elliemae.com

- Ellie Mae Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 03:19:9e:f6:dc:37:ea:d2:a1:af:a1:77:0a:70:11:d9 was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ellie Mae Inc.

Organization: Ellie Mae Inc.
Organization unit: IT
State / Province: California
Locality: Pleasanton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:19:9e:f6:dc:37:ea:d2:a1:af:a1:77:0a:70:11:d9
Serial Number (int): 4120715587817775782377390260312084953
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 37:f7:66:b9:59:c6:15:3b:83:01:eb:21:b6:c1:7f:c8:87:5c:60:26
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): ef:30:99:11:7f:0a:65:97:e4:12:27:d7:e2:a9:48:ee:f6:56:a4:6b
Fingerprint (sha256): 6c:f3:18:9e:ca:1a:51:1f:26:7c:15:4a:28:e9:ad:5b:5a:ec:03:67:b0:5c:de:58:83:d4:fc:31:60:a5:04:3a

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate elliemae.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elliemae.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

elliemae.com
cdn-na02.prod.velocify.com
www.secure-loandirect.com
assetservice.prod.velocify.com
www1.elliemae.com
security.dev1.velocify.net
stg.api.subscriptions.elliemae.com
import.prod.velocify.com
www.mtgpricing.com
encompasswebcenter.com
velocify.com
lmgateway.prod.velocify.com
agentbridge.prod.velocify.com
cdn.prod.velocify.com
pulse-api.prod.velocify.com
preprod-security.stg.velocify.com
cdn.dev1.velocify.net
dialiqrouter.dev1.velocify.net
allregs.elliemae.com
lm-na02.stg.velocify.com
lm.stg.velocify.com
preprod-dialiq.stg.velocify.com
preprod-integrations-api.prod.velocify.com
lmgateway.dev1.velocify.net
epps.elliemae.com
appraisalcenter.elliemae.com
inboundhandler.dev1.velocify.net
encompass.stg.velocify.com
pulse-api.dev1.velocify.net
allregsloanlibrary.com
preprod-integrations-api.stg.velocify.com
security.stg.velocify.com
img.ecrm.ellielabs.com
ecrm.ellielabs.com
www.encompasswebcenter.com
cdn-na02.stg.velocify.com
assetservice.dev1.velocify.net
preprod-agentbridge.stg.velocify.com
preprod-lmgateway.stg.velocify.com
service.stg.velocify.com
leadcenter.elliemaeservices.com
assetservice.stg.velocify.com
www.velocify.com
test.allregsloanlibrary.com
mrweb2.mortgagereturns.com
agentbridge.stg.velocify.com
preprod-assetservice.prod.velocify.com
dialiq.dev1.velocify.net
epps-staging.elliemae.com
preprod-lmgateway.prod.velocify.com
service.dev1.velocify.net
service.prod.velocify.com
preprod-agentbridge.prod.velocify.com
www.allregsloanlibrary.com
import.dev1.velocify.net
ian.qa.analytics.rd.elliemae.io
preprod-assetservice.stg.velocify.com
preprod-dialiq.prod.velocify.com
webapi.prod.velocify.com
preprod-security.prod.velocify.com
dialiq.prod.velocify.com
lm-na02.prod.velocify.com
preprod-inboundhandler.stg.velocify.com
9857689037.brokersite.com
webapi.stg.velocify.com
cdn.stg.velocify.com
mrweb.mortgagereturns.com
perf.encompassmobile.com
experience.elliemae.com
titlecenter.elliemae.com
encompass.prod.velocify.com
qa.api.subscriptions.elliemae.com
lm.dev1.velocify.net
lmgateway.stg.velocify.com
integrations-api.stg.velocify.com
import.stg.velocify.com
downloadspecial.elliemae.com
api.subscriptions.elliemae.com
preprod-inboundhandler.prod.velocify.com
www.elliemae.com
agentbridge.dev1.velocify.net
preprod-dialiqrouter.stg.velocify.com
ep9.encompassmobile.com
dialiqrouter.prod.velocify.com
mtgpricing.com
ep3.encompassmobile.com
security.prod.velocify.com
dialiq.stg.velocify.com
integrations-api.prod.velocify.com
inboundhandler.prod.velocify.com
preprod-dialiqrouter.prod.velocify.com
partnerportal.elliemae.com
pulse-api.stg.velocify.com
lm.prod.velocify.com
www.encompassmobile.com
dialiqrouter.stg.velocify.com
inboundhandler.stg.velocify.com
integrations-api.dev1.velocify.net
webapi.dev1.velocify.net
encompass.dev1.velocify.net

Other certificates including the domain name elliemae.com

(limited to 100 certificates)
website.elliemae.com
insights.elliemae.com
api.stg.gaia.elliemae.com
stg.coffi.elliemae.com
api-stage.ccs.notification.elliemae.com
stg.tsmonitor.elliemae.com
*.idp.elliemae.com
prod01.elliemae.com
phoenix.access.elliemae.com
insights.elliemae.com
docs.concept.partner.elliemae.com
us-west-2.www.staging.marketing.elliemae.com
sseqadashboard.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
cds1.cvent.com
mavent.com
insights.elliemae.com
nonprod01.elliemae.com
insights-demo.elliemae.com
*.api.elliemae.com
prod01.elliemae.com
dev.emstatuscenter.elliemae.com
insights.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
api-concept.presence.notification.elliemae.com
cds1.cvent.com
prod.ns-sse-processor.notification.elliemae.com
cds1.cvent.com
docs.developer.elliemae.com
api.peg.asset.rd.elliemae.io
stg.beacon.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
stg.coffi.elliemae.com
api-concept.presence.notification.elliemae.com
*.mortgage-application.net
qa.modules.elliemaeservices.com
insights.elliemae.com
velocify.net
beacon.elliemae.com
cds1.cvent.com
api.ccs.notification.elliemae.com
cds1.cvent.com
*.api.elliemae.com
origin-api.push.notification.elliemae.com
api-stg.presence.notification.elliemae.com
us-east-1.www.staging.marketing.elliemae.com
elliemae.com
prod01.elliemae.com
cert3344.elliemae.com
qa.beacon.elliemae.com
docs.developer.elliemae.com
prod01.elliemae.com
api.coffi.elliemae.com
dev.resourcecenterapi.elliemae.com
api.stg.coffi.elliemae.com
cds1.cvent.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
*.admin.elliemae.com
dev-iceedu.elliemae.com
partnerconnect.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
education.elliemae.com
epps.elliemae.com
*.admin.elliemae.com
pemdemo.elliemae.com
dev.resourcecenterapi.elliemae.com
insights.elliemae.com
dev.rccasemgt.elliemae.com
emise1.corp.elliemae.com
concept.developer.elliemae.com
cds1.cvent.com
us-east-1.www.simplifile.prod.marketing.elliemae.com
api.subscriptions.elliemae.com
api.coffi.elliemae.com
velocify.net
dev.access.elliemae.com
beacon.elliemae.com
dev3.api.ellielabs.com
concept-tfe.api.elliemae.com
prod01.elliemae.com
qa.velocify.net
qa.education.elliemae.com
insights.elliemae.com
dev.gaia.elliemae.com
dev3.api.ellielabs.com
bazar.int.consumer-connect.rd.elliemae.io
*.api.elliemae.com
creative.elliemae.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
dnl.shop.elliemae.com
api.qa.gaia.elliemae.com
prod01.elliemae.com
phx.cf-lms.elliemae.com
api.peg.cms.rd.elliemae.io
api.ccs.notification.elliemae.com
docs2.developer.elliemae.com
us-west-2.www.velocify.staging.marketing.elliemae.com
mavent.com
cds1.cvent.com
creative.elliemae.com

Certificate

The complete raw certificate details for elliemae.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5++Lhg3lQii2pTrR+CFb
XLF4/Dv3NtTvwl+7iy7BVgFKTKXYzfG+TyDAgWIDVIU7DwZXi0MA0V05q0aOlTuF
Tc59jtdsf4/f2XziWw1CTcowO7N9ymMmXOBYtvjJNvV1P0Kg6o4F75OPbsdCU5h3
IUM0bKmkPEthS9tTaTN1B/qukAn+B3HN1JLTHv+1LeSnkhTlhiU16QAf2B8Yt5AZ
fGx6uoaKh7sn16lk6onP4n4+Ksh94IRBpQP8WiEMb4QVAdqZaBKP4XyWuWEX4FnS
TbniwPknf1Sg91VqDQn57RB81uNRsHSnjR1W8aS9iK824ww10uNhIN14x996B+09
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4120715587817775782377390260312084953
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ellie Mae Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elliemae.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29279172496232762049609881001827849144965825404020059792470981479458785960009802589000170217610979360751505868486333595096718052708612096357165968575903595087668926304138812716332039866855722071903704966867403480559092474419011237951513397918227175952162449321984283358600977006725884853311538192776020296799820484984303124895564360170325033661147395078647291587048887129505004491424618569955330605024176084133061910946861111879935868720777039084737691766979167871862062957307613028454176438420060479242000629346686512697592835198439766114913256963929957605898098518878001356847096795568380377522731165387837395516871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37f766b959c6153b8301eb21b6c17fc8875c6026
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2885 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-na02.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure-loandirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.api.subscriptions.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtgpricing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompasswebcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-security.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allregs.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-na02.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiq.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-integrations-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epps.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisalcenter.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-integrations-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.ecrm.ellielabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecrm.ellielabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encompasswebcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-na02.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-agentbridge.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-lmgateway.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadcenter.elliemaeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrweb2.mortgagereturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-assetservice.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epps-staging.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-lmgateway.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-agentbridge.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ian.qa.analytics.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-assetservice.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiq.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-security.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-na02.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-inboundhandler.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9857689037.brokersite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrweb.mortgagereturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titlecenter.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.api.subscriptions.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadspecial.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.subscriptions.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-inboundhandler.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiqrouter.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep9.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtgpricing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep3.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiqrouter.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerportal.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.dev1.velocify.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016a228426a60000040300483046022100cd9177081e57b8cf4f46752be0159e54a4ca90a359443ebb0beabe985da5ddd3022100fc406674ef3aef09a34ae3f2324b327f60e8e1db006f251e7ae7a5d4a20a1a510075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016a22842648000004030046304402200bf49b6a9b976eb4f34387fe7fe4bcba9a746949a8dde32e7731c079f7d086ff0220328b6621375b05b8af1ede9f56253ca83ec08b92963bccdec06505120f040828
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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