elliemae.com

- Ellie Mae Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0c:fd:39:88:18:24:cb:a0:e2:53:e6:d0:c5:54:dd:1b was issued on by DigiCert Inc.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ellie Mae Inc.

Organization: Ellie Mae Inc.
Organization unit: IT
State / Province: California
Locality: Pleasanton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:fd:39:88:18:24:cb:a0:e2:53:e6:d0:c5:54:dd:1b
Serial Number (int): 17265553934477935123430093101125131547
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ae:a5:8a:b5:5c:d6:0e:54:a8:47:09:56:51:de:f7:07:25:90:b4:62
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): a3:3f:b6:98:f9:4f:e3:c3:73:43:24:08:f3:04:92:d5:4c:ad:01:76
Fingerprint (sha256): 88:1d:fc:4a:ca:38:d4:ba:57:bb:4c:13:b9:91:e3:7c:42:aa:76:da:0f:f8:40:5b:7b:f2:83:19:b9:b7:9a:e8

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate elliemae.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elliemae.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

elliemae.com
pulse-api.prod.velocify.com
perf.encompassmobile.com
lm-na02.prod.velocify.com
lmgateway.stg.velocify.com
security.stg.velocify.com
service.prod.velocify.com
dialiqrouter.prod.velocify.com
epps.elliemae.com
ep3.encompassmobile.com
assetservice.dev1.velocify.net
test.allregsloanlibrary.com
integrations-api.prod.velocify.com
preprod-inboundhandler.stg.velocify.com
webapi.prod.velocify.com
assetservice.prod.velocify.com
dialiqrouter.stg.velocify.com
dialiqrouter.dev1.velocify.net
titlecenter.elliemae.com
preprod-dialiqrouter.prod.velocify.com
preprod-agentbridge.prod.velocify.com
ecrm.ellielabs.com
cdn.stg.velocify.com
cdn.dev1.velocify.net
pulse-api.dev1.velocify.net
mrweb.mortgagereturns.com
service.stg.velocify.com
preprod-security.stg.velocify.com
security.prod.velocify.com
velocify.com
preprod-dialiqrouter.stg.velocify.com
dialiq.prod.velocify.com
mrweb2.mortgagereturns.com
agentbridge.dev1.velocify.net
allregs.elliemae.com
agentbridge.stg.velocify.com
epps-staging.elliemae.com
assetservice.stg.velocify.com
inboundhandler.prod.velocify.com
ep9.encompassmobile.com
www.elliemae.com
lm.stg.velocify.com
mtgpricing.com
inboundhandler.dev1.velocify.net
dialiq.stg.velocify.com
partnerportal.elliemae.com
integrations-api.dev1.velocify.net
lmgateway.dev1.velocify.net
lmgateway.prod.velocify.com
webapi.stg.velocify.com
cdn-na02.prod.velocify.com
service.dev1.velocify.net
www.secure-loandirect.com
allregsloanlibrary.com
preprod-inboundhandler.prod.velocify.com
preprod-integrations-api.stg.velocify.com
www.encompassmobile.com
preprod-integrations-api.prod.velocify.com
img.ecrm.ellielabs.com
www.mtgpricing.com
webapi.dev1.velocify.net
www1.elliemae.com
dialiq.dev1.velocify.net
inboundhandler.stg.velocify.com
import.prod.velocify.com
encompass.prod.velocify.com
preprod-dialiq.stg.velocify.com
security.dev1.velocify.net
preprod-assetservice.stg.velocify.com
encompass.dev1.velocify.net
www.velocify.com
encompass.stg.velocify.com
preprod-lmgateway.prod.velocify.com
lm.prod.velocify.com
pulse-api.stg.velocify.com
ian.qa.analytics.rd.elliemae.io
lm-na02.stg.velocify.com
cdn-na02.stg.velocify.com
preprod-dialiq.prod.velocify.com
import.stg.velocify.com
www.allregsloanlibrary.com
agentbridge.prod.velocify.com
downloadspecial.elliemae.com
leadcenter.elliemaeservices.com
preprod-assetservice.prod.velocify.com
9857689037.brokersite.com
cdn.prod.velocify.com
appraisalcenter.elliemae.com
experience.elliemae.com
preprod-lmgateway.stg.velocify.com
preprod-agentbridge.stg.velocify.com
import.dev1.velocify.net
preprod-security.prod.velocify.com
www.encompasswebcenter.com
integrations-api.stg.velocify.com
encompasswebcenter.com
lm.dev1.velocify.net

Other certificates including the domain name elliemae.com

(limited to 100 certificates)
website.elliemae.com
insights.elliemae.com
api.stg.gaia.elliemae.com
stg.coffi.elliemae.com
api-stage.ccs.notification.elliemae.com
stg.tsmonitor.elliemae.com
*.idp.elliemae.com
prod01.elliemae.com
phoenix.access.elliemae.com
insights.elliemae.com
docs.concept.partner.elliemae.com
us-west-2.www.staging.marketing.elliemae.com
sseqadashboard.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
cds1.cvent.com
mavent.com
insights.elliemae.com
nonprod01.elliemae.com
insights-demo.elliemae.com
*.api.elliemae.com
prod01.elliemae.com
dev.emstatuscenter.elliemae.com
insights.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
api-concept.presence.notification.elliemae.com
cds1.cvent.com
prod.ns-sse-processor.notification.elliemae.com
cds1.cvent.com
docs.developer.elliemae.com
api.peg.asset.rd.elliemae.io
stg.beacon.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
stg.coffi.elliemae.com
api-concept.presence.notification.elliemae.com
*.mortgage-application.net
qa.modules.elliemaeservices.com
insights.elliemae.com
velocify.net
beacon.elliemae.com
cds1.cvent.com
api.ccs.notification.elliemae.com
cds1.cvent.com
*.api.elliemae.com
origin-api.push.notification.elliemae.com
api-stg.presence.notification.elliemae.com
us-east-1.www.staging.marketing.elliemae.com
elliemae.com
prod01.elliemae.com
cert3344.elliemae.com
qa.beacon.elliemae.com
docs.developer.elliemae.com
prod01.elliemae.com
api.coffi.elliemae.com
dev.resourcecenterapi.elliemae.com
api.stg.coffi.elliemae.com
cds1.cvent.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
*.admin.elliemae.com
dev-iceedu.elliemae.com
partnerconnect.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
education.elliemae.com
epps.elliemae.com
*.admin.elliemae.com
pemdemo.elliemae.com
dev.resourcecenterapi.elliemae.com
insights.elliemae.com
dev.rccasemgt.elliemae.com
emise1.corp.elliemae.com
concept.developer.elliemae.com
cds1.cvent.com
us-east-1.www.simplifile.prod.marketing.elliemae.com
api.subscriptions.elliemae.com
api.coffi.elliemae.com
velocify.net
dev.access.elliemae.com
beacon.elliemae.com
dev3.api.ellielabs.com
concept-tfe.api.elliemae.com
prod01.elliemae.com
qa.velocify.net
qa.education.elliemae.com
insights.elliemae.com
dev.gaia.elliemae.com
dev3.api.ellielabs.com
bazar.int.consumer-connect.rd.elliemae.io
*.api.elliemae.com
creative.elliemae.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
dnl.shop.elliemae.com
api.qa.gaia.elliemae.com
prod01.elliemae.com
phx.cf-lms.elliemae.com
api.peg.cms.rd.elliemae.io
api.ccs.notification.elliemae.com
docs2.developer.elliemae.com
us-west-2.www.velocify.staging.marketing.elliemae.com
mavent.com
cds1.cvent.com
creative.elliemae.com

Certificate

The complete raw certificate details for elliemae.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIP4TCCDsmgAwIBAgIQDP05iBgky6DiU+bQxVTdGzANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODEyMTMwMDAwMDBaFw0xOTAzMTUxMjAwMDBaMHQxCzAJBgNVBAYTAlVTMRMw
EQYDVQQIEwpDYWxpZm9ybmlhMRMwEQYDVQQHEwpQbGVhc2FudG9uMRcwFQYDVQQK
Ew5FbGxpZSBNYWUgSW5jLjELMAkGA1UECxMCSVQxFTATBgNVBAMTDGVsbGllbWFl
LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMaq5FB+fFG5HDQq
Ga+9bN9Ai+1syrXrnQAdtEfuBB1s1PSx1D97jp+0MQhn4t9cnVvptwz8+3EYKkLo
CsNLGR5Ws9HVOKWCqSRzZsm2lGHJ2vgI7gTGVrVBcVdYQUvWxYgKlyv5vKB1jjhr
iJxp3xBjsmkebrChtJhuFzaEyuFKO87PaveAdBcHzLO0ADMs+JXfs4HRTh7ni3Vx
jTa2dRSQ1OMqAbyuasSCh84UQtYEQ5vIWaAmGp9L0HPS0Ho4bVDdaLUg6icGwc7q
P+0lzSbU4MuazT28pCc4XH2XNzObQCpDoxQw1tYBvKzUYFGA8OYRs82KjH/cd4KG
zmw1ryECAwEAAaOCDIMwggx/MB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKjQxY4
nmzFMB0GA1UdDgQWBBSupYq1XNYOVKhHCVZR3vcHJZC0YjCCCucGA1UdEQSCCt4w
ggraggxlbGxpZW1hZS5jb22CG3B1bHNlLWFwaS5wcm9kLnZlbG9jaWZ5LmNvbYIY
cGVyZi5lbmNvbXBhc3Ntb2JpbGUuY29tghlsbS1uYTAyLnByb2QudmVsb2NpZnku
Y29tghpsbWdhdGV3YXkuc3RnLnZlbG9jaWZ5LmNvbYIZc2VjdXJpdHkuc3RnLnZl
bG9jaWZ5LmNvbYIZc2VydmljZS5wcm9kLnZlbG9jaWZ5LmNvbYIeZGlhbGlxcm91
dGVyLnByb2QudmVsb2NpZnkuY29tghFlcHBzLmVsbGllbWFlLmNvbYIXZXAzLmVu
Y29tcGFzc21vYmlsZS5jb22CHmFzc2V0c2VydmljZS5kZXYxLnZlbG9jaWZ5Lm5l
dIIbdGVzdC5hbGxyZWdzbG9hbmxpYnJhcnkuY29tgiJpbnRlZ3JhdGlvbnMtYXBp
LnByb2QudmVsb2NpZnkuY29tgidwcmVwcm9kLWluYm91bmRoYW5kbGVyLnN0Zy52
ZWxvY2lmeS5jb22CGHdlYmFwaS5wcm9kLnZlbG9jaWZ5LmNvbYIeYXNzZXRzZXJ2
aWNlLnByb2QudmVsb2NpZnkuY29tgh1kaWFsaXFyb3V0ZXIuc3RnLnZlbG9jaWZ5
LmNvbYIeZGlhbGlxcm91dGVyLmRldjEudmVsb2NpZnkubmV0ghh0aXRsZWNlbnRl
ci5lbGxpZW1hZS5jb22CJnByZXByb2QtZGlhbGlxcm91dGVyLnByb2QudmVsb2Np
ZnkuY29tgiVwcmVwcm9kLWFnZW50YnJpZGdlLnByb2QudmVsb2NpZnkuY29tghJl
Y3JtLmVsbGllbGFicy5jb22CFGNkbi5zdGcudmVsb2NpZnkuY29tghVjZG4uZGV2
MS52ZWxvY2lmeS5uZXSCG3B1bHNlLWFwaS5kZXYxLnZlbG9jaWZ5Lm5ldIIZbXJ3
ZWIubW9ydGdhZ2VyZXR1cm5zLmNvbYIYc2VydmljZS5zdGcudmVsb2NpZnkuY29t
giFwcmVwcm9kLXNlY3VyaXR5LnN0Zy52ZWxvY2lmeS5jb22CGnNlY3VyaXR5LnBy
b2QudmVsb2NpZnkuY29tggx2ZWxvY2lmeS5jb22CJXByZXByb2QtZGlhbGlxcm91
dGVyLnN0Zy52ZWxvY2lmeS5jb22CGGRpYWxpcS5wcm9kLnZlbG9jaWZ5LmNvbYIa
bXJ3ZWIyLm1vcnRnYWdlcmV0dXJucy5jb22CHWFnZW50YnJpZGdlLmRldjEudmVs
b2NpZnkubmV0ghRhbGxyZWdzLmVsbGllbWFlLmNvbYIcYWdlbnRicmlkZ2Uuc3Rn
LnZlbG9jaWZ5LmNvbYIZZXBwcy1zdGFnaW5nLmVsbGllbWFlLmNvbYIdYXNzZXRz
ZXJ2aWNlLnN0Zy52ZWxvY2lmeS5jb22CIGluYm91bmRoYW5kbGVyLnByb2QudmVs
b2NpZnkuY29tghdlcDkuZW5jb21wYXNzbW9iaWxlLmNvbYIQd3d3LmVsbGllbWFl
LmNvbYITbG0uc3RnLnZlbG9jaWZ5LmNvbYIObXRncHJpY2luZy5jb22CIGluYm91
bmRoYW5kbGVyLmRldjEudmVsb2NpZnkubmV0ghdkaWFsaXEuc3RnLnZlbG9jaWZ5
LmNvbYIacGFydG5lcnBvcnRhbC5lbGxpZW1hZS5jb22CImludGVncmF0aW9ucy1h
cGkuZGV2MS52ZWxvY2lmeS5uZXSCG2xtZ2F0ZXdheS5kZXYxLnZlbG9jaWZ5Lm5l
dIIbbG1nYXRld2F5LnByb2QudmVsb2NpZnkuY29tghd3ZWJhcGkuc3RnLnZlbG9j
aWZ5LmNvbYIaY2RuLW5hMDIucHJvZC52ZWxvY2lmeS5jb22CGXNlcnZpY2UuZGV2
MS52ZWxvY2lmeS5uZXSCGXd3dy5zZWN1cmUtbG9hbmRpcmVjdC5jb22CFmFsbHJl
Z3Nsb2FubGlicmFyeS5jb22CKHByZXByb2QtaW5ib3VuZGhhbmRsZXIucHJvZC52
ZWxvY2lmeS5jb22CKXByZXByb2QtaW50ZWdyYXRpb25zLWFwaS5zdGcudmVsb2Np
ZnkuY29tghd3d3cuZW5jb21wYXNzbW9iaWxlLmNvbYIqcHJlcHJvZC1pbnRlZ3Jh
dGlvbnMtYXBpLnByb2QudmVsb2NpZnkuY29tghZpbWcuZWNybS5lbGxpZWxhYnMu
Y29tghJ3d3cubXRncHJpY2luZy5jb22CGHdlYmFwaS5kZXYxLnZlbG9jaWZ5Lm5l
dIIRd3d3MS5lbGxpZW1hZS5jb22CGGRpYWxpcS5kZXYxLnZlbG9jaWZ5Lm5ldIIf
aW5ib3VuZGhhbmRsZXIuc3RnLnZlbG9jaWZ5LmNvbYIYaW1wb3J0LnByb2QudmVs
b2NpZnkuY29tghtlbmNvbXBhc3MucHJvZC52ZWxvY2lmeS5jb22CH3ByZXByb2Qt
ZGlhbGlxLnN0Zy52ZWxvY2lmeS5jb22CGnNlY3VyaXR5LmRldjEudmVsb2NpZnku
bmV0giVwcmVwcm9kLWFzc2V0c2VydmljZS5zdGcudmVsb2NpZnkuY29tghtlbmNv
bXBhc3MuZGV2MS52ZWxvY2lmeS5uZXSCEHd3dy52ZWxvY2lmeS5jb22CGmVuY29t
cGFzcy5zdGcudmVsb2NpZnkuY29tgiNwcmVwcm9kLWxtZ2F0ZXdheS5wcm9kLnZl
bG9jaWZ5LmNvbYIUbG0ucHJvZC52ZWxvY2lmeS5jb22CGnB1bHNlLWFwaS5zdGcu
dmVsb2NpZnkuY29tgh9pYW4ucWEuYW5hbHl0aWNzLnJkLmVsbGllbWFlLmlvghhs
bS1uYTAyLnN0Zy52ZWxvY2lmeS5jb22CGWNkbi1uYTAyLnN0Zy52ZWxvY2lmeS5j
b22CIHByZXByb2QtZGlhbGlxLnByb2QudmVsb2NpZnkuY29tghdpbXBvcnQuc3Rn
LnZlbG9jaWZ5LmNvbYIad3d3LmFsbHJlZ3Nsb2FubGlicmFyeS5jb22CHWFnZW50
YnJpZGdlLnByb2QudmVsb2NpZnkuY29tghxkb3dubG9hZHNwZWNpYWwuZWxsaWVt
YWUuY29tgh9sZWFkY2VudGVyLmVsbGllbWFlc2VydmljZXMuY29tgiZwcmVwcm9k
LWFzc2V0c2VydmljZS5wcm9kLnZlbG9jaWZ5LmNvbYIZOTg1NzY4OTAzNy5icm9r
ZXJzaXRlLmNvbYIVY2RuLnByb2QudmVsb2NpZnkuY29tghxhcHByYWlzYWxjZW50
ZXIuZWxsaWVtYWUuY29tghdleHBlcmllbmNlLmVsbGllbWFlLmNvbYIicHJlcHJv
ZC1sbWdhdGV3YXkuc3RnLnZlbG9jaWZ5LmNvbYIkcHJlcHJvZC1hZ2VudGJyaWRn
ZS5zdGcudmVsb2NpZnkuY29tghhpbXBvcnQuZGV2MS52ZWxvY2lmeS5uZXSCInBy
ZXByb2Qtc2VjdXJpdHkucHJvZC52ZWxvY2lmeS5jb22CGnd3dy5lbmNvbXBhc3N3
ZWJjZW50ZXIuY29tgiFpbnRlZ3JhdGlvbnMtYXBpLnN0Zy52ZWxvY2lmeS5jb22C
FmVuY29tcGFzc3dlYmNlbnRlci5jb22CFGxtLmRldjEudmVsb2NpZnkubmV0MA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPgYD
VR0fBDcwNTAzoDGgL4YtaHR0cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1c3RS
U0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUH
AgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHUGCCsG
AQUFBwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5nZW90cnVzdC5j
b20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3RydXN0LmNvbS9HZW9U
cnVzdFJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAjZq9EN2VptWcrKutT52oRjYu65BpMePQXeoG
QCK132W+HFpkZmzQfQ+nRvFIAZNPwNo+F97SDqUI5Qq9n1jH1ZDEopwpDHqOqu26
PqF8v0Kqn71kt7touHf5wVA3uYswM456nlNHPMseDdzd7x9eQjXBZ8ddJSLdOqw6
qrLAVddLQPgLV6qRH0xr00I3z8R96gtu5fqApOGGE/jCJHMhcJY5IICrpbwxgYUw
rW+tGA1wNfq2vMoZL8/rXQ37XTHcbdrTa3cJuetWxoHMBTJxvd+iW4dkmgBU3cH2
oLsjPL77azF4ChZd6M6NhWLuNBwdpMydbCMj5IDxNO/4V0gBZw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqrkUH58UbkcNCoZr71s
30CL7WzKteudAB20R+4EHWzU9LHUP3uOn7QxCGfi31ydW+m3DPz7cRgqQugKw0sZ
Hlaz0dU4pYKpJHNmybaUYcna+AjuBMZWtUFxV1hBS9bFiAqXK/m8oHWOOGuInGnf
EGOyaR5usKG0mG4XNoTK4Uo7zs9q94B0FwfMs7QAMyz4ld+zgdFOHueLdXGNNrZ1
FJDU4yoBvK5qxIKHzhRC1gRDm8hZoCYan0vQc9LQejhtUN1otSDqJwbBzuo/7SXN
JtTgy5rNPbykJzhcfZc3M5tAKkOjFDDW1gG8rNRgUYDw5hGzzYqMf9x3gobObDWv
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17265553934477935123430093101125131547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ellie Mae Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elliemae.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25079454296896055616832559263384443646078867240792041710028296578092585779363249444248373133522782173397202994679138230937046203689204442923547723319232863848197335792016322180927660756903646979214694918307862927090669910260732659746048752314677992437902066229156609519455295303090283504588651967121474253849584889914257920782056393785682628045839028285734229776010905745537096542737316465542216171415838481289744765959485283330155611418326061865145700780673601380453333652530476582528796993369511778289881075627900560194753285051176802707697240327381161975478350177650880660974753337691401451719375080818885650657057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aea58ab55cd60e54a847095651def7072590b462
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2782 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-na02.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epps.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep3.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-inboundhandler.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titlecenter.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiqrouter.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-agentbridge.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecrm.ellielabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrweb.mortgagereturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-security.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiqrouter.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrweb2.mortgagereturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allregs.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epps-staging.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep9.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtgpricing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerportal.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-na02.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure-loandirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-inboundhandler.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-integrations-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-integrations-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.ecrm.ellielabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtgpricing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiq.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-assetservice.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-lmgateway.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ian.qa.analytics.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-na02.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-na02.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiq.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadspecial.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadcenter.elliemaeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-assetservice.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9857689037.brokersite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisalcenter.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-lmgateway.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-agentbridge.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-security.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encompasswebcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompasswebcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.dev1.velocify.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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