elliemae.com

- ICE MORTGAGE TECHNOLOGY, INC. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 02:ca:14:be:70:d8:35:86:50:4b:5a:84:18:6d:89:7e was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

ICE MORTGAGE TECHNOLOGY, INC.

Organization: ICE MORTGAGE TECHNOLOGY, INC.
State / Province: California
Locality: Pleasanton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:ca:14:be:70:d8:35:86:50:4b:5a:84:18:6d:89:7e
Serial Number (int): 3707720693460519510503919334307236222
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 92:b1:53:e7:f1:44:02:33:f6:e7:5f:71:1f:23:dd:ab:59:a7:fc:39
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 14:a7:7f:e2:c8:40:27:bb:d9:e5:2a:03:63:db:28:fc:01:32:d4:61
Fingerprint (sha256): 59:a6:b2:96:bd:f4:d2:98:8d:c9:b9:54:7f:ee:af:96:c0:a9:80:59:a1:0f:61:d9:3f:1e:71:d4:bc:d4:1e:d5

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate elliemae.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elliemae.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

elliemae.com
9857689037.brokersite.com
agentbridge.dev1.velocify.net
agentbridge.prod.velocify.com
agentbridge.stg.velocify.com
allregs.elliemae.com
allregsloanlibrary.com
api.subscriptions.elliemae.com
appraisalcenter.elliemae.com
assetservice.dev1.velocify.net
assetservice.prod.velocify.com
assetservice.stg.velocify.com
cdn-na02.prod.velocify.com
cdn-na02.stg.velocify.com
cdn.dev1.velocify.net
cdn.prod.velocify.com
cdn.stg.velocify.com
dialiq.dev1.velocify.net
dialiq.prod.velocify.com
dialiq.stg.velocify.com
dialiqrouter.dev1.velocify.net
dialiqrouter.prod.velocify.com
dialiqrouter.stg.velocify.com
downloadspecial.elliemae.com
ecrm.ellielabs.com
encompass.dev1.velocify.net
encompass.prod.velocify.com
encompass.stg.velocify.com
encompasswebcenter.com
ep3.encompassmobile.com
ep9.encompassmobile.com
epps-staging.elliemae.com
epps.elliemae.com
experience.elliemae.com
ian.qa.analytics.rd.elliemae.io
img.ecrm.ellielabs.com
import.dev1.velocify.net
import.prod.velocify.com
import.stg.velocify.com
inboundhandler.dev1.velocify.net
inboundhandler.prod.velocify.com
inboundhandler.stg.velocify.com
integrations-api.dev1.velocify.net
integrations-api.prod.velocify.com
integrations-api.stg.velocify.com
leadcenter.elliemaeservices.com
lm-na02.prod.velocify.com
lm-na02.stg.velocify.com
lm.dev1.velocify.net
lm.prod.velocify.com
lm.stg.velocify.com
lmgateway.dev1.velocify.net
lmgateway.prod.velocify.com
lmgateway.stg.velocify.com
mrweb.mortgagereturns.com
mrweb2.mortgagereturns.com
mtgpricing.com
partnerportal.elliemae.com
perf.encompassmobile.com
preprod-agentbridge.prod.velocify.com
preprod-agentbridge.stg.velocify.com
preprod-assetservice.prod.velocify.com
preprod-assetservice.stg.velocify.com
preprod-dialiq.prod.velocify.com
preprod-dialiq.stg.velocify.com
preprod-dialiqrouter.prod.velocify.com
preprod-dialiqrouter.stg.velocify.com
preprod-inboundhandler.prod.velocify.com
preprod-inboundhandler.stg.velocify.com
preprod-integrations-api.prod.velocify.com
preprod-integrations-api.stg.velocify.com
preprod-lmgateway.prod.velocify.com
preprod-lmgateway.stg.velocify.com
preprod-security.prod.velocify.com
preprod-security.stg.velocify.com
pulse-api.dev1.velocify.net
pulse-api.prod.velocify.com
pulse-api.stg.velocify.com
qa.api.subscriptions.elliemae.com
security.dev1.velocify.net
security.prod.velocify.com
security.stg.velocify.com
service.dev1.velocify.net
service.prod.velocify.com
service.stg.velocify.com
stg.api.subscriptions.elliemae.com
test.allregsloanlibrary.com
titlecenter.elliemae.com
velocify.com
webapi.dev1.velocify.net
webapi.prod.velocify.com
webapi.stg.velocify.com
www.allregsloanlibrary.com
www.elliemae.com
www.encompassmobile.com
www.encompasswebcenter.com
www.mtgpricing.com
www.secure-loandirect.com
www.velocify.com
www1.elliemae.com

Other certificates including the domain name elliemae.com

(limited to 100 certificates)
website.elliemae.com
insights.elliemae.com
api.stg.gaia.elliemae.com
stg.coffi.elliemae.com
api-stage.ccs.notification.elliemae.com
stg.tsmonitor.elliemae.com
*.idp.elliemae.com
prod01.elliemae.com
phoenix.access.elliemae.com
insights.elliemae.com
docs.concept.partner.elliemae.com
us-west-2.www.staging.marketing.elliemae.com
sseqadashboard.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
cds1.cvent.com
mavent.com
insights.elliemae.com
nonprod01.elliemae.com
insights-demo.elliemae.com
*.api.elliemae.com
prod01.elliemae.com
dev.emstatuscenter.elliemae.com
insights.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
api-concept.presence.notification.elliemae.com
cds1.cvent.com
prod.ns-sse-processor.notification.elliemae.com
cds1.cvent.com
docs.developer.elliemae.com
api.peg.asset.rd.elliemae.io
stg.beacon.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
stg.coffi.elliemae.com
api-concept.presence.notification.elliemae.com
*.mortgage-application.net
qa.modules.elliemaeservices.com
insights.elliemae.com
velocify.net
beacon.elliemae.com
cds1.cvent.com
api.ccs.notification.elliemae.com
cds1.cvent.com
*.api.elliemae.com
origin-api.push.notification.elliemae.com
api-stg.presence.notification.elliemae.com
us-east-1.www.staging.marketing.elliemae.com
elliemae.com
prod01.elliemae.com
cert3344.elliemae.com
qa.beacon.elliemae.com
docs.developer.elliemae.com
prod01.elliemae.com
api.coffi.elliemae.com
dev.resourcecenterapi.elliemae.com
api.stg.coffi.elliemae.com
cds1.cvent.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
*.admin.elliemae.com
dev-iceedu.elliemae.com
partnerconnect.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
education.elliemae.com
epps.elliemae.com
*.admin.elliemae.com
pemdemo.elliemae.com
dev.resourcecenterapi.elliemae.com
insights.elliemae.com
dev.rccasemgt.elliemae.com
emise1.corp.elliemae.com
concept.developer.elliemae.com
cds1.cvent.com
us-east-1.www.simplifile.prod.marketing.elliemae.com
api.subscriptions.elliemae.com
api.coffi.elliemae.com
velocify.net
dev.access.elliemae.com
beacon.elliemae.com
dev3.api.ellielabs.com
concept-tfe.api.elliemae.com
prod01.elliemae.com
qa.velocify.net
qa.education.elliemae.com
insights.elliemae.com
dev.gaia.elliemae.com
dev3.api.ellielabs.com
bazar.int.consumer-connect.rd.elliemae.io
*.api.elliemae.com
creative.elliemae.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
dnl.shop.elliemae.com
api.qa.gaia.elliemae.com
prod01.elliemae.com
phx.cf-lms.elliemae.com
api.peg.cms.rd.elliemae.io
api.ccs.notification.elliemae.com
docs2.developer.elliemae.com
us-west-2.www.velocify.staging.marketing.elliemae.com
mavent.com
cds1.cvent.com
creative.elliemae.com

Certificate

The complete raw certificate details for elliemae.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+Ycy2mPiqxARldWAnyr
Sf1LhZKiihEcSMFACAKupL2zZ/+kBz7h06qgB6oswT+MhKzK57Ed/kAuO2ZpgqrC
P2PkR6pz2hBtcbQWZl+pT9zU/Pvs2kZ9FGZrRZhW4ZZCBc0mbhOjmcitEtDMNdTc
sYMm562r+arNagcif6wDsMYyb+bynbx/opWsFkI+Tk0/7Uz9bW4k1lQemcbb5Yqy
rQaPu709Xu5qqa48/9SonbQvvYJ7KtnaPpuN+GwRkHCzGpdQvOsXenyovdCi9qIc
+gHHOrc1dSWtPGELKIaB2D/mv+9eZQHngtKdfWXivM0KcaJ7BC2QdKx1hoRv4inb
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3707720693460519510503919334307236222
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ICE MORTGAGE TECHNOLOGY, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elliemae.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24224988941011507171031686437340082692026439843361506529851339847929093046442667357817260550486245912056415619074890427070509078505968481029773541763368264078454584741496297469412351929032180316497223208082708595880823104223090825424736816712127991153257765897116362961371798608301154036593637119952871972988103476638050450555800005213041009140230273476233097970995331530546849314725948572316879273433164987810663100404526661934957356605289894679974519873755306234136849324134940385590629427248954324910665717483815873601093885680521274206516543891911682669767902623058031111326501438894860601601113305887061874170759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92b153e7f1440233f6e75f711f23ddab59a7fc39
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2885 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9857689037.brokersite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allregs.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.subscriptions.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisalcenter.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-na02.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-na02.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadspecial.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecrm.ellielabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompasswebcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep3.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep9.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epps-staging.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epps.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ian.qa.analytics.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.ecrm.ellielabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadcenter.elliemaeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-na02.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-na02.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrweb.mortgagereturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrweb2.mortgagereturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtgpricing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerportal.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-agentbridge.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-agentbridge.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-assetservice.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-assetservice.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiq.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiq.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiqrouter.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiqrouter.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-inboundhandler.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-inboundhandler.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-integrations-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-integrations-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-lmgateway.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-lmgateway.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-security.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-security.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.api.subscriptions.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.api.subscriptions.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titlecenter.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encompasswebcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtgpricing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure-loandirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.elliemae.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018d3295d21e0000040300483046022100f09f55d3d8dd27fe9c5f68871ec6362a09053f2ae1a336e8ad7a5f55ed2bfc3d022100eb5a95aab5d5c5df78b5ec0207f98478a46d664ce057d54c99877e12e49328ea0076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018d3295d2000000040300473045022100e331cf72c0e44a8d3117bc7596a404bd2593729014c2c1db657265618f3471c202206514f52c30b082f586fd4ba7f8a2ec8c37f1c82f3f1e4bd7f5d78a64a25e8818007500e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018d3295d20000000403004630440220283f95e86452dc7b1c2812582eb5e0e5854f7d3da8908ff87815f2b726b8754902206530b8dfd15d5eb1a8a7531aec368e5c6f760daa9bdc0cb56f58192a430429d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009c3f2887dfa8c30cd443040db26e14298533ca325ad2259fc64d3678b2e2e17ba5fd65b436594aa1ba475915715f1d09186c235d29b5e6059a2b7a97f7ccbd680205b2f77477b8b756097b56381e4992f29cad6d8377f25403b6dab758f3ad5210e074b4198b9b1793e62bff0016cd009b0c6951adf5c060352d0a337871c288a682e0c1c85f4714a7c00b3c8443f0334d789e39d83ba25bb8893efd6b5bf18b87a3590359f37e997e073862a918e2fdf0106e0049cb0e80a90b94e00866029205a15700972c7fecd9650c2bf38da46e628189c3cd0a52168d8a246eb777b2f8a23700937d1fd8533bade2e9bd0c67de906f7290e9e806663ae5a0ad0ad9fd24