manulife.com

- Manulife Financial -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number bb:d8:1e:db:44:c3:e6:05:3f:72:29:e0:90:1f:88:e4 was issued on by Sectigo Limited.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Manulife Financial

Organization: Manulife Financial
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): bb:d8:1e:db:44:c3:e6:05:3f:72:29:e0:90:1f:88:e4
Serial Number (int): 249687797177760298618550019248701278436
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c7:41:d3:1f:aa:77:34:3a:2e:d5:a4:d7:c7:41:b1:4e:69:53:58:ca
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 40:10:3f:1c:3d:bb:3e:8d:dc:5d:94:ca:10:35:51:e8:4a:81:20:3d
Fingerprint (sha256): 07:26:d9:07:ee:56:1e:d6:bd:af:1b:56:a7:60:e4:99:d9:43:a2:ae:cf:4a:75:58:67:1b:b3:66:e3:5e:83:9f

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate manulife.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for manulife.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

manulife.com
4140.manulife.com
advisor.id.manulife.ca
advisor.manulife.ca
asampprd.manulife.com
assurance-manuvie.ca
clientportal.manulifeprivatewealth.com
conseiller.manuvie.ca
cpao.manulife.ca
cpaselectplans.ca
cpaselectplans.com
developer.manulife.ca
developer.manuvie.ca
futurestep.manulife.ca
id.manulife.ca
investmentsportal.manulifeim.ca
johnstonfuturestep.manulife.ca
manulife-group-plans.ca
manulife-insurance.ca
manulifeam.com
manulifeim.com
manulifeprivatewealth.com
manulifesecurities.ca
mi-stg-tmp.jhinvestments.com
morningstar-api.manulifeim.com
morningstar-us-api.manulifeim.com
mortgagecreditor.id.manulife.ca
mortgagecreditor.uat.id.manulife.ca
mybusiness-bff.manulife.ca
mybusiness.manulife.ca
mybusiness.uat-bff.manulife.ca
mybusiness.uat-dr-bff.manulife.ca
mybusiness.uat-dr.manulife.ca
mybusiness.uat.manulife.ca
offers.manulifebank.ca
offres.banquemanuvie.ca
personal.id.manulife.ca
placementsmanuvie.ca
regimes-collectifs-manuvie.ca
retirement-stg-tmp.johnhancock.com
retirementsitedemo.manulife.ca
retraitesitedemo.manuvie.ca
secure.manulifesecurities.ca
secureig.manulife.ca
secureuatig.manulife.ca
selfservice.manulife.com
sponsor.id.manulife.ca
stage.retirementsitedemo.manulife.ca
stage.retraitesitedemo.manuvie.ca
stg-tmp.jhinvestments.com
stg-tmp.manulifeim.com
stg-tmp.manulifeprivatewealth.com
stg-tmp.manuliferealestatefinance.com
stg.manulifeim.com
stg.manulifesecurities.ca
travel.id.manulife.ca
travel.uat.id.manulife.ca
uat-investmentsportal.manulifeim.ca
uat-self-service.manulife.com
uat.advisor.manulife.ca
uat.conseiller.manuvie.ca
ucits-stg-tmp.manulifeim.com
ucits.manulifeim.com
www-aem-prod.cmtcp.manulife.ca
www-aem-prod.coverme.manulife.ca
www-aem-prod.coverme.manuvie.ca
www-aem-prod.groupbenefits.manulife.ca
www-aem-prod.headless.manulife.ca
www-aem-prod.manulife.ca
www-aem-prod.manuvie.ca
www-aem-prod.rr.manulife.ca
www-aem-prod.travel.manulife.ca
www-aem-prod.travel.manuvie.ca
www-aem-prod.travelb2b.manulife.ca
www-aem-prod.travelb2b.manuvie.ca
www.assurance-manuvie.ca
www.assurancevoyagemanuvie.ca
www.cpao.manulife.ca
www.cpaselectplans.ca
www.cpaselectplans.com
www.developer.manulife.ca
www.developer.manuvie.ca
www.manulife-group-plans.ca
www.manulife-insurance.ca
www.manulife-travel.ca
www.manulife-travelinsurance.ca
www.manulifeam.com
www.manulifeim.com
www.manulifeprivatewealth.com
www.manulifesecurities.ca
www.manulifetravelinsurance.ca
www.offers.manulifebank.ca
www.offres.banquemanuvie.ca
www.placementsmanuvie.ca
www.regimes-collectifs-manuvie.ca
www.selfservice.manulife.com
www.voyagemanuvie.ca

Other certificates including the domain name manulife.com

(limited to 100 certificates)
mlisxivg01.manulife.com
manulife.com
nasbfepool02.mfcgd.com
mfcentral.manulife.com
api1.np.ca.manulife.com
idwicrmapd01.mlijkt01.manulife.com
manulife.com
manulife.com
aidp.manulife.com
azalvedlwrkdp10.p01eaedl.manulife.com
manulife.com
client.manulifebank.com
rps.jhancock.com
manulife.com
sharepoint-externalpartner.uat.ap.manulife.com
hermes.manulife.com
manulife.com
clbs37841.manulife.com
internal.mesh.test.api.manulife.com
azcedlwrks003.s01caedl.manulife.com
manulife.com
cdcwvjhpwast21.americas.manulife.net
daily.manulife.com.vn
click.e.manulife.com
sft.institutional.manulife.com
johnhancock.com
manulife.com
sts.manulife.com
manulife.com
azslvedlmgtdd01.d01saedl.manulife.com
idwicrmapt21.mlijkt01.manulife.com
idwcasp.ap.manulife.com
mfcentral.manulife.com
manulife.com
view-e-ds.manulife.com
idwelems01.mlijkt01.manulife.com
druglookup-client.manulife.com
mfcentral.manulife.com
sharepoint-externalpartner.uat.ap.manulife.com
www-aem-prod.manulife.ca
insttrip.manulife.com
manulife.com
dbpartners.manulife.com
idwinetapt01.mlijkt01.manulife.com
asiacitrix.manulife.com
arrowonramp.manulife.com
manulife.com
qitsso-uat.manulife.com
manulife.com
sf.cac.internal.mesh.dev.api.manulife.com
manulife.com
giam-qa.manulife.com
manulife.com
cconprem.manulife.com
manulife.com
manulife.com
manulife.com
idp.grsportal.ca.manulife.com
manulife.com
insanalyticsdev01.manulife.com
awsuat.manulife.com.kh
idwiqmtapp01.mlijkt01.manulife.com
johnhancock.com
manulife.com
manulife.com
myasoaibp2.ap.manulife.com
remotejp2.manulife.com
johnhancock.com
sharepoint-int.ap.manulife.com
mlifs900g01.manulife.com
nasbaccess01.manulife.com
jhappsstaging-tst.aks.manulife.com
manulife.com
manulife.com
crverifyidentity-dev.johnhancock.com
manulife.com
jpnhoapt09.japan.corp.manulife.com
client.manulifebank.com
preprod.mtls.api.manulife.com
manulife.com
idwietsisft05.mlijkt01.manulife.com
remotehk.manulife.com
azcedledges001.s01caedl.manulife.com
idwcas4tap.ap.manulife.com
manulife.com
mlixnbarplzvnaca.manulife.com
manulife.com
manulife.com
druglookup-client.manulife.com
pcf.manulife.com
proxy.auw.my.underwriting.manulife.com
manulife.com
johnhancock.com
manulife.com
financeit.devsit202201.manulife.com
tw-ssg-fw1.manulife.com
advisor.manulife.ca
azwapnwasm01.mfcgd.com
azuedldbo01.p01usedl.manulife.com
edge.prod-ext.api.manulife.com

Certificate

The complete raw certificate details for manulife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw1z+UED3Pv11DrpQHDb
1SmejlSvRz410OfxfmHzd3H4dTsGX8WJJPzfgYGySRRYlvJ9aiMy3iQ36Fdw/1gF
3ILeq/e99vyNA0LR/en++aQGWzs90Foh9S22XmB4gLC4FcQrrIAaQXNZ5sfOJ/lQ
4FTbcATv6lF4L2rElY2jBrLmVdDfSfDUtvqE+qw6mTZ/YC6OE0EOgnfI86HzJJGT
8YMBo+d8C6PsgGYbu9hYSAXxNU6O3avokq2+8D6bUdHcvUVZ/RAQhjaPhPHptZt1
Ug1XG3CBn7ls/9mfaoBDZs2sd9csdk9VVP3qJ1jxo7SIzfciZMlpM8zBS2WVuOua
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 249687797177760298618550019248701278436
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'manulife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25128056620675313066649296577131078267127069892001031704122326792735838670129768469889122737277259293702502293153763070100410310805100394705107485838185404536606862551596672999231580773383061884141094941394769452046448465483565560948049793111877289200680376448776410494662021686615992121709987957944264081118062350061966970866201303465940723822713030819164310727651640858738865793198103915842534903130793804549625462457807027713411287573765562396726861993517546819485426067039069354059290498400693480882486608277664196639082501026596541153181122713270060610960120605595134332334123772658371198976897985049959928142401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c741d31faa77343a2ed5a4d7c741b14e695358ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001896a64c25c000004030048304602210090a59118720a700d4da80dacae1e43ed5aa09c1c515d0bddfca052e338bcfe97022100c332d8d340490bf445bde7909bbf9784afee9fa831c4bed219fc6c8d6cf1d22c007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001896a64c2b700000403004730450221008c1d37d1ab53c17e8dbb4a376e78807a7d6bd8cbca2d1955944d2f7e79dc5eab02206a467f8f7c979cd8da845ba1c57f93c31ae868fef57443afdb33339d3e1fabb9007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001896a64c28d0000040300473045022100a38107d485515f04e5e8694a8118ad59a49d1da2443f3416f4c950fe5f4a339d02203fbb57f2fe219c442cbbba37a8424978fe65c830c5f19c55cff473d201b83590
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2672 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4140.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisor.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisor.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asampprd.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assurance-manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientportal.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conseiller.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpao.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpaselectplans.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpaselectplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'futurestep.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investmentsportal.manulifeim.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnstonfuturestep.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife-group-plans.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife-insurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifesecurities.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-stg-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningstar-api.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningstar-us-api.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgagecreditor.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgagecreditor.uat.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybusiness-bff.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybusiness.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybusiness.uat-bff.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybusiness.uat-dr-bff.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybusiness.uat-dr.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybusiness.uat.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.manulifebank.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offres.banquemanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placementsmanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regimes-collectifs-manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-stg-tmp.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirementsitedemo.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retraitesitedemo.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.manulifesecurities.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureig.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureuatig.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfservice.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsor.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.retirementsitedemo.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.retraitesitedemo.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.manulifesecurities.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.uat.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-investmentsportal.manulifeim.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-self-service.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.advisor.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.conseiller.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-stg-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.cmtcp.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.coverme.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.coverme.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.groupbenefits.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.headless.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.rr.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.travel.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.travel.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.travelb2b.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-prod.travelb2b.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assurance-manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assurancevoyagemanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpao.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpaselectplans.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpaselectplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developer.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developer.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulife-group-plans.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulife-insurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulife-travel.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulife-travelinsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifesecurities.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifetravelinsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offers.manulifebank.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.offres.banquemanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.placementsmanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regimes-collectifs-manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selfservice.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.voyagemanuvie.ca'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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