sf.cac.internal.mesh.dev.api.manulife.com

- Manulife Financial -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 5e:9c:e1:05:a2:fc:42:a2:52:d6:34:8f:8e:cd:88:1c was issued on by Sectigo Limited.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Manulife Financial

Organization: Manulife Financial
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 5e:9c:e1:05:a2:fc:42:a2:52:d6:34:8f:8e:cd:88:1c
Serial Number (int): 125761993902456694928305910363248756764
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f2:4d:cc:b3:83:00:87:7c:5a:be:27:55:11:33:b1:9d:3d:3a:c1:95
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 76:f2:5b:79:35:c2:6c:80:5c:1b:57:f1:de:8b:bf:ee:cd:87:e8:09
Fingerprint (sha256): 03:68:59:2b:33:49:8a:9d:23:58:57:8f:f6:0a:1a:44:44:1a:88:8c:fe:57:be:19:8d:73:e1:d8:f5:7f:f0:ee

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate sf.cac.internal.mesh.dev.api.manulife.com

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sf.cac.internal.mesh.dev.api.manulife.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sf.cac.internal.mesh.dev.api.manulife.com
ac.cac.external.mesh.preprod.api.manulife.com
ac.cac.internal.mesh.preprod.api.manulife.com
api.emtdev.asia.manulife.com
health-claims-reverse-proxy-dev.manulife.com
health-claims-reverse-proxy-test.manulife.com
health-claims-reverse-proxy-uat.manulife.com
health-claims-reverse-proxy.manulife.com
jhapim.dev.manulife.com
jhapim.manulife.com
microgateway-ext.uat.cac.microgateway.aks.manulife.com
sf.cac.internal.mesh.api.manulife.com
sf.cac.internal.mesh.preprod.api.manulife.com
sf.cac.internal.mesh.test.api.manulife.com
sf.cae.internal.mesh.api.manulife.com
sf.cae.internal.mesh.preprod.api.manulife.com
sf.eas.internal.mesh.dev.api.manulife.com
sf.eas.internal.mesh.test.api.manulife.com
sf.microgateway-ext.dev.cac.microgateway.aks.manulife.com
sf.microgateway-ext.dev.sea.microgateway.aks.manulife.com
sf.microgateway-ext.test.cac.microgateway.aks.manulife.com
sf.microgateway-ext.test.sea.microgateway.aks.manulife.com
sf.sea.internal.mesh.dev.api.manulife.com
sf.sea.internal.mesh.test.api.manulife.com
uls-meud.manulife.com

Other certificates including the domain name manulife.com

(limited to 100 certificates)
mlisxivg01.manulife.com
manulife.com
nasbfepool02.mfcgd.com
mfcentral.manulife.com
api1.np.ca.manulife.com
idwicrmapd01.mlijkt01.manulife.com
manulife.com
manulife.com
aidp.manulife.com
azalvedlwrkdp10.p01eaedl.manulife.com
manulife.com
client.manulifebank.com
rps.jhancock.com
manulife.com
sharepoint-externalpartner.uat.ap.manulife.com
hermes.manulife.com
manulife.com
clbs37841.manulife.com
internal.mesh.test.api.manulife.com
azcedlwrks003.s01caedl.manulife.com
manulife.com
cdcwvjhpwast21.americas.manulife.net
daily.manulife.com.vn
click.e.manulife.com
sft.institutional.manulife.com
johnhancock.com
manulife.com
sts.manulife.com
manulife.com
azslvedlmgtdd01.d01saedl.manulife.com
idwicrmapt21.mlijkt01.manulife.com
idwcasp.ap.manulife.com
mfcentral.manulife.com
manulife.com
view-e-ds.manulife.com
idwelems01.mlijkt01.manulife.com
druglookup-client.manulife.com
mfcentral.manulife.com
sharepoint-externalpartner.uat.ap.manulife.com
www-aem-prod.manulife.ca
insttrip.manulife.com
manulife.com
dbpartners.manulife.com
idwinetapt01.mlijkt01.manulife.com
asiacitrix.manulife.com
arrowonramp.manulife.com
manulife.com
qitsso-uat.manulife.com
manulife.com
sf.cac.internal.mesh.dev.api.manulife.com
manulife.com
giam-qa.manulife.com
manulife.com
cconprem.manulife.com
manulife.com
manulife.com
manulife.com
idp.grsportal.ca.manulife.com
manulife.com
insanalyticsdev01.manulife.com
awsuat.manulife.com.kh
idwiqmtapp01.mlijkt01.manulife.com
johnhancock.com
manulife.com
manulife.com
myasoaibp2.ap.manulife.com
remotejp2.manulife.com
johnhancock.com
sharepoint-int.ap.manulife.com
mlifs900g01.manulife.com
nasbaccess01.manulife.com
jhappsstaging-tst.aks.manulife.com
manulife.com
manulife.com
crverifyidentity-dev.johnhancock.com
manulife.com
jpnhoapt09.japan.corp.manulife.com
client.manulifebank.com
preprod.mtls.api.manulife.com
manulife.com
idwietsisft05.mlijkt01.manulife.com
remotehk.manulife.com
azcedledges001.s01caedl.manulife.com
idwcas4tap.ap.manulife.com
manulife.com
mlixnbarplzvnaca.manulife.com
manulife.com
manulife.com
druglookup-client.manulife.com
pcf.manulife.com
proxy.auw.my.underwriting.manulife.com
manulife.com
johnhancock.com
manulife.com
financeit.devsit202201.manulife.com
tw-ssg-fw1.manulife.com
advisor.manulife.ca
azwapnwasm01.mfcgd.com
azuedldbo01.p01usedl.manulife.com
edge.prod-ext.api.manulife.com

Certificate

The complete raw certificate details for sf.cac.internal.mesh.dev.api.manulife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd3/w/RiftS17PGhYRJU
tOvSQ2kHXz/TlpcpPWT2TeZ4sWLHn8TnU+GYLpXTSyuDsZWmLNUxwUi2HWkChVGq
F5gVmqRNG9U1ANGSs/CmJ/ebLTJrGzoviTnqQlL8bG+vYFS3WmFrjgQxMdxXKwL0
yctKkwKYzfabZ8xJL78yqvTXpKw91HzHN3yTYEm437Ldu6FJ5ZQuKV368aKd7BQ2
biIYomvbOQsoWsDBMNklB7ZelC212qkAg4GNGmEQgNufTVlPYzC5jgtT6IkYKroy
RvY4XhMga3T8Ii+Ce9bytwBXF3RABm6+OqLGiKKgO37+FladqiBRNJEp4jvJQ6lg
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 125761993902456694928305910363248756764
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sf.cac.internal.mesh.dev.api.manulife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25988324346325014866995376669642120142146201125258433340360497175809624246047773313440721841806031561217221095100542009439180218973666981293393556491767226396694451100559605986664262387733693451740028859409694806335529602049590377819594393597918267839050434812827000470451779989351680667347878074125285790263103424488934175195849631331386895423019557893804318577652171752178001823320656131224434181613662897471237465163915339818876987699287124561629402206602819171587297912543531928474966548228973807453046257533760293668931547889619001995681491587174704280202613664680523620093974594712188242327347474598780033654949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f24dccb38300877c5abe27551133b19d3d3ac195
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.cac.internal.mesh.dev.api.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ac.cac.external.mesh.preprod.api.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ac.cac.internal.mesh.preprod.api.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.emtdev.asia.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health-claims-reverse-proxy-dev.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health-claims-reverse-proxy-test.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health-claims-reverse-proxy-uat.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health-claims-reverse-proxy.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhapim.dev.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhapim.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microgateway-ext.uat.cac.microgateway.aks.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.cac.internal.mesh.api.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.cac.internal.mesh.preprod.api.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.cac.internal.mesh.test.api.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.cae.internal.mesh.api.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.cae.internal.mesh.preprod.api.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.eas.internal.mesh.dev.api.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.eas.internal.mesh.test.api.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.microgateway-ext.dev.cac.microgateway.aks.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.microgateway-ext.dev.sea.microgateway.aks.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.microgateway-ext.test.cac.microgateway.aks.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.microgateway-ext.test.sea.microgateway.aks.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.sea.internal.mesh.dev.api.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf.sea.internal.mesh.test.api.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uls-meud.manulife.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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