elliemae.com

- Ellie Mae Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0f:e8:b1:8b:10:e3:e9:03:75:43:d3:34:0c:58:20:03 was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ellie Mae Inc.

Organization: Ellie Mae Inc.
Organization unit: IT
State / Province: California
Locality: Pleasanton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:e8:b1:8b:10:e3:e9:03:75:43:d3:34:0c:58:20:03
Serial Number (int): 21146633812395540625158757535765241859
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6b:4e:55:0c:bc:6f:be:a8:c2:02:fe:fe:da:00:3b:ee:b2:f7:28:f2
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): d9:90:b3:25:98:66:ec:d4:28:74:37:ae:cd:14:4d:28:80:0b:51:29
Fingerprint (sha256): 56:01:f2:3d:a0:09:78:a9:4c:ab:7e:5a:c5:25:70:62:a2:19:ca:d4:4c:d1:5c:48:c2:72:77:9e:6b:9f:a6:68

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate elliemae.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elliemae.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

elliemae.com
experience.elliemae.com
assetservice.dev1.velocify.net
leadcenter.elliemaeservices.com
lm.dev1.velocify.net
preprod-dialiqrouter.stg.velocify.com
cdn.dev1.velocify.net
www.encompasswebcenter.com
cdn-na02.prod.velocify.com
mrweb.mortgagereturns.com
api.subscriptions.elliemae.com
downloadspecial.elliemae.com
webapi.prod.velocify.com
preprod-dialiq.prod.velocify.com
www.velocify.com
lmgateway.stg.velocify.com
preprod-dialiq.stg.velocify.com
preprod-agentbridge.stg.velocify.com
www.allregsloanlibrary.com
preprod-agentbridge.prod.velocify.com
preprod-security.stg.velocify.com
preprod-integrations-api.prod.velocify.com
security.dev1.velocify.net
stg.api.subscriptions.elliemae.com
cdn.stg.velocify.com
preprod-security.prod.velocify.com
integrations-api.stg.velocify.com
allregs.elliemae.com
lm.stg.velocify.com
agentbridge.stg.velocify.com
dialiqrouter.stg.velocify.com
ep3.encompassmobile.com
service.stg.velocify.com
webapi.stg.velocify.com
security.stg.velocify.com
inboundhandler.stg.velocify.com
9857689037.brokersite.com
lm-na02.stg.velocify.com
epps.elliemae.com
preprod-assetservice.stg.velocify.com
preprod-lmgateway.stg.velocify.com
pulse-api.dev1.velocify.net
velocify.com
appraisalcenter.elliemae.com
import.stg.velocify.com
cdn-na02.stg.velocify.com
ep9.encompassmobile.com
dialiq.dev1.velocify.net
webapi.dev1.velocify.net
perf.encompassmobile.com
preprod-assetservice.prod.velocify.com
agentbridge.prod.velocify.com
mrweb2.mortgagereturns.com
agentbridge.dev1.velocify.net
service.prod.velocify.com
www1.elliemae.com
inboundhandler.dev1.velocify.net
qa.api.subscriptions.elliemae.com
mtgpricing.com
preprod-inboundhandler.stg.velocify.com
partnerportal.elliemae.com
www.elliemae.com
assetservice.stg.velocify.com
lm-na02.prod.velocify.com
www.encompassmobile.com
encompass.prod.velocify.com
ian.qa.analytics.rd.elliemae.io
dialiqrouter.prod.velocify.com
pulse-api.stg.velocify.com
integrations-api.dev1.velocify.net
test.allregsloanlibrary.com
security.prod.velocify.com
lmgateway.dev1.velocify.net
cdn.prod.velocify.com
pulse-api.prod.velocify.com
allregsloanlibrary.com
preprod-inboundhandler.prod.velocify.com
encompass.dev1.velocify.net
inboundhandler.prod.velocify.com
img.ecrm.ellielabs.com
dialiqrouter.dev1.velocify.net
preprod-dialiqrouter.prod.velocify.com
dialiq.prod.velocify.com
encompasswebcenter.com
preprod-lmgateway.prod.velocify.com
dialiq.stg.velocify.com
encompass.stg.velocify.com
import.prod.velocify.com
service.dev1.velocify.net
epps-staging.elliemae.com
ecrm.ellielabs.com
integrations-api.prod.velocify.com
lm.prod.velocify.com
lmgateway.prod.velocify.com
preprod-integrations-api.stg.velocify.com
www.secure-loandirect.com
www.mtgpricing.com
assetservice.prod.velocify.com
titlecenter.elliemae.com
import.dev1.velocify.net

Other certificates including the domain name elliemae.com

(limited to 100 certificates)
website.elliemae.com
insights.elliemae.com
api.stg.gaia.elliemae.com
stg.coffi.elliemae.com
api-stage.ccs.notification.elliemae.com
stg.tsmonitor.elliemae.com
*.idp.elliemae.com
prod01.elliemae.com
phoenix.access.elliemae.com
insights.elliemae.com
docs.concept.partner.elliemae.com
us-west-2.www.staging.marketing.elliemae.com
sseqadashboard.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
cds1.cvent.com
mavent.com
insights.elliemae.com
nonprod01.elliemae.com
insights-demo.elliemae.com
*.api.elliemae.com
prod01.elliemae.com
dev.emstatuscenter.elliemae.com
insights.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
api-concept.presence.notification.elliemae.com
cds1.cvent.com
prod.ns-sse-processor.notification.elliemae.com
cds1.cvent.com
docs.developer.elliemae.com
api.peg.asset.rd.elliemae.io
stg.beacon.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
stg.coffi.elliemae.com
api-concept.presence.notification.elliemae.com
*.mortgage-application.net
qa.modules.elliemaeservices.com
insights.elliemae.com
velocify.net
beacon.elliemae.com
cds1.cvent.com
api.ccs.notification.elliemae.com
cds1.cvent.com
*.api.elliemae.com
origin-api.push.notification.elliemae.com
api-stg.presence.notification.elliemae.com
us-east-1.www.staging.marketing.elliemae.com
elliemae.com
prod01.elliemae.com
cert3344.elliemae.com
qa.beacon.elliemae.com
docs.developer.elliemae.com
prod01.elliemae.com
api.coffi.elliemae.com
dev.resourcecenterapi.elliemae.com
api.stg.coffi.elliemae.com
cds1.cvent.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
*.admin.elliemae.com
dev-iceedu.elliemae.com
partnerconnect.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
education.elliemae.com
epps.elliemae.com
*.admin.elliemae.com
pemdemo.elliemae.com
dev.resourcecenterapi.elliemae.com
insights.elliemae.com
dev.rccasemgt.elliemae.com
emise1.corp.elliemae.com
concept.developer.elliemae.com
cds1.cvent.com
us-east-1.www.simplifile.prod.marketing.elliemae.com
api.subscriptions.elliemae.com
api.coffi.elliemae.com
velocify.net
dev.access.elliemae.com
beacon.elliemae.com
dev3.api.ellielabs.com
concept-tfe.api.elliemae.com
prod01.elliemae.com
qa.velocify.net
qa.education.elliemae.com
insights.elliemae.com
dev.gaia.elliemae.com
dev3.api.ellielabs.com
bazar.int.consumer-connect.rd.elliemae.io
*.api.elliemae.com
creative.elliemae.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
dnl.shop.elliemae.com
api.qa.gaia.elliemae.com
prod01.elliemae.com
phx.cf-lms.elliemae.com
api.peg.cms.rd.elliemae.io
api.ccs.notification.elliemae.com
docs2.developer.elliemae.com
us-west-2.www.velocify.staging.marketing.elliemae.com
mavent.com
cds1.cvent.com
creative.elliemae.com

Certificate

The complete raw certificate details for elliemae.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OCJxsdQmu5dXn/G4cmR
7arwxW+ZICDXrd9HA+B2j8Ds560SgxFYDspW+Rxb0lXWNkofwaGIBDtYVjKVECUz
njEEhl6tJXmH53RpaD0q8xP2ht2XaZuBeDHw16XsfcvCEtWS/OXw6x0nojj4q5IV
nkbr2RYJV2pvwF3hPyZCK2ryhKRnUkc5NAdVtGBTblzYjnusvKB1Ejvy4BCErd5g
lpgnKn4lmkKEJ9ssE6tbDSjRU/N0wFSV5vywCvHJohfT8YlxSX+igqaOhu/7i8P0
Sa8PltOa+YsxKOFlXEbn/erdEQdqT4ueWDWLVdddEg74XUJovC9IHpIA/rQFmEJU
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21146633812395540625158757535765241859
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ellie Mae Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elliemae.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29398010660040670060886831207800746058918091554798311440096147249701069734919839257086580024770823249470956234375270939396878798454930117742809483794216833705527305867699108313911503002038579851438151303957522988498556337066085260834719708820460503863581631400131959821466772619989283298298460294122635309203360769510597638496108219468579259649202170865703203903659587613407480296952728781267626016924682218798704618388671519787584370702655913523633571478991718999017812895737011962155263620023097211356078496369949223591957607825478504827236443453039355116706052290811823910951483665750998091399166508858683905168637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b4e550cbc6fbea8c202fefeda003beeb2f728f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2885 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadcenter.elliemaeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiqrouter.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encompasswebcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-na02.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrweb.mortgagereturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.subscriptions.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadspecial.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiq.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiq.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-agentbridge.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-agentbridge.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-security.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-integrations-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.api.subscriptions.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-security.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allregs.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep3.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9857689037.brokersite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-na02.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epps.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-assetservice.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-lmgateway.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisalcenter.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-na02.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep9.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-assetservice.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrweb2.mortgagereturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.api.subscriptions.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtgpricing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-inboundhandler.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerportal.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-na02.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ian.qa.analytics.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-inboundhandler.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.ecrm.ellielabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiqrouter.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompasswebcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-lmgateway.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epps-staging.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecrm.ellielabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-integrations-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure-loandirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtgpricing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titlecenter.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.dev1.velocify.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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