elliemae.com
- Ellie Mae Inc. -
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 0f:3d:6f:d5:b2:bb:34:dd:b6:56:e0:53:e2:87:f9:f6 was issued on by DigiCert Inc.
With 70 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Ellie Mae Inc.
Organization:
Ellie Mae Inc.
Organization unit: IT
Organization unit: IT
State / Province:
California
Locality: Pleasanton
Country: US
Locality: Pleasanton
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:3d:6f:d5:b2:bb:34:dd:b6:56:e0:53:e2:87:f9:f6Serial Number (int): 20257418323523633982012274763872336374
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 86:a8:bc:d8:42:f1:96:5a:49:7b:90:8c:bc:b0:46:99:36:fe:54:4d
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): 87:e8:a3:bf:12:61:33:85:19:68:8d:df:27:a9:44:49:f1:6f:13:aa
Fingerprint (sha256): f8:ad:ef:21:47:9a:27:42:f8:0d:62:4e:cc:d2:e8:cd:75:d7:df:6f:19:1f:47:0a:dd:b4:1e:23:09:f7:20:f7
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate elliemae.com
70
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for elliemae.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
elliemae.com
9857689037.brokersite.com
dialiq.stg.velocify.com
assetservice.stg.velocify.com
preprod-agentbridge.stg.velocify.com
webapi.dev1.velocify.net
www.mtgpricing.com
ian.qa.analytics.rd.elliemae.io
img.ecrm.ellielabs.com
www.secure-loandirect.com
email-api.stg.velocify.com
allregs.elliemae.com
mrweb2.mortgagereturns.com
security.dev1.velocify.net
assetservice.dev1.velocify.net
inboundhandler.dev1.velocify.net
lmgateway.dev1.velocify.net
www1.elliemae.com
epps-staging.elliemae.com
encompass.dev1.velocify.net
integrations-api.stg.velocify.com
dialiq.dev1.velocify.net
lm.dev1.velocify.net
encompasswebcenter.com
encompass.stg.velocify.com
pulse-api.stg.velocify.com
preprod-security.stg.velocify.com
cdn.dev1.velocify.net
preprod-integrations-api.stg.velocify.com
appraisalcenter.elliemae.com
lm-na02.stg.velocify.com
lm.stg.velocify.com
integrations-api.dev1.velocify.net
agentbridge.stg.velocify.com
www.encompasswebcenter.com
agentbridge.dev1.velocify.net
experience.elliemae.com
mtgpricing.com
www.elliemae.com
velocify.com
ep9.encompassmobile.com
mrweb.mortgagereturns.com
leadcenter.elliemaeservices.com
allregsloanlibrary.com
webapi.stg.velocify.com
preprod-inboundhandler.stg.velocify.com
ecrm.ellielabs.com
preprod-dialiq.stg.velocify.com
pulse-api.dev1.velocify.net
lmgateway.stg.velocify.com
www.velocify.com
cdn-na02.stg.velocify.com
preprod-lmgateway.stg.velocify.com
preprod-dialiqrouter.stg.velocify.com
cdn.stg.velocify.com
security.stg.velocify.com
test.allregsloanlibrary.com
ep3.encompassmobile.com
perf.encompassmobile.com
service.stg.velocify.com
inboundhandler.stg.velocify.com
www.encompassmobile.com
downloadspecial.elliemae.com
preprod-assetservice.stg.velocify.com
service.dev1.velocify.net
import.dev1.velocify.net
epps.elliemae.com
import.stg.velocify.com
email-api.dev1.velocify.net
titlecenter.elliemae.com
9857689037.brokersite.com
dialiq.stg.velocify.com
assetservice.stg.velocify.com
preprod-agentbridge.stg.velocify.com
webapi.dev1.velocify.net
www.mtgpricing.com
ian.qa.analytics.rd.elliemae.io
img.ecrm.ellielabs.com
www.secure-loandirect.com
email-api.stg.velocify.com
allregs.elliemae.com
mrweb2.mortgagereturns.com
security.dev1.velocify.net
assetservice.dev1.velocify.net
inboundhandler.dev1.velocify.net
lmgateway.dev1.velocify.net
www1.elliemae.com
epps-staging.elliemae.com
encompass.dev1.velocify.net
integrations-api.stg.velocify.com
dialiq.dev1.velocify.net
lm.dev1.velocify.net
encompasswebcenter.com
encompass.stg.velocify.com
pulse-api.stg.velocify.com
preprod-security.stg.velocify.com
cdn.dev1.velocify.net
preprod-integrations-api.stg.velocify.com
appraisalcenter.elliemae.com
lm-na02.stg.velocify.com
lm.stg.velocify.com
integrations-api.dev1.velocify.net
agentbridge.stg.velocify.com
www.encompasswebcenter.com
agentbridge.dev1.velocify.net
experience.elliemae.com
mtgpricing.com
www.elliemae.com
velocify.com
ep9.encompassmobile.com
mrweb.mortgagereturns.com
leadcenter.elliemaeservices.com
allregsloanlibrary.com
webapi.stg.velocify.com
preprod-inboundhandler.stg.velocify.com
ecrm.ellielabs.com
preprod-dialiq.stg.velocify.com
pulse-api.dev1.velocify.net
lmgateway.stg.velocify.com
www.velocify.com
cdn-na02.stg.velocify.com
preprod-lmgateway.stg.velocify.com
preprod-dialiqrouter.stg.velocify.com
cdn.stg.velocify.com
security.stg.velocify.com
test.allregsloanlibrary.com
ep3.encompassmobile.com
perf.encompassmobile.com
service.stg.velocify.com
inboundhandler.stg.velocify.com
www.encompassmobile.com
downloadspecial.elliemae.com
preprod-assetservice.stg.velocify.com
service.dev1.velocify.net
import.dev1.velocify.net
epps.elliemae.com
import.stg.velocify.com
email-api.dev1.velocify.net
titlecenter.elliemae.com
Other certificates including the domain name elliemae.com
(limited to 100 certificates)
website.elliemae.com
insights.elliemae.com
api.stg.gaia.elliemae.com
stg.coffi.elliemae.com
api-stage.ccs.notification.elliemae.com
stg.tsmonitor.elliemae.com
*.idp.elliemae.com
prod01.elliemae.com
phoenix.access.elliemae.com
insights.elliemae.com
docs.concept.partner.elliemae.com
us-west-2.www.staging.marketing.elliemae.com
sseqadashboard.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
cds1.cvent.com
mavent.com
insights.elliemae.com
nonprod01.elliemae.com
insights-demo.elliemae.com
*.api.elliemae.com
prod01.elliemae.com
dev.emstatuscenter.elliemae.com
insights.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
api-concept.presence.notification.elliemae.com
cds1.cvent.com
prod.ns-sse-processor.notification.elliemae.com
cds1.cvent.com
docs.developer.elliemae.com
api.peg.asset.rd.elliemae.io
stg.beacon.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
stg.coffi.elliemae.com
api-concept.presence.notification.elliemae.com
*.mortgage-application.net
qa.modules.elliemaeservices.com
insights.elliemae.com
velocify.net
beacon.elliemae.com
cds1.cvent.com
api.ccs.notification.elliemae.com
cds1.cvent.com
*.api.elliemae.com
origin-api.push.notification.elliemae.com
api-stg.presence.notification.elliemae.com
us-east-1.www.staging.marketing.elliemae.com
elliemae.com
prod01.elliemae.com
cert3344.elliemae.com
qa.beacon.elliemae.com
docs.developer.elliemae.com
prod01.elliemae.com
api.coffi.elliemae.com
dev.resourcecenterapi.elliemae.com
api.stg.coffi.elliemae.com
cds1.cvent.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
*.admin.elliemae.com
dev-iceedu.elliemae.com
partnerconnect.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
education.elliemae.com
epps.elliemae.com
*.admin.elliemae.com
pemdemo.elliemae.com
dev.resourcecenterapi.elliemae.com
insights.elliemae.com
dev.rccasemgt.elliemae.com
emise1.corp.elliemae.com
concept.developer.elliemae.com
cds1.cvent.com
us-east-1.www.simplifile.prod.marketing.elliemae.com
api.subscriptions.elliemae.com
api.coffi.elliemae.com
velocify.net
dev.access.elliemae.com
beacon.elliemae.com
dev3.api.ellielabs.com
concept-tfe.api.elliemae.com
prod01.elliemae.com
qa.velocify.net
qa.education.elliemae.com
insights.elliemae.com
dev.gaia.elliemae.com
dev3.api.ellielabs.com
bazar.int.consumer-connect.rd.elliemae.io
*.api.elliemae.com
creative.elliemae.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
dnl.shop.elliemae.com
api.qa.gaia.elliemae.com
prod01.elliemae.com
phx.cf-lms.elliemae.com
api.peg.cms.rd.elliemae.io
api.ccs.notification.elliemae.com
docs2.developer.elliemae.com
us-west-2.www.velocify.staging.marketing.elliemae.com
mavent.com
cds1.cvent.com
creative.elliemae.com
insights.elliemae.com
api.stg.gaia.elliemae.com
stg.coffi.elliemae.com
api-stage.ccs.notification.elliemae.com
stg.tsmonitor.elliemae.com
*.idp.elliemae.com
prod01.elliemae.com
phoenix.access.elliemae.com
insights.elliemae.com
docs.concept.partner.elliemae.com
us-west-2.www.staging.marketing.elliemae.com
sseqadashboard.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
cds1.cvent.com
mavent.com
insights.elliemae.com
nonprod01.elliemae.com
insights-demo.elliemae.com
*.api.elliemae.com
prod01.elliemae.com
dev.emstatuscenter.elliemae.com
insights.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
api-concept.presence.notification.elliemae.com
cds1.cvent.com
prod.ns-sse-processor.notification.elliemae.com
cds1.cvent.com
docs.developer.elliemae.com
api.peg.asset.rd.elliemae.io
stg.beacon.elliemae.com
bazar.int.consumer-connect.rd.elliemae.io
stg.coffi.elliemae.com
api-concept.presence.notification.elliemae.com
*.mortgage-application.net
qa.modules.elliemaeservices.com
insights.elliemae.com
velocify.net
beacon.elliemae.com
cds1.cvent.com
api.ccs.notification.elliemae.com
cds1.cvent.com
*.api.elliemae.com
origin-api.push.notification.elliemae.com
api-stg.presence.notification.elliemae.com
us-east-1.www.staging.marketing.elliemae.com
elliemae.com
prod01.elliemae.com
cert3344.elliemae.com
qa.beacon.elliemae.com
docs.developer.elliemae.com
prod01.elliemae.com
api.coffi.elliemae.com
dev.resourcecenterapi.elliemae.com
api.stg.coffi.elliemae.com
cds1.cvent.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
*.admin.elliemae.com
dev-iceedu.elliemae.com
partnerconnect.elliemae.com
us-west-2.www.explore.staging.marketing.elliemae.com
education.elliemae.com
epps.elliemae.com
*.admin.elliemae.com
pemdemo.elliemae.com
dev.resourcecenterapi.elliemae.com
insights.elliemae.com
dev.rccasemgt.elliemae.com
emise1.corp.elliemae.com
concept.developer.elliemae.com
cds1.cvent.com
us-east-1.www.simplifile.prod.marketing.elliemae.com
api.subscriptions.elliemae.com
api.coffi.elliemae.com
velocify.net
dev.access.elliemae.com
beacon.elliemae.com
dev3.api.ellielabs.com
concept-tfe.api.elliemae.com
prod01.elliemae.com
qa.velocify.net
qa.education.elliemae.com
insights.elliemae.com
dev.gaia.elliemae.com
dev3.api.ellielabs.com
bazar.int.consumer-connect.rd.elliemae.io
*.api.elliemae.com
creative.elliemae.com
us-west-2.www.simplifile.prod.marketing.elliemae.com
dnl.shop.elliemae.com
api.qa.gaia.elliemae.com
prod01.elliemae.com
phx.cf-lms.elliemae.com
api.peg.cms.rd.elliemae.io
api.ccs.notification.elliemae.com
docs2.developer.elliemae.com
us-west-2.www.velocify.staging.marketing.elliemae.com
mavent.com
cds1.cvent.com
creative.elliemae.com
Certificate
The complete raw certificate details for elliemae.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIMhjCCC26gAwIBAgIQDz1v1bK7NN22VuBT4of59jANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xODEwMTAwMDAwMDBaFw0xOTAzMTUxMjAwMDBaMHQxCzAJBgNVBAYTAlVTMRMw EQYDVQQIEwpDYWxpZm9ybmlhMRMwEQYDVQQHEwpQbGVhc2FudG9uMRcwFQYDVQQK Ew5FbGxpZSBNYWUgSW5jLjELMAkGA1UECxMCSVQxFTATBgNVBAMTDGVsbGllbWFl LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL50Y8fryT5csGis T0Dty4WCrKt84h4rWsOX+1Hbc2oTkiUIIv5k+Mq8yhNETPT+Lj/DmdoZFGQslTf6 cplamgJoLM+9fGniI1j4H5+HcC3xAMNjPJdSP0Oc7c6+q9qzNfTYF8YYb3w2stN9 ZBOHfQf4yrJbckXeNXgmndr+tcefTC9KhwJIWwie24y1ijZD7W+VOtRtoe3/SDDw PqCgZfv4BIwwNy/VuM1x5qH4mt444P/gbtRzkfODbN6XVOLJSF91hxBflGbDIvXR YkcYSXY3gRvY+sQOJswcZxwfXPup4SVVuKyebcce+44WtiWK6FyTYKD9PLrMeex5 dvljmC0CAwEAAaOCCSgwggkkMB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKjQxY4 nmzFMB0GA1UdDgQWBBSGqLzYQvGWWkl7kIy8sEaZNv5UTTCCB4wGA1UdEQSCB4Mw ggd/ggxlbGxpZW1hZS5jb22CGTk4NTc2ODkwMzcuYnJva2Vyc2l0ZS5jb22CF2Rp YWxpcS5zdGcudmVsb2NpZnkuY29tgh1hc3NldHNlcnZpY2Uuc3RnLnZlbG9jaWZ5 LmNvbYIkcHJlcHJvZC1hZ2VudGJyaWRnZS5zdGcudmVsb2NpZnkuY29tghh3ZWJh cGkuZGV2MS52ZWxvY2lmeS5uZXSCEnd3dy5tdGdwcmljaW5nLmNvbYIfaWFuLnFh LmFuYWx5dGljcy5yZC5lbGxpZW1hZS5pb4IWaW1nLmVjcm0uZWxsaWVsYWJzLmNv bYIZd3d3LnNlY3VyZS1sb2FuZGlyZWN0LmNvbYIaZW1haWwtYXBpLnN0Zy52ZWxv Y2lmeS5jb22CFGFsbHJlZ3MuZWxsaWVtYWUuY29tghptcndlYjIubW9ydGdhZ2Vy ZXR1cm5zLmNvbYIac2VjdXJpdHkuZGV2MS52ZWxvY2lmeS5uZXSCHmFzc2V0c2Vy dmljZS5kZXYxLnZlbG9jaWZ5Lm5ldIIgaW5ib3VuZGhhbmRsZXIuZGV2MS52ZWxv Y2lmeS5uZXSCG2xtZ2F0ZXdheS5kZXYxLnZlbG9jaWZ5Lm5ldIIRd3d3MS5lbGxp ZW1hZS5jb22CGWVwcHMtc3RhZ2luZy5lbGxpZW1hZS5jb22CG2VuY29tcGFzcy5k ZXYxLnZlbG9jaWZ5Lm5ldIIhaW50ZWdyYXRpb25zLWFwaS5zdGcudmVsb2NpZnku Y29tghhkaWFsaXEuZGV2MS52ZWxvY2lmeS5uZXSCFGxtLmRldjEudmVsb2NpZnku bmV0ghZlbmNvbXBhc3N3ZWJjZW50ZXIuY29tghplbmNvbXBhc3Muc3RnLnZlbG9j aWZ5LmNvbYIacHVsc2UtYXBpLnN0Zy52ZWxvY2lmeS5jb22CIXByZXByb2Qtc2Vj dXJpdHkuc3RnLnZlbG9jaWZ5LmNvbYIVY2RuLmRldjEudmVsb2NpZnkubmV0gilw cmVwcm9kLWludGVncmF0aW9ucy1hcGkuc3RnLnZlbG9jaWZ5LmNvbYIcYXBwcmFp c2FsY2VudGVyLmVsbGllbWFlLmNvbYIYbG0tbmEwMi5zdGcudmVsb2NpZnkuY29t ghNsbS5zdGcudmVsb2NpZnkuY29tgiJpbnRlZ3JhdGlvbnMtYXBpLmRldjEudmVs b2NpZnkubmV0ghxhZ2VudGJyaWRnZS5zdGcudmVsb2NpZnkuY29tghp3d3cuZW5j b21wYXNzd2ViY2VudGVyLmNvbYIdYWdlbnRicmlkZ2UuZGV2MS52ZWxvY2lmeS5u ZXSCF2V4cGVyaWVuY2UuZWxsaWVtYWUuY29tgg5tdGdwcmljaW5nLmNvbYIQd3d3 LmVsbGllbWFlLmNvbYIMdmVsb2NpZnkuY29tghdlcDkuZW5jb21wYXNzbW9iaWxl LmNvbYIZbXJ3ZWIubW9ydGdhZ2VyZXR1cm5zLmNvbYIfbGVhZGNlbnRlci5lbGxp ZW1hZXNlcnZpY2VzLmNvbYIWYWxscmVnc2xvYW5saWJyYXJ5LmNvbYIXd2ViYXBp LnN0Zy52ZWxvY2lmeS5jb22CJ3ByZXByb2QtaW5ib3VuZGhhbmRsZXIuc3RnLnZl bG9jaWZ5LmNvbYISZWNybS5lbGxpZWxhYnMuY29tgh9wcmVwcm9kLWRpYWxpcS5z dGcudmVsb2NpZnkuY29tghtwdWxzZS1hcGkuZGV2MS52ZWxvY2lmeS5uZXSCGmxt Z2F0ZXdheS5zdGcudmVsb2NpZnkuY29tghB3d3cudmVsb2NpZnkuY29tghljZG4t bmEwMi5zdGcudmVsb2NpZnkuY29tgiJwcmVwcm9kLWxtZ2F0ZXdheS5zdGcudmVs b2NpZnkuY29tgiVwcmVwcm9kLWRpYWxpcXJvdXRlci5zdGcudmVsb2NpZnkuY29t ghRjZG4uc3RnLnZlbG9jaWZ5LmNvbYIZc2VjdXJpdHkuc3RnLnZlbG9jaWZ5LmNv bYIbdGVzdC5hbGxyZWdzbG9hbmxpYnJhcnkuY29tghdlcDMuZW5jb21wYXNzbW9i aWxlLmNvbYIYcGVyZi5lbmNvbXBhc3Ntb2JpbGUuY29tghhzZXJ2aWNlLnN0Zy52 ZWxvY2lmeS5jb22CH2luYm91bmRoYW5kbGVyLnN0Zy52ZWxvY2lmeS5jb22CF3d3 dy5lbmNvbXBhc3Ntb2JpbGUuY29tghxkb3dubG9hZHNwZWNpYWwuZWxsaWVtYWUu Y29tgiVwcmVwcm9kLWFzc2V0c2VydmljZS5zdGcudmVsb2NpZnkuY29tghlzZXJ2 aWNlLmRldjEudmVsb2NpZnkubmV0ghhpbXBvcnQuZGV2MS52ZWxvY2lmeS5uZXSC EWVwcHMuZWxsaWVtYWUuY29tghdpbXBvcnQuc3RnLnZlbG9jaWZ5LmNvbYIbZW1h aWwtYXBpLmRldjEudmVsb2NpZnkubmV0ghh0aXRsZWNlbnRlci5lbGxpZW1hZS5j b20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9U cnVzdFJTQUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggr BgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIw dQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3Ry dXN0LmNvbTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29t L0dlb1RydXN0UlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMB Af8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBoogOVCJTuuWqwpDtJGqr7Q4SJPt9Q jvjWfJDUGTrTtNIlz5Gxd8ABRUDMtARwbxEkThiQK7IiND0MLRmVHBpEpe9jXRjB ashUUab1rZlT1eWR0uvYCZIWQWi2xhy6HQqZGCwYRTUOUZb1ut/U7SPAAcXSsl2B qSGfOnvHqnFqbiUnfGokY8MB9ip5CkM8CP1nJ3GOHPluv09beq+FBzqxhV682uWV lh0ao4v06101/Xw1CU9J/2WlH5o3KD7x/eBLrZ/l8CPkdXfFaN32GA2yB6QLz08X 6IwYJKftiaScwebxx4jSDY3LkwlsefcdA48pOXF96sGlqezsURx2Wlsi -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnRjx+vJPlywaKxPQO3L hYKsq3ziHitaw5f7UdtzahOSJQgi/mT4yrzKE0RM9P4uP8OZ2hkUZCyVN/pymVqa Amgsz718aeIjWPgfn4dwLfEAw2M8l1I/Q5ztzr6r2rM19NgXxhhvfDay031kE4d9 B/jKsltyRd41eCad2v61x59ML0qHAkhbCJ7bjLWKNkPtb5U61G2h7f9IMPA+oKBl +/gEjDA3L9W4zXHmofia3jjg/+Bu1HOR84Ns3pdU4slIX3WHEF+UZsMi9dFiRxhJ djeBG9j6xA4mzBxnHB9c+6nhJVW4rJ5txx77jha2JYroXJNgoP08usx57Hl2+WOY LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20257418323523633982012274763872336374 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pleasanton' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ellie Mae Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elliemae.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24042671877895660166793428617295071912580795086053626434416870769576591170311958227044390351157067656247551477881287689900413092595838102735214058615829089394042455700121036795327198187728686450138384496959466106198057458222823094592307113103285729734826296371684766394336825585809787301341291204842734392204181921754201220048051813651413525517905023406452237394840562428551177342459460008199837333126773323137629695041199324910201999085606275698055583794298253884094378088609400132230615241332447425621836611834826899429727496892562604737300678816310422443899229630044946542295322164985949784689866967234130657646637 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 86a8bcd842f1965a497b908cbcb0469936fe544d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1923 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elliemae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9857689037.brokersite.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-agentbridge.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.dev1.velocify.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtgpricing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ian.qa.analytics.rd.elliemae.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.ecrm.ellielabs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure-loandirect.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email-api.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allregs.elliemae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrweb2.mortgagereturns.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.dev1.velocify.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetservice.dev1.velocify.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.dev1.velocify.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.dev1.velocify.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.elliemae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epps-staging.elliemae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.dev1.velocify.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialiq.dev1.velocify.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.dev1.velocify.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompasswebcenter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'encompass.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-security.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.dev1.velocify.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-integrations-api.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisalcenter.elliemae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-na02.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-api.dev1.velocify.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encompasswebcenter.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentbridge.dev1.velocify.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'experience.elliemae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtgpricing.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elliemae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep9.encompassmobile.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrweb.mortgagereturns.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadcenter.elliemaeservices.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allregsloanlibrary.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-inboundhandler.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecrm.ellielabs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiq.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulse-api.dev1.velocify.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmgateway.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-na02.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-lmgateway.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-dialiqrouter.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.allregsloanlibrary.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ep3.encompassmobile.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.encompassmobile.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inboundhandler.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.encompassmobile.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'downloadspecial.elliemae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-assetservice.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.dev1.velocify.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.dev1.velocify.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epps.elliemae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'import.stg.velocify.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email-api.dev1.velocify.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'titlecenter.elliemae.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0068a203950894eeb96ab0a43b491aaafb4384893edf508ef8d67c90d4193ad3b4d225cf91b177c0014540ccb404706f11244e18902bb222343d0c2d19951c1a44a5ef635d18c16ac85451a6f5ad9953d5e591d2ebd80992164168b6c61cba1d0a99182c1845350e5196f5badfd4ed23c001c5d2b25d81a9219f3a7bc7aa716a6e25277c6a2463c301f62a790a433c08fd6727718e1cf96ebf4f5b7aaf85073ab1855ebcdae595961d1aa38bf4eb5d35fd7c35094f49ff65a51f9a37283ef1fde04bad9fe5f023e47577c568ddf6180db207a40bcf4f17e88c1824a7ed89a49cc1e6f1c788d20d8dcb93096c79f71d038f2939717deac1a5a9ecec511c765a5b22