johnhancock.com

- Manulife Financial -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 28:3a:f2:f5:fe:4a:ae:c1:2e:c3:24:ab:47:b7:a6:55 was issued on by COMODO CA Limited.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Manulife Financial

Organization: Manulife Financial
Organization unit: John Hancock US Division
Organization unit: Multi-Domain SSL
Address: 200 Bloor Street East
Postal code: M4W 1E5
State / Province: Ontario
Locality: Toronto
Country: CA

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 28:3a:f2:f5:fe:4a:ae:c1:2e:c3:24:ab:47:b7:a6:55
Serial Number (int): 53475200881915032878244689674885375573
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: a1:01:36:38:6d:db:be:c8:2f:96:a2:92:d5:c9:a5:ba:3c:70:74:d6
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): d8:57:0c:c8:c2:4c:e0:a3:89:a0:fe:73:8d:17:f9:76:64:25:1d:f9
Fingerprint (sha256): 07:45:24:b5:55:60:fa:91:db:07:65:96:6d:b0:8a:71:20:38:da:7d:a8:7e:8f:73:80:9b:6b:0c:ef:46:96:7f

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate johnhancock.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for johnhancock.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

johnhancock.com
advisor.jhinvestment.com
advisor.jhinvestments.com
consultants.jhinvestments.com
dcio.jhinvestments.com
edwardjones.jhlifeproducts.com
enet-vip.jhancock.com
internal.jhfunds.com
internal.jhinvestment.com
internal.jhinvestments.com
jh-stage.jhlifeinsurance.com
jh1.jhlifeinsurance.com
jhannuities.com
jhfundsretirement.com
jhillustrator.com
manulifebank.net
mgroupclient.jhancock.com
ria.jhinvestments.com
secure-johnhancock-vip.jhancock.com
secure-johnhancocknewyork-vip.jhancock.com
secure.johnhancock.com
secure.johnhancocknewyork.com
staging.jhfnjunction.com
status.jhltc.com
www-johnhancock-vip.jhancock.com
www-johnhancocknewyork-vip.jhancock.com
www.707fifth.com
www.980howe.com
www.acepracticemanagement.com
www.annuitiesnewyork.com
www.bostonmarathonmediaguide.com
www.findtheanswers.com
www.hancocknext.com
www.investinyourlifetime.com
www.jh401kadviser.com
www.jh401kadvisor.com
www.jhancock.com
www.jhancockannuities.com
www.jhancockannuitiesny.com
www.jhancockcoli.com
www.jhancockkeeep.com
www.jhancocknewyork.com
www.jhancockny.com
www.jhancocknypensions.com
www.jhancockpensions.com
www.jhannuities.com
www.jhannuitiesnewyork.com
www.jhannuitiesny.com
www.jhannuity.com
www.jhbusinessanalyzer.com
www.jhf529.com
www.jhfitnessclinic.com
www.jhfnjunction.com
www.jhfreedom529.com
www.jhfunds.com
www.jhgoenroll.com
www.jhillustrator.com
www.jhinforcedownload.com
www.jhinvestment.com
www.jhinvestments.com
www.jhlife.com
www.jhlifeproducts.com
www.jhltc.com
www.jhmclient.com
www.jhmgroup.com
www.jhnewyork.com
www.jhopenenrollment.com
www.jhsalesnet.com
www.jhsalesnetedwardjones.com
www.jhservicenet.com
www.johnhancock.com
www.johnhancockannuities.com
www.johnhancockfreedom529.com
www.johnhancockinsurance.com
www.johnhancocknewyork.com
www.johnhancocknewyork.net
www.johnhancocknext.com
www.johnhancockny.com
www.johnhancocksalesnet.com
www.johnhancockservicenet.com
www.johnhancockstructures.com
www.johnhancockvitality.com
www.manulife-venture.com
www.manulifeamprivatemarkets.com
www.manulifebermuda.com
www.manulifecareers.com
www.manulifeglobalachiever.com
www.manulifehongkong.com
www.manulifeillustrator.com
www.manulifeusa.com
www.ourdifferentapproach.com
www.practiceoftheyear.com
www.protectionul.com
www.ps.jhancocknypensions.com
www.ps.jhancockpensions.com
www.woodlogan.com

Other certificates including the domain name johnhancock.com

(limited to 100 certificates)
johnhancockinsurance.com
stage.identity.jhancock.com
manulife.com
rps.jhancock.com
manulife.com
uat.igpclaimreporting.jhancock.com
qa.johnhancock.com
johnhancock.com
johnhancock.com
onboarding.retirement.johnhancock.com
johnhancock.com
www.jhinvestments.com
stg.johnhancock.com
myplanuat.johnhancock.com
www.jhinvestments.com
qr.retirement.johnhancock.com
dev-tmp.jhinvestments.com
johnhancock.com
www.jhinvestments.com
manulife.com
johnhancock.com
advisorfeedbackhub.johnhancock.com
manulife.com
johnhancock.com
johnhancock.com
crverifyidentity-dev.johnhancock.com
myplanuat.johnhancock.com
www.jhinvestments.com
johnhancock.com
img.retirement.johnhancock.com
johnhancock.com
rps.jhancock.com
manulife.com
johnhancock.com
manulife.com
instant-apply.johnhancockinsurance.com
manulife.com
manulife.com
rps.jhancock.com
instant-apply.johnhancockinsurance.com
qr.myplan.johnhancock.com
manulife.com
digital-uat.customer.johnhancock.com
myplanuat.johnhancock.com
manulife.com
www.jhinvestments.com
digital-uat.customer.johnhancock.com
personalizedretirementadvice.johnhancock.com
rps.jhancock.com
www.jhinvestments.com
johnhancock.com
secure.johnhancock.com
manulife.com
johnhancock.com
johnhancock.com
www.jhinvestments.com
manulife.com
ww4.johnhancock.com
johnhancock.com
johnhancock.com
manulife.com
preferences.johnhancock.com
qr.myplan.johnhancock.com
img.retirement.johnhancock.com
johnhancock.com
manulife.com
jhshsm.johnhancock.com
qr.myplan.johnhancock.com
johnhancock.com
ww4.johnhancock.com
quote-uat.johnhancock.com
stg.johnhancock.com
johnhancock.com
digital.customer.johnhancock.com
johnhancock.com
johnhancockinsurance.com
johnhancock.com
retirementinfo.johnhancock.com
jhaconnect.jhannuities.com
johnhancock.com
johnhancock.com
onboarding.retirement.johnhancock.com
protect.johnhancock.com
jhshsm.johnhancock.com
rps.jhancock.com
qr.retirement.johnhancock.com
manulife.com
johnhancock.com
newonboardingaugust2023.retirement.johnhancock.com
johnhancock.com
rps.jhancock.com
manulife.com
johnhancock.com
manulife.com
johnhancock.com
finapp.johnhancock.com
johnhancock.com
manulife.com
manulife.com
preferencesstg.johnhancock.com

Certificate

The complete raw certificate details for johnhancock.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkAwYEoExQuuTB7BpKHB
+SN7HlkDHczjkq8AaU0VdFEkfIWQQN275mIb7LMWD7+B9lxmYettM0pyKJW43J98
Bk7NXEkkHV7umunS1fjEjV7m5TjbwAzvM/2x2+O3aHgMIMRSrRT2XOlkfrvRlxax
tdIeGWs5nN6dPBTnzITsq2Qu8ZerZ3/p9Y9C6YNZYIb8AE1NPhEkt1cfsFLEN7T8
B62Ozzp1dFQo4eID3V/rRCvIO/qHkIKprAVIw2Q4wTBBIVwAukMwOV7TYp8Lj4uW
WZybBh7iMpNoI9VgWVDAsud95eSfCUz+no4YyrC5PfTRKIn+FoEe5ucg05RZjVf/
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 53475200881915032878244689674885375573
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'M4W 1E5'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toronto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '200 Bloor Street East'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'John Hancock US Division'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multi-Domain SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'johnhancock.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24521883923869849008959950659527993806094413088203870475677124691179782474628834499701702995185928476226554084798966364626533431157008892393340097876039945255772541003017623830110237814655343248258262588729651777387101839801649597828935863392431409626063450018876031325507343080810624183992886779587041940561641686660756486547525993486019051070498172739441624953670717872103898797001341659568239168128892428969744583375263191318750600251265323826019063090649092885124423871884102102435711543631265926629943724481946133168555411042668073645425398327745946656731630526295912734997644124909562442027295930205643220713343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a10136386ddbbec82f96a292d5c9a5ba3c7074d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2421 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisor.jhinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisor.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultants.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcio.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edwardjones.jhlifeproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enet-vip.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.jhfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.jhinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh-stage.jhlifeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh1.jhlifeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhannuities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhfundsretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhillustrator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifebank.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgroupclient.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ria.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-johnhancock-vip.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-johnhancocknewyork-vip.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.johnhancocknewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.jhfnjunction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.jhltc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-johnhancock-vip.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-johnhancocknewyork-vip.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.707fifth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.980howe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acepracticemanagement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annuitiesnewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bostonmarathonmediaguide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.findtheanswers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hancocknext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investinyourlifetime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jh401kadviser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jh401kadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhancockannuities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhancockannuitiesny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhancockcoli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhancockkeeep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhancocknewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhancockny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhancocknypensions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhancockpensions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhannuities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhannuitiesnewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhannuitiesny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhannuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhbusinessanalyzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhf529.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhfitnessclinic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhfnjunction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhfreedom529.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhgoenroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhillustrator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhinforcedownload.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhlifeproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhltc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhmclient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhmgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhnewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhopenenrollment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhsalesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhsalesnetedwardjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhservicenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockannuities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockfreedom529.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancocknewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancocknewyork.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancocknext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancocksalesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockservicenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockstructures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockvitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulife-venture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifeamprivatemarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifebermuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifecareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifeglobalachiever.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifehongkong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifeillustrator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifeusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourdifferentapproach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.practiceoftheyear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protectionul.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.jhancocknypensions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.jhancockpensions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodlogan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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