b04llsp01.prd.manulifeusa.com

- Manulife Financial -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number bd:c9:92:c7:9b:60:eb:4e:d8:d0:1d:fc:c6:4f:5a:76 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Manulife Financial

Organization: Manulife Financial
Organization unit: John Hancock US Division
Organization unit: Enterprise SSL Pro
Address: 601 Congress Street
Postal code: 02210
State / Province: Massachusetts
Locality: Boston
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): bd:c9:92:c7:9b:60:eb:4e:d8:d0:1d:fc:c6:4f:5a:76
Serial Number (int): 252270719918208418426223263817019644534
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 03:ac:ed:ee:9e:bb:ad:ab:c6:4e:0e:cd:6e:41:ab:64:d5:26:69:d6
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 76:d2:8f:8d:1c:b1:53:12:e8:3c:2d:14:c0:3a:4d:e5:2e:fd:b5:ef
Fingerprint (sha256): 01:0b:f9:de:3c:dc:9e:26:87:75:ed:0d:19:5d:aa:68:f7:c8:5f:08:c2:54:20:6d:64:a3:96:ce:78:af:45:34

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate b04llsp01.prd.manulifeusa.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for b04llsp01.prd.manulifeusa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b04llsp01.prd.manulifeusa.com
www.b04llsp01.prd.manulifeusa.com

Other certificates including the domain name manulifeusa.com

(limited to 100 certificates)
stage.jherpmx2.jhancock.com
b04orad10.dev.manulifeusa.com
b04llsp01.prd.manulifeusa.com
qa.johnhancock.com
johnhancock.com
b04wvgisvisd01.dev.manulifeusa.com
andmirp01.prd.manulifeusa.com
andappm01.mod.manulifeusa.com
andfaxp01.prd.manulifeusa.com
cconprem.manulife.com
b04xprm02.mod.manulifeusa.com
johnhancock.com
cl4orad10.dev.manulifeusa.com
johnhancock.com
nasbaccess01.manulife.com
jhcontractstest.mod.manulifeusa.com
test.jherpdx3.jhancock.com
azwapnwasm01.mfcgd.com
b04fimd02.dev.manulifeusa.com
johnhancock.com
beacon.prd.manulifeusa.com
a7220-b04-lc-a.prd.manulifeusa.com
brave.prd.manulifeusa.com
azaphnerpt01a1.mfcgd.com
barcpsp04.manulife.com
www.igpinfo.com
andwvgisvrcp04.prd.manulifeusa.com
b04sdsd01.dev.manulifeusa.com
b04bkpd01.dev.manulifeusa.com
b04faxp05.prd.manulifeusa.com
jherpmx8.mod.manulifeusa.com
johnhancock.com
johnhancock.com
test.jherpdx3.jhancock.com
clbs37617.dev.manulifeusa.com
whbp30730.prd.manulifeusa.com
johnhancock.com
b04appd12.dev.manulifeusa.com
azwapnwasm01.mfcgd.com
johnhancock.com
johnhancock.com
usvmreset.prd.manulifeusa.com
azwapnwasm01.mfcgd.com
cl4oram10.mod.manulifeusa.com
johnhancock.com
azulvsasdb2m04.mod.manulifeusa.com
andmirp01.prd.manulifeusa.com
qa-siebel.mod.manulifeusa.com
johnhancock.com
test.jherpdx3.jhancock.com
b04pwdd01.dev.manulifeusa.com
test.jherpdx3.jhancock.com
andllsp01.prd.manulifeusa.com
jherpx8.prd.manulifeusa.com
andwvetsrigp01.prd.manulifeusa.com
test.jherpdx3.jhancock.com
azaphnerpt01a1.mfcgd.com
azuwvjhibeas01.mfcgd.com
qa-siebel.mod.manulifeusa.com
johnhancock.com
andrsap01.prd.manulifeusa.com
b04appd11.dev.manulifeusa.com
johnhancock.com
a7210-and-mclic-a.prd.manulifeusa.com
andwvgisvstp01.prd.manulifeusa.com
b04faxp05.prd.manulifeusa.com
jherpmx8.mod.manulifeusa.com
andsbc.manulife.com
stage.partnerlink.jhancock.com
stage.jherpmx2.jhancock.com
jherpx8.prd.manulifeusa.com
jhesb-stage2.mod.manulifeusa.com
jherpmx8.mod.manulifeusa.com
jhinsuranceanalytics.com
b04pwdd01.dev.manulifeusa.com
b04pwdd01.dev.manulifeusa.com
b04bkpd01.dev.manulifeusa.com
usvmreset.prd.manulifeusa.com
azwphnwast01.mfcgd.com
johnhancock.com
bravestage.mod.manulifeusa.com
andorap10.prd.manulifeusa.com
qa-siebel.mod.manulifeusa.com
dis.dev.manulifeusa.com
andorap04.prd.manulifeusa.com
johnhancock.com
a7220-and-lc-a.prd.manulifeusa.com
azaphnerpt01a1.mfcgd.com
b04pwdd01.dev.manulifeusa.com
stage.jherpmx1.jhancock.com
andsdsm01.mod.manulifeusa.com
prod-siebel.manulifeusa.com
qa-siebel.mod.manulifeusa.com
johnhancock.com
cl4oram10.mod.manulifeusa.com
a7220-and-lc-dmz.prd.manulifeusa.com
stage.inforceillustrationportal.com
b04pwdd01.dev.manulifeusa.com
b04amxd02.dev.manulifeusa.com
johnhancock.com

Certificate

The complete raw certificate details for b04llsp01.prd.manulifeusa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSVdGz0ujTXWkOqdqVqR
SoUb7jg4GeE1ckaDDnfadydJ2ICN0AVtJ49UVY894zKaSsNOLAnxOeRah+qSBCEr
6Kw4FhwvtRP3unDlckGMeZ53baUiSv74VHt/LqOPaFqrYxuOFXg2mWZRf80gOUv4
9PJ+lEqNbqKGgV3lIEt1PR0BNTgE+4yDkUfKVg3ML/0WqSHjK/uChf/+2xpKEFdE
bCgJtnmluAJbQOIrG0Bxb7rK9r28SjEvmrUfNxhStbDbtn1eEMJveroDKEtc3KT8
da9ExSKnko80T26p8RxK6JQEv8oHL2cTgI7pkx+daXQ2u/k3qPY4WC3BQXzYrLYb
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 252270719918208418426223263817019644534
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '02210'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Boston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '601 Congress Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'John Hancock US Division'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise SSL Pro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'b04llsp01.prd.manulifeusa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23877464364217521528987946950176367094194524440652926170751899489989553525463444963770663355507021429950026382409937241566689313376880208617871277716797471548485166323719644599226956177691784445996976864590157228396461034892947936352623232671237561683031227714294531227775968917444387015263328235551191726851161747674571706055921720600732667867407005550117737103827951711672041036313805892427109269278621550702285445997940265296048374577492701129812700243295266510297703095666066206832401037944987942698865059715170286534170624102840726810762338387247178038325545059516067083646096214060380165206371718283938816727883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03acedee9ebbadabc64e0ecd6e41ab64d52669d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b04llsp01.prd.manulifeusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.b04llsp01.prd.manulifeusa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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