www-aem-dev1.manulife.ca
- Manulife Financial -
Issued by Sectigo RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number 7f:dc:81:f3:3d:e4:71:a1:f7:05:89:f1:0a:09:1b:61 was issued on by Sectigo Limited.
With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Manulife Financial
Organization:
Manulife Financial
Organization unit: Canadian Segment
Organization unit: Canadian Segment
State / Province:
Ontario
Country: CA
Country: CA
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 7f:dc:81:f3:3d:e4:71:a1:f7:05:89:f1:0a:09:1b:61Serial Number (int): 169956896475999097269891259826419866465
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: b0:e1:c7:fa:5c:1d:cb:64:0b:2d:5e:2c:06:96:a9:83:99:e2:bd:8d
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb
Fingerprint (sha1): 72:21:aa:84:08:3b:ef:3f:ac:61:07:cc:bf:e7:04:3c:29:b6:0b:f3
Fingerprint (sha256): 04:f4:d1:cb:03:c5:54:7a:d4:78:c5:4f:1e:5b:aa:85:46:0a:cd:19:f6:77:b3:98:97:de:d5:9b:81:2c:0b:c3
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate www-aem-dev1.manulife.ca
33
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www-aem-dev1.manulife.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www-aem-dev1.manulife.ca
author-aem-dev1.manulife.ca
www-aem-dev1.affinity.manulife.ca
www-aem-dev1.affinity.manuvie.ca
www-aem-dev1.assurance-manuvie.ca
www-aem-dev1.bank.manulife.ca
www-aem-dev1.bank.manuvie.ca
www-aem-dev1.cmtcp.manulife.ca
www-aem-dev1.cmtcp.manuvie.ca
www-aem-dev1.coverme.manulife.ca
www-aem-dev1.coverme.manuvie.ca
www-aem-dev1.cpao.manulife.ca
www-aem-dev1.cpao.manuvie.ca
www-aem-dev1.developer.manulife.ca
www-aem-dev1.developer.manuvie.ca
www-aem-dev1.groupbenefits.manulife.ca
www-aem-dev1.headless.manulife.ca
www-aem-dev1.info.manulife.ca
www-aem-dev1.info.manuvie.ca
www-aem-dev1.manulife-group-plans.ca
www-aem-dev1.manulife-insurance.ca
www-aem-dev1.manulife-securities.manulife.ca
www-aem-dev1.manulife-securities.manuvie.ca
www-aem-dev1.manuvie.ca
www-aem-dev1.offers.bank.manulife.ca
www-aem-dev1.offres.bank.manuvie.ca
www-aem-dev1.regimes-collectifs-manuvie.ca
www-aem-dev1.rr.manulife.ca
www-aem-dev1.rr.manuvie.ca
www-aem-dev1.travel.manulife.ca
www-aem-dev1.travel.manuvie.ca
www-aem-dev1.travelb2b.manulife.ca
www-aem-dev1.travelb2b.manuvie.ca
author-aem-dev1.manulife.ca
www-aem-dev1.affinity.manulife.ca
www-aem-dev1.affinity.manuvie.ca
www-aem-dev1.assurance-manuvie.ca
www-aem-dev1.bank.manulife.ca
www-aem-dev1.bank.manuvie.ca
www-aem-dev1.cmtcp.manulife.ca
www-aem-dev1.cmtcp.manuvie.ca
www-aem-dev1.coverme.manulife.ca
www-aem-dev1.coverme.manuvie.ca
www-aem-dev1.cpao.manulife.ca
www-aem-dev1.cpao.manuvie.ca
www-aem-dev1.developer.manulife.ca
www-aem-dev1.developer.manuvie.ca
www-aem-dev1.groupbenefits.manulife.ca
www-aem-dev1.headless.manulife.ca
www-aem-dev1.info.manulife.ca
www-aem-dev1.info.manuvie.ca
www-aem-dev1.manulife-group-plans.ca
www-aem-dev1.manulife-insurance.ca
www-aem-dev1.manulife-securities.manulife.ca
www-aem-dev1.manulife-securities.manuvie.ca
www-aem-dev1.manuvie.ca
www-aem-dev1.offers.bank.manulife.ca
www-aem-dev1.offres.bank.manuvie.ca
www-aem-dev1.regimes-collectifs-manuvie.ca
www-aem-dev1.rr.manulife.ca
www-aem-dev1.rr.manuvie.ca
www-aem-dev1.travel.manulife.ca
www-aem-dev1.travel.manuvie.ca
www-aem-dev1.travelb2b.manulife.ca
www-aem-dev1.travelb2b.manuvie.ca
Other certificates including the domain name manulife.ca
(limited to 100 certificates)
manulife.com
www-aem-qa2.manulife.ca
client.manulifebank.com
manulife.com
manulife.com
content-txn-uat.manulife.ca
www-aem-dev1.manulife.ca
www-aem-dev2.manulife.ca
www-aem-qa.manulife.ca
www-aem-prod.manulife.ca
manulife.com
manulife.com
uat.manulifesecurities.manulife.ca
manulife.com
manulife.com
origin-api.manulifesecurities.manulife.ca
devintegrator.gbi.manulife.ca
manulife.com
manulife.com
manulife.com
cdn.dev.manulife.ca
www-aem-dev1.manulife.ca
manulife.com
mfti-app.np.aks.manulife.ca
preprod.mtls.api.manulife.com
preview.id.manulife.ca
jira-t1.manulife.ca
manulife.com
manulife.com
dev.portal.manulife.ca
advisor.manulife.ca
qa.manulifesecurities.manulife.ca
edge.prod-ext.api.manulife.com
www-aem-prod.manulife.ca
www-aem-dev2.manulife.ca
manulife.com
uat.statements.manulifebank.ca
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
artifactory-test.manulife.ca
manulife.com
hf.integrator.gbi.manulife.ca
manulife.com
content-txn-dev.manulife.ca
retirement.manulife.ca
saml-advisors.preview.manulife.ca
interac-uat.manulifebank.ca
manulife.com
content-txn-prd.manulife.ca
manulife.com
manulife.com
integrator.gbi.manulife.ca
manulife.com
sf-service-medallia-dev.manulife.ca
manulife.com
manulife.com
www-aem-dev.manulife.ca
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
nonprod.vitalityservice.manulife.ca
tripx-graphql.dev.aks.manulife.ca
manulife.com
edge.sandbox-dev.api.manulife.com
snowbound-viewer-prd.manulife.ca
manulife.com
dev.policyservice.manulife.ca
manulife.com
www-aem-qa.manulife.ca
content-txn-dev.manulife.ca
edge.prod-ext.api.manulife.com
hf.gbi.manulife.ca
interac-uat.manulifebank.ca
manulife.com
manulife.com
www-aem-stage.manulife.ca
manulife.com
manulife.com
manulife.com
mail-ds.manulife.ca
manulife.com
dev.jmeter.aks.manulife.ca
www.insurance.manulife.ca
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
stage.manulifesecurities.manulife.ca
www-aem-dev.manulife.ca
manulife.com
portal.manulife.ca
manulife.com
www-aem-qa2.manulife.ca
client.manulifebank.com
manulife.com
manulife.com
content-txn-uat.manulife.ca
www-aem-dev1.manulife.ca
www-aem-dev2.manulife.ca
www-aem-qa.manulife.ca
www-aem-prod.manulife.ca
manulife.com
manulife.com
uat.manulifesecurities.manulife.ca
manulife.com
manulife.com
origin-api.manulifesecurities.manulife.ca
devintegrator.gbi.manulife.ca
manulife.com
manulife.com
manulife.com
cdn.dev.manulife.ca
www-aem-dev1.manulife.ca
manulife.com
mfti-app.np.aks.manulife.ca
preprod.mtls.api.manulife.com
preview.id.manulife.ca
jira-t1.manulife.ca
manulife.com
manulife.com
dev.portal.manulife.ca
advisor.manulife.ca
qa.manulifesecurities.manulife.ca
edge.prod-ext.api.manulife.com
www-aem-prod.manulife.ca
www-aem-dev2.manulife.ca
manulife.com
uat.statements.manulifebank.ca
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
artifactory-test.manulife.ca
manulife.com
hf.integrator.gbi.manulife.ca
manulife.com
content-txn-dev.manulife.ca
retirement.manulife.ca
saml-advisors.preview.manulife.ca
interac-uat.manulifebank.ca
manulife.com
content-txn-prd.manulife.ca
manulife.com
manulife.com
integrator.gbi.manulife.ca
manulife.com
sf-service-medallia-dev.manulife.ca
manulife.com
manulife.com
www-aem-dev.manulife.ca
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
nonprod.vitalityservice.manulife.ca
tripx-graphql.dev.aks.manulife.ca
manulife.com
edge.sandbox-dev.api.manulife.com
snowbound-viewer-prd.manulife.ca
manulife.com
dev.policyservice.manulife.ca
manulife.com
www-aem-qa.manulife.ca
content-txn-dev.manulife.ca
edge.prod-ext.api.manulife.com
hf.gbi.manulife.ca
interac-uat.manulifebank.ca
manulife.com
manulife.com
www-aem-stage.manulife.ca
manulife.com
manulife.com
manulife.com
mail-ds.manulife.ca
manulife.com
dev.jmeter.aks.manulife.ca
www.insurance.manulife.ca
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
stage.manulifesecurities.manulife.ca
www-aem-dev.manulife.ca
manulife.com
portal.manulife.ca
manulife.com
Certificate
The complete raw certificate details for www-aem-dev1.manulife.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJ2DCCCMCgAwIBAgIQf9yB8z3kcaH3BYnxCgkbYTANBgkqhkiG9w0BAQsFADCB lTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMT0wOwYDVQQD EzRTZWN0aWdvIFJTQSBPcmdhbml6YXRpb24gVmFsaWRhdGlvbiBTZWN1cmUgU2Vy dmVyIENBMB4XDTIyMDMwMjAwMDAwMFoXDTIzMDMwMjIzNTk1OVowejELMAkGA1UE BhMCQ0ExEDAOBgNVBAgTB09udGFyaW8xGzAZBgNVBAoTEk1hbnVsaWZlIEZpbmFu Y2lhbDEZMBcGA1UECxMQQ2FuYWRpYW4gU2VnbWVudDEhMB8GA1UEAxMYd3d3LWFl bS1kZXYxLm1hbnVsaWZlLmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2yuH+GnRQmWYGcZKdbSUQZNR4zkT1mLDNzSAz+sHdmKj9npxGYq6NtCysiR3 3izqgPBs1F8jupKHKRMKX7iMNjk35cKrCyWidT7lx5xkeCtUylsVvzbwo266BAI3 iOTGnsSeELVw4Xi0LwbLCAHLi0lkZaMeLqvM9klbp8GLRqMXZGMqKPGUu6Y1z7iQ fiih1BivTMy4xUy4AU/1HjiPrS5KB+LiJ8tMAfl6jzUAAYydtlwzKQSmwMoxOM18 YRNfvGWWc91IExW3TWzDw3Szfh/SMVrffaQMnqHq8DSip9dtD3sQxN1F/XZ4qfy7 vEFey2bpch/legXd8InNbBZfKwIDAQABo4IGPDCCBjgwHwYDVR0jBBgwFoAUF9nW JSdn+THCSUPZMDZEjGypT+swHQYDVR0OBBYEFLDhx/pcHctkCy1eLAaWqYOZ4r2N MA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjBKBgNVHSAEQzBBMDUGDCsGAQQBsjEBAgEDBDAlMCMGCCsG AQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgIwWgYDVR0f BFMwUTBPoE2gS4ZJaHR0cDovL2NybC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBT3Jn YW5pemF0aW9uVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNybDCBigYIKwYBBQUH AQEEfjB8MFUGCCsGAQUFBzAChklodHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3Rp Z29SU0FPcmdhbml6YXRpb25WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCMG CCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTATBgorBgEEAdZ5AgQD AQH/BAIFADCCBG0GA1UdEQSCBGQwggRgghh3d3ctYWVtLWRldjEubWFudWxpZmUu Y2GCG2F1dGhvci1hZW0tZGV2MS5tYW51bGlmZS5jYYIhd3d3LWFlbS1kZXYxLmFm ZmluaXR5Lm1hbnVsaWZlLmNhgiB3d3ctYWVtLWRldjEuYWZmaW5pdHkubWFudXZp ZS5jYYIhd3d3LWFlbS1kZXYxLmFzc3VyYW5jZS1tYW51dmllLmNhgh13d3ctYWVt LWRldjEuYmFuay5tYW51bGlmZS5jYYIcd3d3LWFlbS1kZXYxLmJhbmsubWFudXZp ZS5jYYIed3d3LWFlbS1kZXYxLmNtdGNwLm1hbnVsaWZlLmNhgh13d3ctYWVtLWRl djEuY210Y3AubWFudXZpZS5jYYIgd3d3LWFlbS1kZXYxLmNvdmVybWUubWFudWxp ZmUuY2GCH3d3dy1hZW0tZGV2MS5jb3Zlcm1lLm1hbnV2aWUuY2GCHXd3dy1hZW0t ZGV2MS5jcGFvLm1hbnVsaWZlLmNhghx3d3ctYWVtLWRldjEuY3Bhby5tYW51dmll LmNhgiJ3d3ctYWVtLWRldjEuZGV2ZWxvcGVyLm1hbnVsaWZlLmNhgiF3d3ctYWVt LWRldjEuZGV2ZWxvcGVyLm1hbnV2aWUuY2GCJnd3dy1hZW0tZGV2MS5ncm91cGJl bmVmaXRzLm1hbnVsaWZlLmNhgiF3d3ctYWVtLWRldjEuaGVhZGxlc3MubWFudWxp ZmUuY2GCHXd3dy1hZW0tZGV2MS5pbmZvLm1hbnVsaWZlLmNhghx3d3ctYWVtLWRl djEuaW5mby5tYW51dmllLmNhgiR3d3ctYWVtLWRldjEubWFudWxpZmUtZ3JvdXAt cGxhbnMuY2GCInd3dy1hZW0tZGV2MS5tYW51bGlmZS1pbnN1cmFuY2UuY2GCLHd3 dy1hZW0tZGV2MS5tYW51bGlmZS1zZWN1cml0aWVzLm1hbnVsaWZlLmNhgit3d3ct YWVtLWRldjEubWFudWxpZmUtc2VjdXJpdGllcy5tYW51dmllLmNhghd3d3ctYWVt LWRldjEubWFudXZpZS5jYYIkd3d3LWFlbS1kZXYxLm9mZmVycy5iYW5rLm1hbnVs aWZlLmNhgiN3d3ctYWVtLWRldjEub2ZmcmVzLmJhbmsubWFudXZpZS5jYYIqd3d3 LWFlbS1kZXYxLnJlZ2ltZXMtY29sbGVjdGlmcy1tYW51dmllLmNhght3d3ctYWVt LWRldjEucnIubWFudWxpZmUuY2GCGnd3dy1hZW0tZGV2MS5yci5tYW51dmllLmNh gh93d3ctYWVtLWRldjEudHJhdmVsLm1hbnVsaWZlLmNhgh53d3ctYWVtLWRldjEu dHJhdmVsLm1hbnV2aWUuY2GCInd3dy1hZW0tZGV2MS50cmF2ZWxiMmIubWFudWxp ZmUuY2GCIXd3dy1hZW0tZGV2MS50cmF2ZWxiMmIubWFudXZpZS5jYTANBgkqhkiG 9w0BAQsFAAOCAQEACT5LsoaesKqFSw3ix21C0bCA82b8RBEhzNjpn+y2ZYjHSAhx HgSu6f46WXiII5GcNkivgfqkawOnbXKciS07FhWFYqzfCY1ONtP68KSmKGuNcRWx NlJeNbTzcn09ZTPJskIMlVt0WglVm+I/tBRipxbZWIfJStUS4sYQFvvFPHEq/bzJ QTJMhFYpjcFp1Kc8Q7Gn4WfJa54iK0mGUUfHtqXzsbCsD9lDEWWqPifPswyHE227 ggpka0FTQg6aYYIAWtWCjk5cEBivu4UFuuFce+Zr0hNq/5AaQ+9Cs9Ep1HYaJNmk 23rWlMEDrK6LFw4hhCxDo991b+y+9GEy/jnFHg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yuH+GnRQmWYGcZKdbSU QZNR4zkT1mLDNzSAz+sHdmKj9npxGYq6NtCysiR33izqgPBs1F8jupKHKRMKX7iM Njk35cKrCyWidT7lx5xkeCtUylsVvzbwo266BAI3iOTGnsSeELVw4Xi0LwbLCAHL i0lkZaMeLqvM9klbp8GLRqMXZGMqKPGUu6Y1z7iQfiih1BivTMy4xUy4AU/1HjiP rS5KB+LiJ8tMAfl6jzUAAYydtlwzKQSmwMoxOM18YRNfvGWWc91IExW3TWzDw3Sz fh/SMVrffaQMnqHq8DSip9dtD3sQxN1F/XZ4qfy7vEFey2bpch/legXd8InNbBZf KwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 169956896475999097269891259826419866465 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canadian Segment' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-aem-dev1.manulife.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27667654789907915868578823552436281895290981967743302470390081940206952042996867529282625584048812866582233008128850663361141519055252434322704648856972480289339888604914450663768782428802039711635307920326777781380878652622388863218871943491776344121353965393267713783663410328002898144004560189535341481936350663029279364233968587052793639712569815326439045146574426463471369657422418888729469736757199862689350125968607746824850119445668243993000169443675953318888572453521342383272393443696477704985032264338444522323718977793873663852302956457667374909738505393917106399395640423720924002875950330687208864243499 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b0e1c7fa5c1dcb640b2d5e2c0696a98399e2bd8d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.manulife.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-aem-dev1.manulife.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.affinity.manulife.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.affinity.manuvie.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.assurance-manuvie.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.bank.manulife.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.bank.manuvie.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.cmtcp.manulife.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.cmtcp.manuvie.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.coverme.manulife.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.coverme.manuvie.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.cpao.manulife.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.cpao.manuvie.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.developer.manulife.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.developer.manuvie.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.groupbenefits.manulife.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.headless.manulife.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.info.manulife.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.info.manuvie.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.manulife-group-plans.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.manulife-insurance.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.manulife-securities.manulife.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.manulife-securities.manuvie.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.manuvie.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.offers.bank.manulife.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.offres.bank.manuvie.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.regimes-collectifs-manuvie.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.rr.manulife.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.rr.manuvie.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.travel.manulife.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.travel.manuvie.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.travelb2b.manulife.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-dev1.travelb2b.manuvie.ca' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00093e4bb2869eb0aa854b0de2c76d42d1b080f366fc441121ccd8e99fecb66588c74808711e04aee9fe3a59788823919c3648af81faa46b03a76d729c892d3b16158562acdf098d4e36d3faf0a4a6286b8d7115b136525e35b4f3727d3d6533c9b2420c955b745a09559be23fb41462a716d95887c94ad512e2c61016fbc53c712afdbcc941324c8456298dc169d4a73c43b1a7e167c96b9e222b49865147c7b6a5f3b1b0ac0fd9431165aa3e27cfb30c87136dbb820a646b4153420e9a6182005ad5828e4e5c1018afbb8505bae15c7be66bd2136aff901a43ef42b3d129d4761a24d9a4db7ad694c103acae8b170e21842c43a3df756fecbef46132fe39c51e