elliemae.com

- Ellie Mae Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 07:fd:ea:79:5a:d8:e7:41:da:2e:68:4b:c5:75:06:ee was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ellie Mae Inc.

Organization: Ellie Mae Inc.
Organization unit: IT
State / Province: California
Locality: Pleasanton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:fd:ea:79:5a:d8:e7:41:da:2e:68:4b:c5:75:06:ee
Serial Number (int): 10623002774274512159584259258847659758
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9c:b0:1d:6b:43:73:05:a8:ea:95:c5:02:c1:bc:67:01:70:d7:99:bf
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 28:e0:43:6c:f1:a3:4b:18:a7:f5:15:f1:35:37:1a:3c:9f:06:3f:f8
Fingerprint (sha256): 8d:14:8f:25:19:6e:23:4b:a7:79:e2:b0:89:55:0c:40:ec:59:f2:55:1d:12:24:fe:20:cf:5f:e6:08:b5:b7:63

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate elliemae.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elliemae.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

elliemae.com
www1.elliemae.com
experience.elliemae.com
lm.dev1.velocify.net
preprod-inboundhandler.prod.velocify.com
lmgateway.prod.velocify.com
www.mtgpricing.com
preprod-dialiq.stg.velocify.com
preprod-integrations-api.prod.velocify.com
preprod-security.prod.velocify.com
velocify.com
allregs.elliemae.com
cdn.prod.velocify.com
preprod-dialiq.prod.velocify.com
security.dev1.velocify.net
webapi.prod.velocify.com
encompass.prod.velocify.com
test.allregsloanlibrary.com
cdn.stg.velocify.com
preprod-lmgateway.stg.velocify.com
ep9.encompassmobile.com
dialiq.dev1.velocify.net
assetservice.prod.velocify.com
dialiqrouter.stg.velocify.com
9857689037.brokersite.com
preprod-agentbridge.prod.velocify.com
mrweb2.mortgagereturns.com
preprod-assetservice.stg.velocify.com
preprod-dialiqrouter.stg.velocify.com
inboundhandler.prod.velocify.com
cdn-na02.prod.velocify.com
inboundhandler.stg.velocify.com
encompass.dev1.velocify.net
lm-na02.prod.velocify.com
preprod-dialiqrouter.prod.velocify.com
preprod-security.stg.velocify.com
import.dev1.velocify.net
agentbridge.dev1.velocify.net
dialiq.prod.velocify.com
security.stg.velocify.com
service.prod.velocify.com
downloadspecial.elliemae.com
assetservice.dev1.velocify.net
www.velocify.com
ep3.encompassmobile.com
dialiq.stg.velocify.com
import.prod.velocify.com
webapi.dev1.velocify.net
allregsloanlibrary.com
dialiqrouter.prod.velocify.com
www.encompasswebcenter.com
preprod-lmgateway.prod.velocify.com
preprod-integrations-api.stg.velocify.com
preprod-inboundhandler.stg.velocify.com
assetservice.stg.velocify.com
import.stg.velocify.com
security.prod.velocify.com
cdn.dev1.velocify.net
lm-na02.stg.velocify.com
lmgateway.dev1.velocify.net
pulse-api.dev1.velocify.net
integrations-api.stg.velocify.com
leadcenter.elliemaeservices.com
encompass.stg.velocify.com
epps.elliemae.com
www.secure-loandirect.com
img.ecrm.ellielabs.com
epps-staging.elliemae.com
mtgpricing.com
appraisalcenter.elliemae.com
lmgateway.stg.velocify.com
preprod-agentbridge.stg.velocify.com
inboundhandler.dev1.velocify.net
pulse-api.stg.velocify.com
mrweb.mortgagereturns.com
ecrm.ellielabs.com
integrations-api.prod.velocify.com
www.elliemae.com
pulse-api.prod.velocify.com
cdn-na02.stg.velocify.com
agentbridge.prod.velocify.com
preprod-assetservice.prod.velocify.com
lm.stg.velocify.com
integrations-api.dev1.velocify.net
titlecenter.elliemae.com
encompasswebcenter.com
service.stg.velocify.com
service.dev1.velocify.net
perf.encompassmobile.com
agentbridge.stg.velocify.com
ian.qa.analytics.rd.elliemae.io
dialiqrouter.dev1.velocify.net
www.encompassmobile.com
lm.prod.velocify.com
webapi.stg.velocify.com

Other certificates including the domain name elliemae.com

(limited to 100 certificates)
website.elliemae.com
insights.elliemae.com
api.stg.gaia.elliemae.com
stg.coffi.elliemae.com
api-stage.ccs.notification.elliemae.com
stg.tsmonitor.elliemae.com
*.idp.elliemae.com
prod01.elliemae.com
phoenix.access.elliemae.com
insights.elliemae.com
docs.concept.partner.elliemae.com
us-west-2.www.staging.marketing.elliemae.com
sseqadashboard.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
cds1.cvent.com
mavent.com
insights.elliemae.com
nonprod01.elliemae.com
insights-demo.elliemae.com
*.api.elliemae.com
prod01.elliemae.com
dev.emstatuscenter.elliemae.com
insights.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
api-concept.presence.notification.elliemae.com
cds1.cvent.com
prod.ns-sse-processor.notification.elliemae.com
cds1.cvent.com
docs.developer.elliemae.com
api.peg.asset.rd.elliemae.io
stg.beacon.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
stg.coffi.elliemae.com
api-concept.presence.notification.elliemae.com
*.mortgage-application.net
qa.modules.elliemaeservices.com
insights.elliemae.com
velocify.net
beacon.elliemae.com
cds1.cvent.com
api.ccs.notification.elliemae.com
cds1.cvent.com
*.api.elliemae.com
origin-api.push.notification.elliemae.com
api-stg.presence.notification.elliemae.com
us-east-1.www.staging.marketing.elliemae.com
elliemae.com
prod01.elliemae.com
cert3344.elliemae.com
qa.beacon.elliemae.com
docs.developer.elliemae.com
prod01.elliemae.com
api.coffi.elliemae.com
dev.resourcecenterapi.elliemae.com
api.stg.coffi.elliemae.com
cds1.cvent.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
*.admin.elliemae.com
dev-iceedu.elliemae.com
partnerconnect.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
education.elliemae.com
epps.elliemae.com
*.admin.elliemae.com
pemdemo.elliemae.com
dev.resourcecenterapi.elliemae.com
insights.elliemae.com
dev.rccasemgt.elliemae.com
emise1.corp.elliemae.com
concept.developer.elliemae.com
cds1.cvent.com
us-east-1.www.simplifile.prod.marketing.elliemae.com
api.subscriptions.elliemae.com
api.coffi.elliemae.com
velocify.net
dev.access.elliemae.com
beacon.elliemae.com
dev3.api.ellielabs.com
concept-tfe.api.elliemae.com
prod01.elliemae.com
qa.velocify.net
qa.education.elliemae.com
insights.elliemae.com
dev.gaia.elliemae.com
dev3.api.ellielabs.com
bazar.int.consumer-connect.rd.elliemae.io
*.api.elliemae.com
creative.elliemae.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
dnl.shop.elliemae.com
api.qa.gaia.elliemae.com
prod01.elliemae.com
phx.cf-lms.elliemae.com
api.peg.cms.rd.elliemae.io
api.ccs.notification.elliemae.com
docs2.developer.elliemae.com
us-west-2.www.velocify.staging.marketing.elliemae.com
mavent.com
cds1.cvent.com
creative.elliemae.com

Certificate

The complete raw certificate details for elliemae.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP8Mn2rq3dwkxHupHsw5
98uRTob+klsa7C3n1NmD4varfNuggY++IHKQxr99i44psyIHb64Gw/RV7c5ouFvk
wRWg1mXfRFqWbACY2hbOKLXBE2H4PM/JU5cm7Owfo7ko+eovo39CH+Hu1SGss1NE
kDMo05YkfPQh9EK4OYpKAlyUoe5hQ3MjPnhaLeyMJdJGnJQ9z+riWIrFa0uHnNSU
J+qTFUVu0QMNUTRqIf1Z3F6nj3cEKbv1egehJSSqMR5v3nMi+Oq4TSF3jKcf4jHN
iQYYw3UngUlEBwnzPTwhPLU8fRe0VZ1ULbfDEsx3lM/J2vl6tZog4kaqYyHH4WZw
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10623002774274512159584259258847659758
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ellie Mae Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elliemae.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24868477274379215753956514144632665037208819858378559194962128416518620741060813410392091228711270015007716867869663927955749196416516347972174959174453875182935605393314143299429380386617255372638633875155322329476459008644046743558317354438720257020080871021102609904321635958299803666039024763293909523059555539889148124944573039192420320602742119238780180978121288253103017427115678250780278986117262675658000894221167000020013217210362331505263890992621271053208046483646648957945147390197683553318302098251979445059892644357769685173244683218567132050173624736173317869634432253070365658132144727456842332401773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9cb01d6b437305a8ea95c502c1bc670170d799bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2726 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-inboundhandler.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtgpricing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiq.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-integrations-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-security.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allregs.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiq.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-lmgateway.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep9.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9857689037.brokersite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-agentbridge.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrweb2.mortgagereturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-assetservice.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiqrouter.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-na02.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-na02.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiqrouter.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-security.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadspecial.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep3.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allregsloanlibrary.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encompasswebcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-lmgateway.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-integrations-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-inboundhandler.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-na02.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadcenter.elliemaeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epps.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure-loandirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.ecrm.ellielabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epps-staging.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtgpricing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisalcenter.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-agentbridge.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrweb.mortgagereturns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecrm.ellielabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-na02.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-assetservice.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titlecenter.elliemae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompasswebcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.stg.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ian.qa.analytics.rd.elliemae.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiqrouter.dev1.velocify.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encompassmobile.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.prod.velocify.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.stg.velocify.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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