elliemae.com

- Ellie Mae Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 01:4e:46:96:58:d4:1a:29:ba:c6:e6:e8:75:8b:8e:41 was issued on by DigiCert Inc.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ellie Mae Inc.

Organization: Ellie Mae Inc.
Organization unit: IT
State / Province: California
Locality: Pleasanton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:4e:46:96:58:d4:1a:29:ba:c6:e6:e8:75:8b:8e:41
Serial Number (int): 1735658831138361873849928601349885505
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 59:0c:5d:cf:e8:0e:91:66:bc:a9:98:e6:bb:42:6c:cc:fc:7d:ec:fa
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): cf:f7:10:54:51:0c:36:3b:e4:b7:53:8a:61:38:77:6d:56:c7:5d:b6
Fingerprint (sha256): 3c:aa:ce:44:7e:97:83:80:f5:a0:bf:ed:a7:37:15:4b:11:1c:5b:e9:20:a5:03:6b:e1:09:c6:53:0d:6d:b6:20

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate elliemae.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elliemae.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

elliemae.com
dialiq.prod.velocify.com
service.dev1.velocify.net
assetservice.stg.velocify.com
mtgpricing.com
lmgateway.stg.velocify.com
ecrm.ellielabs.com
webapi.prod.velocify.com
encompasswebcenter.com
inboundhandler.dev1.velocify.net
ep9.encompassmobile.com
cdn-na02.stg.velocify.com
inboundhandler.prod.velocify.com
preprod-agentbridge.prod.velocify.com
cdn.prod.velocify.com
webapi.dev1.velocify.net
ian.qa.analytics.rd.elliemae.io
allregsloanlibrary.com
preprod-security.stg.velocify.com
service.stg.velocify.com
mrweb2.mortgagereturns.com
agentbridge.dev1.velocify.net
dialiqrouter.prod.velocify.com
integrations-api.stg.velocify.com
allregs.elliemae.com
www.encompasswebcenter.com
preprod-assetservice.stg.velocify.com
lmgateway.prod.velocify.com
preprod-lmgateway.prod.velocify.com
pulse-api.dev1.velocify.net
security.prod.velocify.com
cdn-na02.prod.velocify.com
lm-na02.prod.velocify.com
assetservice.prod.velocify.com
cdn.dev1.velocify.net
encompass.dev1.velocify.net
lm.prod.velocify.com
service.prod.velocify.com
titlecenter.elliemae.com
preprod-inboundhandler.prod.velocify.com
pulse-api.prod.velocify.com
preprod-integrations-api.stg.velocify.com
import.prod.velocify.com
mrweb.mortgagereturns.com
www.allregsloanlibrary.com
agentbridge.prod.velocify.com
import.stg.velocify.com
import.dev1.velocify.net
preprod-dialiq.stg.velocify.com
preprod-assetservice.prod.velocify.com
lm.stg.velocify.com
encompass.stg.velocify.com
appraisalcenter.elliemae.com
assetservice.dev1.velocify.net
pulse-api.stg.velocify.com
preprod-agentbridge.stg.velocify.com
www.encompassmobile.com
experience.elliemae.com
preprod-dialiq.prod.velocify.com
www.elliemae.com
cdn.stg.velocify.com
test.allregsloanlibrary.com
img.ecrm.ellielabs.com
preprod-dialiqrouter.prod.velocify.com
preprod-lmgateway.stg.velocify.com
dialiqrouter.dev1.velocify.net
preprod-security.prod.velocify.com
preprod-dialiqrouter.stg.velocify.com
ep3.encompassmobile.com
preprod-inboundhandler.stg.velocify.com
partnerportal.elliemae.com
downloadspecial.elliemae.com
perf.encompassmobile.com
lm.dev1.velocify.net
www.velocify.com
integrations-api.dev1.velocify.net
encompass.prod.velocify.com
preprod-integrations-api.prod.velocify.com
www.secure-loandirect.com
dialiq.stg.velocify.com
dialiq.dev1.velocify.net
9857689037.brokersite.com
epps-staging.elliemae.com
www.mtgpricing.com
lm-na02.stg.velocify.com
leadcenter.elliemaeservices.com
epps.elliemae.com
inboundhandler.stg.velocify.com
security.dev1.velocify.net
lmgateway.dev1.velocify.net
velocify.com
security.stg.velocify.com
webapi.stg.velocify.com
agentbridge.stg.velocify.com
integrations-api.prod.velocify.com
www1.elliemae.com
dialiqrouter.stg.velocify.com

Other certificates including the domain name elliemae.com

(limited to 100 certificates)
website.elliemae.com
insights.elliemae.com
api.stg.gaia.elliemae.com
stg.coffi.elliemae.com
api-stage.ccs.notification.elliemae.com
stg.tsmonitor.elliemae.com
*.idp.elliemae.com
prod01.elliemae.com
phoenix.access.elliemae.com
insights.elliemae.com
docs.concept.partner.elliemae.com
us-west-2.www.staging.marketing.elliemae.com
sseqadashboard.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
cds1.cvent.com
mavent.com
insights.elliemae.com
nonprod01.elliemae.com
insights-demo.elliemae.com
*.api.elliemae.com
prod01.elliemae.com
dev.emstatuscenter.elliemae.com
insights.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
api-concept.presence.notification.elliemae.com
cds1.cvent.com
prod.ns-sse-processor.notification.elliemae.com
cds1.cvent.com
docs.developer.elliemae.com
api.peg.asset.rd.elliemae.io
stg.beacon.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
stg.coffi.elliemae.com
api-concept.presence.notification.elliemae.com
*.mortgage-application.net
qa.modules.elliemaeservices.com
insights.elliemae.com
velocify.net
beacon.elliemae.com
cds1.cvent.com
api.ccs.notification.elliemae.com
cds1.cvent.com
*.api.elliemae.com
origin-api.push.notification.elliemae.com
api-stg.presence.notification.elliemae.com
us-east-1.www.staging.marketing.elliemae.com
elliemae.com
prod01.elliemae.com
cert3344.elliemae.com
qa.beacon.elliemae.com
docs.developer.elliemae.com
prod01.elliemae.com
api.coffi.elliemae.com
dev.resourcecenterapi.elliemae.com
api.stg.coffi.elliemae.com
cds1.cvent.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
*.admin.elliemae.com
dev-iceedu.elliemae.com
partnerconnect.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
education.elliemae.com
epps.elliemae.com
*.admin.elliemae.com
pemdemo.elliemae.com
dev.resourcecenterapi.elliemae.com
insights.elliemae.com
dev.rccasemgt.elliemae.com
emise1.corp.elliemae.com
concept.developer.elliemae.com
cds1.cvent.com
us-east-1.www.simplifile.prod.marketing.elliemae.com
api.subscriptions.elliemae.com
api.coffi.elliemae.com
velocify.net
dev.access.elliemae.com
beacon.elliemae.com
dev3.api.ellielabs.com
concept-tfe.api.elliemae.com
prod01.elliemae.com
qa.velocify.net
qa.education.elliemae.com
insights.elliemae.com
dev.gaia.elliemae.com
dev3.api.ellielabs.com
bazar.int.consumer-connect.rd.elliemae.io
*.api.elliemae.com
creative.elliemae.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
dnl.shop.elliemae.com
api.qa.gaia.elliemae.com
prod01.elliemae.com
phx.cf-lms.elliemae.com
api.peg.cms.rd.elliemae.io
api.ccs.notification.elliemae.com
docs2.developer.elliemae.com
us-west-2.www.velocify.staging.marketing.elliemae.com
mavent.com
cds1.cvent.com
creative.elliemae.com

Certificate

The complete raw certificate details for elliemae.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zYODrpVc6aNXcpihD0T
hkZ4G1WGL0hF3uWdh/g8VyCmse9ZbBgRD3YPT6R53pNjcUZDyNQSKp1LJ4sTke5p
CTeNn/q7c5bDYyna6xzrptSlXsGSbo6UgwJcG2WYBmfYGyKWRgN2IM6zSezw2v8M
dFD0wO4Yz+j7pWUoApPZvR4J3JFIIMtwsmgeMAC7ZOPZsAzqmhvOCROgzcCgUfsR
bhB/tT6Vw+KqCU9ERhS0iVVrEgWj4SV0XhFK8+1penKA5BeV8tf2bRO+a2h1AKR2
6EuPF4Kzc9qHVTq9NOp5nxrPVO6cXPmCIPtN14dRmFP9tgaQhqZMJucEyq0cc0Uv
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1735658831138361873849928601349885505
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ellie Mae Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elliemae.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27672844258250156093491004900713728324075819655464429763901874742509619550219418514708258545374476265553252697716653855901413587958770654234483667138871021185039719386821603769760789084155080646608012233935510945721212124783830518746037099256812294212468826829029111896493380987513928036183864014324717851412435297843646016867679924008804056991584854689837117240409957813526636650931911700455380044046479574639727745968313848828922862686407633846079422498564739666698411288064484782774209734194544294597927888271882169913787213609131841692398898167257784633549060304572150812254394980191294756326983463815698234814253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							590c5dcfe80e9166bca998e6bb426cccfc7decfa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2782 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtgpricing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecrm.ellielabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompasswebcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep9.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-na02.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-agentbridge.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ian.qa.analytics.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-security.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrweb2.mortgagereturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allregs.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encompasswebcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-assetservice.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-lmgateway.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-na02.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-na02.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titlecenter.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-inboundhandler.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-integrations-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrweb.mortgagereturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiq.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-assetservice.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisalcenter.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-agentbridge.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiq.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.ecrm.ellielabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiqrouter.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-lmgateway.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-security.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiqrouter.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep3.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-inboundhandler.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerportal.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadspecial.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-integrations-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure-loandirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9857689037.brokersite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epps-staging.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtgpricing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-na02.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadcenter.elliemaeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epps.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.stg.velocify.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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