6:91:26:1c:62:10:fe:09:b6:be:36:91:51:be:56:5f:84:4d:bf:36:7c:21:28:de:d2:05

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertECCSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-ecc-g1.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-ecc-g1.crl

Check the revocation status for certificate insights.elliemae.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for insights.elliemae.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA256

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

insights.elliemae.com
int.streaming.skydrive.rd.elliemae.io
cdn2-uat01.velocify.net
assetservice2-uat01.velocify.net
lmgateway-dit02b.velocify.net
cdn-uat01.velocify.net
agentbridge-uat01.velocify.net
service-dit01.rail3.com
pulseuatservice-dit04.velocify.net
admin-dit01.rail3.com
assetservice-dit01.rail3.com
portal.data.elliemae.com
int.allregs.com
ob.allregs.com
pulseuatservice-sit03.velocify.net
dialiq-dit02b.velocify.net
agentbridge02-2-uat01.velocify.net
test.streaming.skydrive.rd.elliemae.io
agentbridge01-dit01.rail3.com
qa.allregs.com
pulseuatservice-sit02.velocify.net
integrations-api-dit01.rail3.com
lm2-uat01.velocify.net
dialiqrouter-dit01.rail3.com
dialiq-dit01.rail3.com
cdn-dit01.rail3.com
securesend-uat01.velocify.net
peg.streaming.skydrive.rd.elliemae.io
jobs-api-dit01.rail3.com
agentbridge2-uat01.velocify.net
partnerportal.elliemae.com
agentbridge02-dit01.rail3.com
integrations2-api-uat01.velocify.net
integrations-api-uat01.velocify.net
dialiq-uat01.velocify.net
webapi-uat01.velocify.net
assetservice-uat01.velocify.net
securesend-dit01.rail3.com
www.velocify.com
service-uat01.velocify.net
qa.streaming.skydrive.rd.elliemae.io
test.allregs.com
dialiqdashboard-dit01.rail3.com
qa.gaia.elliemae.com
pulseuatservice-sit01.velocify.net
staging.allregs.com
inboundhandler-dit01.rail3.com
dialiq2-uat01.velocify.net
coffi.elliemae.com
inboundhandler-uat01.velocify.net
www.allregs.com
assetservice-dit02b.velocify.net
velocify.com
security-uat01.velocify.net
lmgateway2-uat01.velocify.net
stg.gaia.elliemae.com
core-api-uat01.velocify.net
inboundhandler2-uat01.velocify.net
agentbridge-dit01.rail3.com
pulseuatservice-dit02.velocify.net
leads-api-dit01.rail3.com
pulse-api-uat01.velocify.net
dialiqrouter-uat01.velocify.net
dev.gaia.elliemae.com
gaia.elliemae.com
marketplace.elliemae.com
import-dit01.rail3.com
cdn-dit02b.velocify.net
agentbridge01-uat01.velocify.net
lm-dit01.rail3.com
import-uat01.velocify.net
lmgateway-dit01.rail3.com
cdn3-uat01.velocify.net
pulseuatservice-dit03.velocify.net
lm-uat01.velocify.net
ian.qa.analytics.rd.elliemae.io
agentbridge01-2-uat01.velocify.net
pulseuatservice-dit01.velocify.net
dcui-customer.dsint2.datalake.rd.elliemae.io
dcui-customer.dsdev.datalake.rd.elliemae.io
lm3-uat01.velocify.net
core2-api-uat01.velocify.net
webapi-dit01.rail3.com
security2-uat01.velocify.net
agentbridge-dit02b.velocify.net
pulseuatservice-qa.velocify.net
lmgateway-uat01.velocify.net
core-api-dit01.rail3.com
peg.allregs.com
pulseuatservice-uat01.velocify.net
shop.elliemae.com
lm-dit02b.velocify.net
agentbridge02-uat01.velocify.net
security-dit01.rail3.com
demo.allregs.com

Other certificates including the domain name elliemae.com

(limited to 100 certificates)
website.elliemae.com
insights.elliemae.com
api.stg.gaia.elliemae.com
stg.coffi.elliemae.com
api-stage.ccs.notification.elliemae.com
stg.tsmonitor.elliemae.com
*.idp.elliemae.com
prod01.elliemae.com
phoenix.access.elliemae.com
insights.elliemae.com
docs.concept.partner.elliemae.com
us-west-2.www.staging.marketing.elliemae.com
sseqadashboard.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
cds1.cvent.com
mavent.com
insights.elliemae.com
nonprod01.elliemae.com
insights-demo.elliemae.com
*.api.elliemae.com
prod01.elliemae.com
dev.emstatuscenter.elliemae.com
insights.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
api-concept.presence.notification.elliemae.com
cds1.cvent.com
prod.ns-sse-processor.notification.elliemae.com
cds1.cvent.com
docs.developer.elliemae.com
api.peg.asset.rd.elliemae.io
stg.beacon.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
stg.coffi.elliemae.com
api-concept.presence.notification.elliemae.com
*.mortgage-application.net
qa.modules.elliemaeservices.com
insights.elliemae.com
velocify.net
beacon.elliemae.com
cds1.cvent.com
api.ccs.notification.elliemae.com
cds1.cvent.com
*.api.elliemae.com
origin-api.push.notification.elliemae.com
api-stg.presence.notification.elliemae.com
us-east-1.www.staging.marketing.elliemae.com
elliemae.com
prod01.elliemae.com
cert3344.elliemae.com
qa.beacon.elliemae.com
docs.developer.elliemae.com
prod01.elliemae.com
api.coffi.elliemae.com
dev.resourcecenterapi.elliemae.com
api.stg.coffi.elliemae.com
cds1.cvent.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
*.admin.elliemae.com
dev-iceedu.elliemae.com
partnerconnect.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
education.elliemae.com
epps.elliemae.com
*.admin.elliemae.com
pemdemo.elliemae.com
dev.resourcecenterapi.elliemae.com
insights.elliemae.com
dev.rccasemgt.elliemae.com
emise1.corp.elliemae.com
concept.developer.elliemae.com
cds1.cvent.com
us-east-1.www.simplifile.prod.marketing.elliemae.com
api.subscriptions.elliemae.com
api.coffi.elliemae.com
velocify.net
dev.access.elliemae.com
beacon.elliemae.com
dev3.api.ellielabs.com
concept-tfe.api.elliemae.com
prod01.elliemae.com
qa.velocify.net
qa.education.elliemae.com
insights.elliemae.com
dev.gaia.elliemae.com
dev3.api.ellielabs.com
bazar.int.consumer-connect.rd.elliemae.io
*.api.elliemae.com
creative.elliemae.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
dnl.shop.elliemae.com
api.qa.gaia.elliemae.com
prod01.elliemae.com
phx.cf-lms.elliemae.com
api.peg.cms.rd.elliemae.io
api.ccs.notification.elliemae.com
docs2.developer.elliemae.com
us-west-2.www.velocify.staging.marketing.elliemae.com
mavent.com
cds1.cvent.com
creative.elliemae.com

Certificate

The complete raw certificate details for insights.elliemae.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEVunuZO49dNS2JgmqLxWJ7DiQh66L
oOXuHZ4haev4Kd2AGlVPPfzr+D+Yvf1CRbynH26YXzl69AWSof6co8yudw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11241367571136594991639773208589114118
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert ECC Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ellie Mae Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'insights.elliemae.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000456e9ee64ee3d74d4b62609aa2f1589ec389087ae8ba0e5ee1d9e2169ebf829dd801a554f3dfcebf83f98bdfd4245bca71f6e985f397af40592a1fe9ca3ccae77
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a39de61ff9da394fc06ee891cb95a5da31e20a9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7316c3a40282a6b269bd4a8966128edfedffc803
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2725 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.streaming.skydrive.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-dit04.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.data.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.allregs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ob.allregs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-sit03.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge02-2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.streaming.skydrive.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge01-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.allregs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-sit02.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesend-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peg.streaming.skydrive.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs-api-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerportal.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge02-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations2-api-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesend-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.streaming.skydrive.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.allregs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqdashboard-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.gaia.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-sit01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.allregs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coffi.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allregs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.gaia.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core-api-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-dit02.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads-api-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.gaia.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaia.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge01-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn3-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-dit03.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ian.qa.analytics.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge01-2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-dit01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcui-customer.dsint2.datalake.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcui-customer.dsdev.datalake.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm3-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core2-api-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security2-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-qa.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core-api-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peg.allregs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulseuatservice-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-dit02b.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge02-uat01.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security-dit01.rail3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.allregs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-ecc-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-ecc-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertECCSecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256)
 . . . . [c:0|t:3|false] BIT STRING (824 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31998305606385528479640162892229056931553150286563591014104400230586318626941865015736732219553166281518298058399928
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19475570515974974741188763119982278983540278894846643446041337807726020421880338163992139652147154153325390495860520