manulife.com

- Manulife Financial Corporation -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number e1:a6:d6:a2:1d:d5:47:f6:3b:48:e3:49:a6:11:63:89 was issued on by Sectigo Limited.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Manulife Financial Corporation

Organization: Manulife Financial Corporation
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): e1:a6:d6:a2:1d:d5:47:f6:3b:48:e3:49:a6:11:63:89
Serial Number (int): 299942573609973267872574228856233354121
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e4:d4:d4:1b:09:d4:a7:29:39:6d:3c:7b:bc:f8:cf:e9:7a:29:25:c5
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): bf:a4:53:0e:35:c9:65:16:f5:ce:de:29:c2:28:f8:34:12:26:26:73
Fingerprint (sha256): 0b:be:8d:dc:f0:73:2f:0c:b6:1a:7c:b9:38:b6:6c:9b:bd:ad:29:94:6e:30:a0:44:c9:8f:76:32:95:72:cd:a5

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate manulife.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for manulife.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

manulife.com
10014.manulife.com
agrssponsors.manulife.com
aidp.manulife.com
api.manulifesecurities.manulife.ca
api.placementsmanuvie.manuvie.ca
api.portal.manulife.ca
appraisals-test.manulife.com
appraisals.manulife.com
attestuat.manulife.com
aviproom.manulife.com
banquescotia.monprochainchapitre.ca
canadiancommercialmortgages.manulife.com
cdd-dev.manulife.com
cdd-prod.manulife.com
cdd-uat.manulife.com
cdncetdvcacicfrtr.manulife.io
cdncetprcacicaafnapp.manulife.io
cdncetprcacicfrtr.manulife.io
cloud.mesh.preprod.api.manulife.com
cpuat.manulifeprivatewealth.com
cusc.manulife.com
edocs-bff.manulifeim.ca
edocs-uat-bff.manulifeim.ca
edocs-uat.manulifeim.ca
edocs.manulifeim.ca
faspexdev.manulife.com
grssofmo.manulife.com
grssponsors.manulife.com
idp.manulife.com
igoinsured.com
isctapi-uat.external.manulife.com
login.manulifeghnw.com
m.manulife.com
m.manuvie.com
manulifesecurities.manulife.ca
manuvie.ca
mfcentralqa.manulife.com
mfcentralstage.manulife.com
monprochainchapitre.ca
myflexbenefitsdemo.manulife.com
mynextchapter.ca
mysolutionsonline.manulife.ca
mysolutionsonline.manuvie.ca
nav.manulifeim.com
placementsmanuvie.manuvie.ca
portail.assurance.manuvie.ca
portal.insurance.manulife.ca
portal.investments.manulife.ca
prod.mysolutionsonline.manulife.ca
prod.mysolutionsonline.manuvie.ca
repsource.manulife.com
repsourcepublic.manulife.com
retirementredefined.ca
retirementredefined.manulife.ca
retraiteredefinie.ca
retraiteredefinie.manuvie.ca
scotiabank.mynextchapter.ca
secureigaz.manulife.ca
secureigazuat.manulife.ca
sit.igoinsured.com
stage.api.portal.manulife.ca
stage.cusc.manulife.com
stage.login.manulifeghnw.com
stage.mysolutionsonline.manulife.ca
stage.mysolutionsonline.manuvie.ca
stg-nav.manulifeim.com
techconnect.manulife.com
test.cusc.manulife.com
uat-repsource.manulife.com
uat.banquescotia.monprochainchapitre.ca
uat.igoinsured.com
uat.mobile.manulife.ca
uat.monprochainchapitre.ca
uat.mynextchapter.ca
uat.portal.investments.manulife.ca
uat.pot.manulife.ca
uat.scotiabank.mynextchapter.ca
viproom.manulife.com
web.manulife.com
www-uat.assurancevoyagemanuvie.ca
www-uat.manulifetravelinsurance.ca
www.appraisals-test.manulife.com
www.appraisals.manulife.com
www.canadiancommercialmortgages.manulife.com
www.cusc.manulife.com
www.igoinsured.com
www.login.manulifeghnw.com
www.mfc.com
www.monprochainchapitre.ca
www.mynextchapter.ca
www.retirementredefined.ca
www.retraiteredefinie.ca

Other certificates including the domain name manulife.com

(limited to 100 certificates)
mlisxivg01.manulife.com
manulife.com
nasbfepool02.mfcgd.com
mfcentral.manulife.com
api1.np.ca.manulife.com
idwicrmapd01.mlijkt01.manulife.com
manulife.com
manulife.com
aidp.manulife.com
azalvedlwrkdp10.p01eaedl.manulife.com
manulife.com
client.manulifebank.com
rps.jhancock.com
manulife.com
sharepoint-externalpartner.uat.ap.manulife.com
hermes.manulife.com
manulife.com
clbs37841.manulife.com
internal.mesh.test.api.manulife.com
azcedlwrks003.s01caedl.manulife.com
manulife.com
cdcwvjhpwast21.americas.manulife.net
daily.manulife.com.vn
click.e.manulife.com
sft.institutional.manulife.com
johnhancock.com
manulife.com
sts.manulife.com
manulife.com
azslvedlmgtdd01.d01saedl.manulife.com
idwicrmapt21.mlijkt01.manulife.com
idwcasp.ap.manulife.com
mfcentral.manulife.com
manulife.com
view-e-ds.manulife.com
idwelems01.mlijkt01.manulife.com
druglookup-client.manulife.com
mfcentral.manulife.com
sharepoint-externalpartner.uat.ap.manulife.com
www-aem-prod.manulife.ca
insttrip.manulife.com
manulife.com
dbpartners.manulife.com
idwinetapt01.mlijkt01.manulife.com
asiacitrix.manulife.com
arrowonramp.manulife.com
manulife.com
qitsso-uat.manulife.com
manulife.com
sf.cac.internal.mesh.dev.api.manulife.com
manulife.com
giam-qa.manulife.com
manulife.com
cconprem.manulife.com
manulife.com
manulife.com
manulife.com
idp.grsportal.ca.manulife.com
manulife.com
insanalyticsdev01.manulife.com
awsuat.manulife.com.kh
idwiqmtapp01.mlijkt01.manulife.com
johnhancock.com
manulife.com
manulife.com
myasoaibp2.ap.manulife.com
remotejp2.manulife.com
johnhancock.com
sharepoint-int.ap.manulife.com
mlifs900g01.manulife.com
nasbaccess01.manulife.com
jhappsstaging-tst.aks.manulife.com
manulife.com
manulife.com
crverifyidentity-dev.johnhancock.com
manulife.com
jpnhoapt09.japan.corp.manulife.com
client.manulifebank.com
preprod.mtls.api.manulife.com
manulife.com
idwietsisft05.mlijkt01.manulife.com
remotehk.manulife.com
azcedledges001.s01caedl.manulife.com
idwcas4tap.ap.manulife.com
manulife.com
mlixnbarplzvnaca.manulife.com
manulife.com
manulife.com
druglookup-client.manulife.com
pcf.manulife.com
proxy.auw.my.underwriting.manulife.com
manulife.com
johnhancock.com
manulife.com
financeit.devsit202201.manulife.com
tw-ssg-fw1.manulife.com
advisor.manulife.ca
azwapnwasm01.mfcgd.com
azuedldbo01.p01usedl.manulife.com
edge.prod-ext.api.manulife.com

Certificate

The complete raw certificate details for manulife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRU5J3zSeciuB9ohzTwl
72v9W5lxvgOaqSC10Qc3HGOdnmvM4Z+yXUpFf7q0bexT5njFO9ESHnk2Hfk5bavQ
Xb9/WD0f/CktET9bxm3scWbbLy6Bpfo2XtxIHd52TzTZLcWWSmyner6mdG1gz7T+
rgOhmZxw9yftNnJortolkiwMkcHL6UjUykhcAjcbTAQ+XgSC1MKtFFFYlUrEtj8l
QYAjxFauV75ONqRj+qPNmGVoSj2+cu6IktbmtynzGVqA903faPZJ6SucLLFDv5IP
+Wxxx+qO52vte6wB5pXhF74nKi+JtSKtWUVxCJ8HGE9rK/EXIO3q69GWrJ19Z4PM
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299942573609973267872574228856233354121
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'manulife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25889318097005263485355387885449658822676148832562072881050245408183299092731601040802018509792759052688869577887247274195263741292800239577033786619688177506550905992724806386723294672294700172402648664730301685758173225682083250524732499472087744241075500091010306456614674980765671139425049268787212294225629575341191250263448348303838720316192464362711499759719901009769538198876173041108726068462283062335238207898984136441949732808213590596529218917483776230624104947547918984682109608333888369730317387235070996285632160780329925724729597649352895384928765562875241873760411185821016480608085140143066883279909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e4d4d41b09d4a729396d3c7bbcf8cfe97a2925c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2512 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10014.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrssponsors.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aidp.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.manulifesecurities.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.placementsmanuvie.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.portal.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisals-test.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisals.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attestuat.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviproom.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banquescotia.monprochainchapitre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadiancommercialmortgages.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdd-dev.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdd-prod.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdd-uat.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdncetdvcacicfrtr.manulife.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdncetprcacicaafnapp.manulife.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdncetprcacicfrtr.manulife.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.mesh.preprod.api.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpuat.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cusc.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edocs-bff.manulifeim.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edocs-uat-bff.manulifeim.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edocs-uat.manulifeim.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edocs.manulifeim.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faspexdev.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grssofmo.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grssponsors.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igoinsured.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isctapi-uat.external.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.manulifeghnw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.manuvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifesecurities.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfcentralqa.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfcentralstage.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monprochainchapitre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myflexbenefitsdemo.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynextchapter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysolutionsonline.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysolutionsonline.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nav.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placementsmanuvie.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portail.assurance.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.insurance.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.investments.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.mysolutionsonline.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.mysolutionsonline.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repsource.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repsourcepublic.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirementredefined.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirementredefined.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retraiteredefinie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retraiteredefinie.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotiabank.mynextchapter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureigaz.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureigazuat.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit.igoinsured.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.api.portal.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.cusc.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.login.manulifeghnw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.mysolutionsonline.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.mysolutionsonline.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-nav.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techconnect.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cusc.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-repsource.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.banquescotia.monprochainchapitre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.igoinsured.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.mobile.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.monprochainchapitre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.mynextchapter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.portal.investments.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.pot.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.scotiabank.mynextchapter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viproom.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.assurancevoyagemanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.manulifetravelinsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appraisals-test.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appraisals.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadiancommercialmortgages.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cusc.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igoinsured.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.login.manulifeghnw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monprochainchapitre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mynextchapter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retirementredefined.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retraiteredefinie.ca'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007f399d88048eb049443fd62cfaecd48dbbbb7cb5808fb4e08e3632c43268b23841be4af3863795d56ffd3712ed69b031728ab94173e7c682822f3831c923362cb2877c06677b5e84cf1c44ad79f520a71931beed770ffc9bb7b4f6176de298704fa4ee86afdfaad6dbe9abc95ac5b77cf9ee1f16cffa6f9f53694ea1f64b6b7cbafd81ff56c3cc5147362103274bbebae1c32ca4ef0af4a0e32435e41750d1342d8e2acaf7239ec242476b2df0d606d42f47f59b2b651bff7fbb304595451d910b74bbe5d05d97a13e08ad33044ff134a4d51009b9efe5c0c8bcf3c0d6db1b86474be0ab84e16dba2fd9a446341dcffc20540dbd437d1771d09db4d9578ff72f