elliemae.com

- Ellie Mae Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0c:2c:91:5b:12:cd:13:e8:8f:d1:3e:30:78:5b:e6:48 was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ellie Mae Inc.

Organization: Ellie Mae Inc.
Organization unit: IT
State / Province: California
Locality: Pleasanton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:2c:91:5b:12:cd:13:e8:8f:d1:3e:30:78:5b:e6:48
Serial Number (int): 16182145176168495165543362362976495176
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7b:08:a0:13:f6:c4:fc:7b:c1:e0:59:5f:bd:08:e2:92:1b:04:96:37
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 60:79:1a:55:a1:b0:5c:1b:37:8d:46:40:05:bd:ac:80:8c:56:6e:f7
Fingerprint (sha256): 6b:b7:2c:ab:b7:23:e4:14:af:c7:1f:66:48:68:b7:5d:2a:6b:f4:8d:b2:e6:e5:d1:65:d6:b5:ff:71:f5:61:7b

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate elliemae.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elliemae.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

elliemae.com
dialiq.prod.velocify.com
cdn.dev1.velocify.net
service.prod.velocify.com
mtgpricing.com
preprod-lmgateway.prod.velocify.com
encompass.prod.velocify.com
encompass.stg.velocify.com
lm-na02.prod.velocify.com
lmgateway.dev1.velocify.net
appraisalcenter.elliemae.com
velocify.com
webapi.stg.velocify.com
dialiqrouter.prod.velocify.com
agentbridge.prod.velocify.com
ep3.encompassmobile.com
encompasswebcenter.com
preprod-integrations-api.prod.velocify.com
allregsloanlibrary.com
perf.encompassmobile.com
service.stg.velocify.com
img.ecrm.ellielabs.com
security.stg.velocify.com
preprod-dialiqrouter.stg.velocify.com
ecrm.ellielabs.com
inboundhandler.prod.velocify.com
inboundhandler.stg.velocify.com
lm.stg.velocify.com
cdn.prod.velocify.com
www.encompasswebcenter.com
preprod-agentbridge.prod.velocify.com
security.prod.velocify.com
security.dev1.velocify.net
import.dev1.velocify.net
preprod-agentbridge.stg.velocify.com
mrweb2.mortgagereturns.com
lm.prod.velocify.com
www.secure-loandirect.com
lm.dev1.velocify.net
cdn.stg.velocify.com
webapi.prod.velocify.com
www.encompassmobile.com
leadcenter.elliemaeservices.com
downloadspecial.elliemae.com
lm-na02.stg.velocify.com
preprod-dialiqrouter.prod.velocify.com
preprod-dialiq.prod.velocify.com
allregs.elliemae.com
assetservice.dev1.velocify.net
cdn-na02.stg.velocify.com
dialiqrouter.stg.velocify.com
service.dev1.velocify.net
preprod-lmgateway.stg.velocify.com
preprod-assetservice.stg.velocify.com
assetservice.stg.velocify.com
pulse-api.prod.velocify.com
ian.qa.analytics.rd.elliemae.io
encompass.dev1.velocify.net
epps-staging.elliemae.com
preprod-security.stg.velocify.com
cdn-na02.prod.velocify.com
preprod-assetservice.prod.velocify.com
www.elliemae.com
test.allregsloanlibrary.com
inboundhandler.dev1.velocify.net
www1.elliemae.com
dialiq.dev1.velocify.net
preprod-inboundhandler.prod.velocify.com
www.mtgpricing.com
dialiqrouter.dev1.velocify.net
mrweb.mortgagereturns.com
dialiq.stg.velocify.com
import.stg.velocify.com
www.velocify.com
preprod-inboundhandler.stg.velocify.com
preprod-integrations-api.stg.velocify.com
import.prod.velocify.com
lmgateway.prod.velocify.com
titlecenter.elliemae.com
epps.elliemae.com
integrations-api.dev1.velocify.net
assetservice.prod.velocify.com
integrations-api.prod.velocify.com
webapi.dev1.velocify.net
preprod-dialiq.stg.velocify.com
pulse-api.dev1.velocify.net
integrations-api.stg.velocify.com
9857689037.brokersite.com
lmgateway.stg.velocify.com
experience.elliemae.com
pulse-api.stg.velocify.com
www.allregsloanlibrary.com
agentbridge.dev1.velocify.net
ep9.encompassmobile.com
agentbridge.stg.velocify.com
preprod-security.prod.velocify.com

Other certificates including the domain name elliemae.com

(limited to 100 certificates)
website.elliemae.com
insights.elliemae.com
api.stg.gaia.elliemae.com
stg.coffi.elliemae.com
api-stage.ccs.notification.elliemae.com
stg.tsmonitor.elliemae.com
*.idp.elliemae.com
prod01.elliemae.com
phoenix.access.elliemae.com
insights.elliemae.com
docs.concept.partner.elliemae.com
us-west-2.www.staging.marketing.elliemae.com
sseqadashboard.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
cds1.cvent.com
mavent.com
insights.elliemae.com
nonprod01.elliemae.com
insights-demo.elliemae.com
*.api.elliemae.com
prod01.elliemae.com
dev.emstatuscenter.elliemae.com
insights.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
api-concept.presence.notification.elliemae.com
cds1.cvent.com
prod.ns-sse-processor.notification.elliemae.com
cds1.cvent.com
docs.developer.elliemae.com
api.peg.asset.rd.elliemae.io
stg.beacon.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
stg.coffi.elliemae.com
api-concept.presence.notification.elliemae.com
*.mortgage-application.net
qa.modules.elliemaeservices.com
insights.elliemae.com
velocify.net
beacon.elliemae.com
cds1.cvent.com
api.ccs.notification.elliemae.com
cds1.cvent.com
*.api.elliemae.com
origin-api.push.notification.elliemae.com
api-stg.presence.notification.elliemae.com
us-east-1.www.staging.marketing.elliemae.com
elliemae.com
prod01.elliemae.com
cert3344.elliemae.com
qa.beacon.elliemae.com
docs.developer.elliemae.com
prod01.elliemae.com
api.coffi.elliemae.com
dev.resourcecenterapi.elliemae.com
api.stg.coffi.elliemae.com
cds1.cvent.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
*.admin.elliemae.com
dev-iceedu.elliemae.com
partnerconnect.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
education.elliemae.com
epps.elliemae.com
*.admin.elliemae.com
pemdemo.elliemae.com
dev.resourcecenterapi.elliemae.com
insights.elliemae.com
dev.rccasemgt.elliemae.com
emise1.corp.elliemae.com
concept.developer.elliemae.com
cds1.cvent.com
us-east-1.www.simplifile.prod.marketing.elliemae.com
api.subscriptions.elliemae.com
api.coffi.elliemae.com
velocify.net
dev.access.elliemae.com
beacon.elliemae.com
dev3.api.ellielabs.com
concept-tfe.api.elliemae.com
prod01.elliemae.com
qa.velocify.net
qa.education.elliemae.com
insights.elliemae.com
dev.gaia.elliemae.com
dev3.api.ellielabs.com
bazar.int.consumer-connect.rd.elliemae.io
*.api.elliemae.com
creative.elliemae.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
dnl.shop.elliemae.com
api.qa.gaia.elliemae.com
prod01.elliemae.com
phx.cf-lms.elliemae.com
api.peg.cms.rd.elliemae.io
api.ccs.notification.elliemae.com
docs2.developer.elliemae.com
us-west-2.www.velocify.staging.marketing.elliemae.com
mavent.com
cds1.cvent.com
creative.elliemae.com

Certificate

The complete raw certificate details for elliemae.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSdNUeor+Kb7N6KxZffz
DivA8o9fO1tv91o6Mio3Sx7kvc1v0tKqk55oJeGSGCbox2nfHUKGvyTviT2UcyAm
JAKN7eIYux/SXYeVTku1JQ2A3hPzj8H13WzeaspbifoaKS1V7h9Ua06aYKdc+qZG
XU1BLSA4glxR3gBHz5J65zYJvcatDbpr64nMxE0TWrkFm0uiwdtTTTxp7MIlDze/
2K0ErzgTpws82vQeuI91iOtzMDp3jLK1BIHbMkQfVScTZ+I7D0NQ9vWnNhJkhxS1
ifHlk0h8SPmd+I+ZM4sEaQT6MBMtJotDQFR+TXvRGZdZsEFMV5Mt+MB/oULUNmAM
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16182145176168495165543362362976495176
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ellie Mae Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elliemae.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24888326632206432982144731241897065671321172608871865808566390976487769386603199290781391418629295135849243363686850676297330119766478337329253121520617017033565661438006208798947922790571756232222042789883885059556443161596430193560879831828013126931840909098005878392061797116732667088748891781666952184273999273552977891213794782385554208618386669691853574972208620720291608309002265830414072755107915019369079248057263640627463011386595787048474165414463986076820901009178371672401273678159970120189563571507708755566511758585049472831149384645904531375529001238783232934936169428713109905141762747237341375499519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b08a013f6c4fc7bc1e0595fbd08e2921b049637
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2754 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtgpricing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-lmgateway.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-na02.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisalcenter.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep3.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompasswebcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-integrations-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.ecrm.ellielabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiqrouter.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecrm.ellielabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encompasswebcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-agentbridge.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-agentbridge.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrweb2.mortgagereturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure-loandirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadcenter.elliemaeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadspecial.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-na02.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiqrouter.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiq.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allregs.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-na02.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-lmgateway.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-assetservice.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ian.qa.analytics.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epps-staging.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-security.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-na02.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-assetservice.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-inboundhandler.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtgpricing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrweb.mortgagereturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-inboundhandler.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-integrations-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titlecenter.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epps.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiq.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9857689037.brokersite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep9.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-security.prod.velocify.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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