manulife.com

- Manulife Financial -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number bf:01:75:74:f3:ee:41:21:7b:38:f2:5b:74:1b:20:60 was issued on by Sectigo Limited.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Manulife Financial

Organization: Manulife Financial
Organization unit: Enterprise Tech and Services
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): bf:01:75:74:f3:ee:41:21:7b:38:f2:5b:74:1b:20:60
Serial Number (int): 253890121799660834755456629232394510432
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e1:96:34:1e:89:3f:45:4c:80:a0:5c:d1:53:b4:3f:77:7e:5f:65:98
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 61:78:e1:48:08:0e:51:03:cc:25:33:b6:6a:47:de:b4:0a:6c:b6:94
Fingerprint (sha256): 00:80:77:86:49:a9:f9:12:66:bc:89:b8:f5:ac:4e:50:80:34:f3:ca:93:84:5b:dd:24:23:25:26:bc:fa:1b:35

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate manulife.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for manulife.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

manulife.com
4140.manulife.com
advisor.id.manulife.ca
advisor.manulife.ca
asampprd.manulife.com
assurance-manuvie.ca
clientportal.manulifeprivatewealth.com
conseiller.manuvie.ca
cpao.manulife.ca
developer.manulife.ca
developer.manuvie.ca
external-events.manulife.io
gbi.manulife.ca
gbi.manuvie.ca
health-claims-reverse-proxy-dev.manulife.com
health-claims-reverse-proxy-test.manulife.com
hermes.manulife.com
id.manulife.ca
insight-stg-tmp.manulifeim.com
integrator.gbi.manulife.ca
integrator.gbi.manuvie.ca
investmentsportal.manulifeim.ca
investwithcoin.com
manulife-group-plans.ca
manulife-insurance.ca
manulifeam.com
manulifeim.com
manulifeprivatewealth.com
manulifesecurities.ca
mi-stg-tmp.jhinvestments.com
mortgagecreditor.id.manulife.ca
mortgagecreditor.uat.id.manulife.ca
offers.manulifebank.ca
offres.banquemanuvie.ca
personal.id.manulife.ca
placementsmanuvie.ca
prd-smart.manulife.com
regimes-collectifs-manuvie.ca
retail-stg-tmp.manulifeim.com
retirement-stg-tmp.johnhancock.com
secure.manulifesecurities.ca
secureig.manulife.ca
secureuatig.manulife.ca
sponsor.id.manulife.ca
stg-tmp.jhinvestments.com
stg-tmp.manulifeim.com
stg-tmp.manulifeprivatewealth.com
stg-tmp.manuliferealestatefinance.com
stg.manulifeim.com
travel.id.manulife.ca
travel.uat.id.manulife.ca
uat-investmentsportal.manulifeim.ca
uat.advisor.manulife.ca
uat.conseiller.manuvie.ca
uatmvit.manulife.com
ucits-stg-tmp.jhinvestments.com
ucits-stg-tmp.manulifeim.com
ucits.manulifeim.com
www-aem-prod.cmtcp.manulife.ca
www-aem-prod.coverme.manulife.ca
www-aem-prod.coverme.manuvie.ca
www-aem-prod.groupbenefits.manulife.ca
www-aem-prod.headless.manulife.ca
www-aem-prod.manulife.ca
www-aem-prod.manuvie.ca
www-aem-prod.rr.manulife.ca
www-aem-prod.travel.manulife.ca
www-aem-prod.travel.manuvie.ca
www-aem-prod.travelb2b.manulife.ca
www-aem-prod.travelb2b.manuvie.ca
www.assurance-manuvie.ca
www.assurancevoyagemanuvie.ca
www.developer.manulife.ca
www.developer.manuvie.ca
www.investwithcoin.com
www.manulife-group-plans.ca
www.manulife-insurance.ca
www.manulife-travel.ca
www.manulife-travelinsurance.ca
www.manulifeam.com
www.manulifeim.com
www.manulifeprivatewealth.com
www.manulifesecurities.ca
www.manulifetravelinsurance.ca
www.offers.manulifebank.ca
www.offres.banquemanuvie.ca
www.placementsmanuvie.ca
www.regimes-collectifs-manuvie.ca
www.voyagemanuvie.ca

Other certificates including the domain name manulife.com

(limited to 100 certificates)
mlisxivg01.manulife.com
manulife.com
nasbfepool02.mfcgd.com
mfcentral.manulife.com
api1.np.ca.manulife.com
idwicrmapd01.mlijkt01.manulife.com
manulife.com
manulife.com
aidp.manulife.com
azalvedlwrkdp10.p01eaedl.manulife.com
manulife.com
client.manulifebank.com
rps.jhancock.com
manulife.com
sharepoint-externalpartner.uat.ap.manulife.com
hermes.manulife.com
manulife.com
clbs37841.manulife.com
internal.mesh.test.api.manulife.com
azcedlwrks003.s01caedl.manulife.com
manulife.com
cdcwvjhpwast21.americas.manulife.net
daily.manulife.com.vn
click.e.manulife.com
sft.institutional.manulife.com
johnhancock.com
manulife.com
sts.manulife.com
manulife.com
azslvedlmgtdd01.d01saedl.manulife.com
idwicrmapt21.mlijkt01.manulife.com
idwcasp.ap.manulife.com
mfcentral.manulife.com
manulife.com
view-e-ds.manulife.com
idwelems01.mlijkt01.manulife.com
druglookup-client.manulife.com
mfcentral.manulife.com
sharepoint-externalpartner.uat.ap.manulife.com
www-aem-prod.manulife.ca
insttrip.manulife.com
manulife.com
dbpartners.manulife.com
idwinetapt01.mlijkt01.manulife.com
asiacitrix.manulife.com
arrowonramp.manulife.com
manulife.com
qitsso-uat.manulife.com
manulife.com
sf.cac.internal.mesh.dev.api.manulife.com
manulife.com
giam-qa.manulife.com
manulife.com
cconprem.manulife.com
manulife.com
manulife.com
manulife.com
idp.grsportal.ca.manulife.com
manulife.com
insanalyticsdev01.manulife.com
awsuat.manulife.com.kh
idwiqmtapp01.mlijkt01.manulife.com
johnhancock.com
manulife.com
manulife.com
myasoaibp2.ap.manulife.com
remotejp2.manulife.com
johnhancock.com
sharepoint-int.ap.manulife.com
mlifs900g01.manulife.com
nasbaccess01.manulife.com
jhappsstaging-tst.aks.manulife.com
manulife.com
manulife.com
crverifyidentity-dev.johnhancock.com
manulife.com
jpnhoapt09.japan.corp.manulife.com
client.manulifebank.com
preprod.mtls.api.manulife.com
manulife.com
idwietsisft05.mlijkt01.manulife.com
remotehk.manulife.com
azcedledges001.s01caedl.manulife.com
idwcas4tap.ap.manulife.com
manulife.com
mlixnbarplzvnaca.manulife.com
manulife.com
manulife.com
druglookup-client.manulife.com
pcf.manulife.com
proxy.auw.my.underwriting.manulife.com
manulife.com
johnhancock.com
manulife.com
financeit.devsit202201.manulife.com
tw-ssg-fw1.manulife.com
advisor.manulife.ca
azwapnwasm01.mfcgd.com
azuedldbo01.p01usedl.manulife.com
edge.prod-ext.api.manulife.com

Certificate

The complete raw certificate details for manulife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDW/sJAD2TOxyMR+733w
xZNuVIo4ldwMvrGUH0MyKDHWFFhlGkoglJc2SY8VVrBBSOYnNvagu6roxX7m6X77
Km2t6+pv1+K1KUR8zTBkT/6QR8rUKH3Xj+f8WXgM3R3JKiRr49gwsnSgp8Hfan+Q
rEJ7/vLYEfN2t+Y77d9b6YWsTJ/Il3ESpzG11Ct1Buw3W2PNILTbJHb/UYRH062z
8RfacGx2Hdho3AJq0JMoop2zgTil29QCpTqUXVf5GDZ90e9cOdB8IUSZJFre0UnL
B4pv1H/RxlKK01scOa9SCpo4fONAhtjQJfd6ng95otD3kUyyqhK/pfimSGXb3inn
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 253890121799660834755456629232394510432
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise Tech and Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'manulife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23254352628895635954299433921259542972316654883871194519026306790452711788172952425707379992288638685933393570479969365248473125600548307114141953407079092901219997940242856146299366098617161762686539991104938007939534073992618870723325766193412097642869142271623385499968056596644132183681522973730259173591037405153009608428880414599627999161989434298235490560253480297361328215780978411797814165179698454190083603755593549819052656525334315073664075187400290053815578353451005012694913584771254307684127555050197017288263474386516414549056403453664480498183102188536042524177089049643839517911777783710543755470673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e196341e893f454c80a05cd153b43f777e5f6598
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2432 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4140.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisor.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisor.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asampprd.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assurance-manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conseiller.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpao.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'external-events.manulife.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbi.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbi.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health-claims-reverse-proxy-dev.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health-claims-reverse-proxy-test.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hermes.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight-stg-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrator.gbi.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrator.gbi.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investmentsportal.manulifeim.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investwithcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife-group-plans.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife-insurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifesecurities.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-stg-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgagecreditor.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgagecreditor.uat.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.manulifebank.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offres.banquemanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placementsmanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd-smart.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regimes-collectifs-manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail-stg-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-stg-tmp.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.manulifesecurities.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureig.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureuatig.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsor.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.uat.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-investmentsportal.manulifeim.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.advisor.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.conseiller.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatmvit.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-stg-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-stg-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.cmtcp.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.coverme.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.coverme.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.groupbenefits.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.headless.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.rr.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.travel.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.travel.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.travelb2b.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.travelb2b.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assurance-manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assurancevoyagemanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developer.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developer.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investwithcoin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulife-group-plans.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulife-insurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulife-travel.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulife-travelinsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifesecurities.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifetravelinsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offers.manulifebank.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offres.banquemanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.placementsmanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regimes-collectifs-manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voyagemanuvie.ca'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006ea64c625688a02e6e780ece8917ee97660060deeca68aed59280d53b7d4bc392a365c094969083c3921171105a6f8c3ed55244416795d50a41f29c52a06366435aaec98a2358ba908adc7d9c916d5eea89ed563883d86024180dc92e9c25cf186dad550a4d3fd9d128594a90814e03f200345ca0ccbca3b6b5eb6c418249cb66b412a4c55ba61c0c54a95953aac2808d8ddbe450a7ef4d52b05d08d751573cdd4db167ee901ac259ed2ec6b71a3d697a149bb06a2c894ca2fb27ad5de0924adaec7231ccfa8bec72425ce905131a6a0ddc6374baec6f8acc3ef93da4d46170ff43cbe369e221a5ec996156d86c3148c6a0a4aadb4e8684faa96d74bc0a1e6aa