www.jhinvestments.com

- Manulife Financial -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 8b:0c:fc:1d:14:60:9d:3c:bc:8d:b3:46:50:2b:df:05 was issued on by Sectigo Limited.

With 60 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Manulife Financial

Organization: Manulife Financial
Organization unit: Global Wealth and Asset Mgmt
State / Province: Ontario
Locality: Toronto
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 8b:0c:fc:1d:14:60:9d:3c:bc:8d:b3:46:50:2b:df:05
Serial Number (int): 184830112447549057006823245752577023749
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 74:87:c2:33:c8:a0:29:2e:3f:4d:aa:e1:5f:59:ca:b7:95:6a:03:6a
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 24:fb:c5:ad:3d:d7:29:93:a3:bf:ca:d8:a8:ea:8d:b3:a5:39:5e:aa
Fingerprint (sha256): 03:f4:c7:b5:c5:29:46:15:40:6e:77:bb:14:cc:df:8c:5a:26:75:b4:99:84:fa:82:30:72:72:7d:7e:ce:1b:2b

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate www.jhinvestments.com

60

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jhinvestments.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.jhinvestments.com
advisor.jhinvestments.com
dev-retirement.johnhancock.com
dev-tmp.jhinvestments.com
dev-tmp.manulifeim.com
dev-tmp.manulifeprivatewealth.com
dev-tmp.manuliferealestatefinance.com
dev.jhinvestments.com
dev.manulifeim.com
dev.manulifeprivatewealth.com
dev.manuliferealestatefinance.com
gestionpriveemanuvie.com
jhinvestments.com
jhrps.com
johnhancockrealestate.com
manulifeim.com
manuliferealestate.com
mi-dev-tmp.jhinvestments.com
mi-dev.jhinvestments.com
mi-qa-tmp.jhinvestments.com
mi-qa.jhinvestments.com
mi-stg-tmp.jhinvestments.com
mi-stg.jhinvestments.com
mi.jhinvestments.com
qa-retirement.johnhancock.com
qa-tmp.jhinvestments.com
qa-tmp.manulifeim.com
qa-tmp.manulifeprivatewealth.com
qa-tmp.manuliferealestatefinance.com
qa.jhinvestments.com
qa.manulifeim.com
qa.manulifeprivatewealth.com
qa.manuliferealestatefinance.com
retirement-dev-tmp.johnhancock.com
retirement-qa-tmp.johnhancock.com
retirement-stg-tmp.johnhancock.com
retirement.johnhancock.com
stg-retirement.johnhancock.com
stg-tmp.jhinvestments.com
stg-tmp.manulifeim.com
stg-tmp.manulifeprivatewealth.com
stg-tmp.manuliferealestatefinance.com
stg.jhinvestments.com
stg.manulifeim.com
stg.manulifeprivatewealth.com
stg.manuliferealestatefinance.com
ucits-dev-tmp.manulifeim.com
ucits-dev.manulifeim.com
ucits-qa-tmp.manulifeim.com
ucits-qa.manulifeim.com
ucits-stg-tmp.manulifeim.com
ucits-stg.manulifeim.com
ucits.manulifeim.com
www.gestionpriveemanuvie.com
www.jhrps.com
www.johnhancockrealestate.com
www.manulifeim.com
www.manuliferealestate.com
www.retirement.johnhancock.com
www.ucits.manulifeim.com

Other certificates including the domain name jhinvestments.com

(limited to 100 certificates)
jira.jhinvestments.com
visit.jhinvestments.com
manulife.com
api-sys1.jhinvestments.com
johnhancock.com
johnhancock.com
visit.jhinvestments.com
www.jhinvestments.com
www.jhinvestments.com
dev-tmp.jhinvestments.com
www.jhinvestments.com
manulife.com
jhinvestments.com
johnhancock.com
manulife.com
author.jhinvestments.com
johnhancock.com
nasbaccess01.manulife.com
pages.jhinvestments.com
www.jhinvestments.com
jhinvestments.com
pages.jhinvestments.com
mi-dev64.jhinvestments.com
rps.jhancock.com
manulife.com
johnhancock.com
jhinvestments.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
www.jhinvestments.com
jhinvestments.com
www.jhinvestments.com
johnhancock.com
manulife.com
johnhancock.com
www.jhinvestments.com
manulife.com
pages.jhinvestments.com
johnhancock.com
johnhancock.com
ucits-stg-tmp.jhinvestments.com
manulife.com
johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
manulife.com
johnhancock.com
manulife.com
manulife.com
johnhancock.com
manulife.com
johnhancock.com
johnhancock.com
manulife.com
www.jhinvestments.com
johnhancock.com
www.jhinvestments.com
www.jhinvestments.com
johnhancock.com
visit.jhinvestments.com
manulife.com
johnhancock.com
manulife.com
stage-64.jhinvestments.com
mi-qa64.jhinvestments.com
www.jhinvestments.com
manulife.com
jira.jhinvestments.com
pages.jhinvestments.com
mi-dev64.jhinvestments.com
www.jhinvestments.com
www.jhinvestments.com
johnhancock.com
www.jhinvestments.com
www.jhinvestments.com
www.jhinvestments.com
manulife.com
manulife.com
www.jhinvestments.com
johnhancock.com
manulife.com
johnhancock.com
johnhancock.com
manulife.com
kcure-qa.jhinvestments.com
www.jhinvestments.com
johnhancockinvestments.com
johnhancock.com
qr.jhinvestments.com
johnhancock.com
johnhancock.com
esg.jhinvestments.com
johnhancock.com
manulife.com

Certificate

The complete raw certificate details for www.jhinvestments.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzM5Du8c8J9Ju5SasyYA
rO3yaxBnwImRzgTYL6uw9DMEGWwZOrHyaUSwIFyDPZmNh5JTA+k/7vXRvPrTK/Rm
F4Hed8D3fMavLEajB16qoessYPdjgZRErGsKIsrsm25AHzPGzlVgDXzGQJ4blvD/
i//rC6DVgdZEZX1NT+E45QkvBKH3mWG1UJtTZelPsEQqIJ4YuUYpaf0FWMLVMNgj
6ULJHGR7U1EoycaOSgIyUWLWMv50MRD/NWTYmOkfku9JcSX9RTK2I5J7HcRbPM63
rgT4Fz7P1Nn1Fht6PlCMnJRXZzqWPQnj2uKQH6x4Zw6kY27iHEUq3CGbXRgxtKSc
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 184830112447549057006823245752577023749
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toronto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Global Wealth and Asset Mgmt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jhinvestments.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21612009094772001295148991369587345251250991922725935565870025655462035670170863727228171572687921697424831390387497866053294845180405054039178225808740353162463840283124231310549249895168657742146749375245964580505224452890316872955356412105722432237905553390697506751487722389943139770554139959278117139169034349064770228223827486601815395504874789612173742288263925345569918452745014216345221315430860918472019011107513634111097555912923042094540186840930468318682943698247659031582793210163808535477019613401376755158821292348799078369034052426371394896482240328348246030766652981722966828130325149442873705667793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7487c233c8a0292e3f4daae15f59cab7956a036a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1659 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisor.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-retirement.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-tmp.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-tmp.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gestionpriveemanuvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhrps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancockrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manuliferealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-dev-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-dev.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-qa-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-qa.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-stg-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-stg.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-retirement.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-tmp.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-tmp.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-dev-tmp.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-qa-tmp.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-stg-tmp.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-retirement.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-dev-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-dev.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-qa-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-qa.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-stg-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-stg.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gestionpriveemanuvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhrps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manuliferealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retirement.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ucits.manulifeim.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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