manulife.com

- Manulife Financial Corporation -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 37:00:44:c8:37:c6:3b:e4:ee:26:d6:ab:a7:3b:5f:82 was issued on by Sectigo Limited.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Manulife Financial Corporation

Organization: Manulife Financial Corporation
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 37:00:44:c8:37:c6:3b:e4:ee:26:d6:ab:a7:3b:5f:82
Serial Number (int): 73108934834917249871264188371471916930
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 65:ea:2c:46:11:62:cd:d2:52:1f:af:95:fd:ce:1a:00:d0:ec:68:90
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): e9:db:0b:9b:c7:e5:aa:d8:26:93:67:75:c1:e7:8a:11:f9:1a:20:0d
Fingerprint (sha256): 0e:b0:16:8c:b1:22:85:6e:05:ee:73:b2:90:c2:f9:03:e4:6f:d8:4d:0e:e2:d7:43:47:47:ea:24:bf:9c:22:81

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate manulife.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for manulife.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

manulife.com
10014.manulife.com
agrssponsors.manulife.com
aidp.manulife.com
api.manulifesecurities.manulife.ca
api.placementsmanuvie.manuvie.ca
api.portal.manulife.ca
appraisals-test.manulife.com
appraisals.manulife.com
attestuat.manulife.com
aviproom.manulife.com
banquescotia.monprochainchapitre.ca
canadiancommercialmortgages.manulife.com
cdd-dev.manulife.com
cdd-prod.manulife.com
cdd-uat.manulife.com
cdncetdvcacicfrtr.manulife.io
cdncetprcacicaafnapp.manulife.io
cdncetprcacicfrtr.manulife.io
cloud.mesh.preprod.api.manulife.com
cpuat.manulifeprivatewealth.com
cusc.manulife.com
edocs-bff.manulifeim.ca
edocs-uat-bff.manulifeim.ca
edocs-uat.manulifeim.ca
edocs.manulifeim.ca
faspexdev.manulife.com
grssofmo.manulife.com
grssponsors.manulife.com
idp.manulife.com
igoinsured.com
isctapi-uat.external.manulife.com
login.manulifeghnw.com
m.manulife.com
m.manuvie.com
manulifesecurities.manulife.ca
manuvie.ca
mfcentralqa.manulife.com
mfcentralstage.manulife.com
monprochainchapitre.ca
myflexbenefitsdemo.manulife.com
mynextchapter.ca
mysolutionsonline.manulife.ca
mysolutionsonline.manuvie.ca
nav.manulifeim.com
placementsmanuvie.manuvie.ca
portail.assurance.manuvie.ca
portal.insurance.manulife.ca
portal.investments.manulife.ca
prod.mysolutionsonline.manulife.ca
prod.mysolutionsonline.manuvie.ca
repsource.manulife.com
repsourcepublic.manulife.com
retirementredefined.ca
retirementredefined.manulife.ca
retraiteredefinie.ca
retraiteredefinie.manuvie.ca
scotiabank.mynextchapter.ca
secureigaz.manulife.ca
secureigazuat.manulife.ca
sit6.fasat.manulife.ca
sit6.fasat.manulife.com
stage.api.portal.manulife.ca
stage.cusc.manulife.com
stage.login.manulifeghnw.com
stage.mysolutionsonline.manulife.ca
stage.mysolutionsonline.manuvie.ca
stg-nav.manulifeim.com
techconnect.manulife.com
test.cusc.manulife.com
uat-repsource.manulife.com
uat.banquescotia.monprochainchapitre.ca
uat.fasat.manulife.ca
uat.fasat.manulife.com
uat.igoinsured.com
uat.mobile.manulife.ca
uat.monprochainchapitre.ca
uat.mynextchapter.ca
uat.portal.investments.manulife.ca
uat.pot.manulife.ca
uat.scotiabank.mynextchapter.ca
viproom.manulife.com
web.manulife.com
www-uat.assurancevoyagemanuvie.ca
www-uat.manulifetravelinsurance.ca
www.appraisals-test.manulife.com
www.appraisals.manulife.com
www.canadiancommercialmortgages.manulife.com
www.cusc.manulife.com
www.igoinsured.com
www.login.manulifeghnw.com
www.mfc.com
www.monprochainchapitre.ca
www.mynextchapter.ca
www.retirementredefined.ca
www.retraiteredefinie.ca

Other certificates including the domain name manulife.com

(limited to 100 certificates)
mlisxivg01.manulife.com
manulife.com
nasbfepool02.mfcgd.com
mfcentral.manulife.com
api1.np.ca.manulife.com
idwicrmapd01.mlijkt01.manulife.com
manulife.com
manulife.com
aidp.manulife.com
azalvedlwrkdp10.p01eaedl.manulife.com
manulife.com
client.manulifebank.com
rps.jhancock.com
manulife.com
sharepoint-externalpartner.uat.ap.manulife.com
hermes.manulife.com
manulife.com
clbs37841.manulife.com
internal.mesh.test.api.manulife.com
azcedlwrks003.s01caedl.manulife.com
manulife.com
cdcwvjhpwast21.americas.manulife.net
daily.manulife.com.vn
click.e.manulife.com
sft.institutional.manulife.com
johnhancock.com
manulife.com
sts.manulife.com
manulife.com
azslvedlmgtdd01.d01saedl.manulife.com
idwicrmapt21.mlijkt01.manulife.com
idwcasp.ap.manulife.com
mfcentral.manulife.com
manulife.com
view-e-ds.manulife.com
idwelems01.mlijkt01.manulife.com
druglookup-client.manulife.com
mfcentral.manulife.com
sharepoint-externalpartner.uat.ap.manulife.com
www-aem-prod.manulife.ca
insttrip.manulife.com
manulife.com
dbpartners.manulife.com
idwinetapt01.mlijkt01.manulife.com
asiacitrix.manulife.com
arrowonramp.manulife.com
manulife.com
qitsso-uat.manulife.com
manulife.com
sf.cac.internal.mesh.dev.api.manulife.com
manulife.com
giam-qa.manulife.com
manulife.com
cconprem.manulife.com
manulife.com
manulife.com
manulife.com
idp.grsportal.ca.manulife.com
manulife.com
insanalyticsdev01.manulife.com
awsuat.manulife.com.kh
idwiqmtapp01.mlijkt01.manulife.com
johnhancock.com
manulife.com
manulife.com
myasoaibp2.ap.manulife.com
remotejp2.manulife.com
johnhancock.com
sharepoint-int.ap.manulife.com
mlifs900g01.manulife.com
nasbaccess01.manulife.com
jhappsstaging-tst.aks.manulife.com
manulife.com
manulife.com
crverifyidentity-dev.johnhancock.com
manulife.com
jpnhoapt09.japan.corp.manulife.com
client.manulifebank.com
preprod.mtls.api.manulife.com
manulife.com
idwietsisft05.mlijkt01.manulife.com
remotehk.manulife.com
azcedledges001.s01caedl.manulife.com
idwcas4tap.ap.manulife.com
manulife.com
mlixnbarplzvnaca.manulife.com
manulife.com
manulife.com
druglookup-client.manulife.com
pcf.manulife.com
proxy.auw.my.underwriting.manulife.com
manulife.com
johnhancock.com
manulife.com
financeit.devsit202201.manulife.com
tw-ssg-fw1.manulife.com
advisor.manulife.ca
azwapnwasm01.mfcgd.com
azuedldbo01.p01usedl.manulife.com
edge.prod-ext.api.manulife.com

Certificate

The complete raw certificate details for manulife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2V8lzfdr0Uz71KymvtD7
rr7X3ay7rigeJ8srYSXrf4TuHCvaxnBUo+OuNFcshF2qIYgkt65XHD3dB7RgmpG6
Cz/P+2QyoqN0PJVmHNegORCNLmL0KtvWr6HNf1X18mBn9/8KP/bBYLnbphsFKu6J
nvjBbnCiDe1CXb3dzmsfJmuVcT6iS6QtQ0GolCZpirgJcdl4P2bk0KJwL4ex0bZq
3eNai3xt9bUlc9aqwkrcFSGskmuA9em1p/0UzkjTO+/Qn821b3jRb/fXyfSiqRbd
Vwqk9PbRhkDVD3pTBbb3X2c7M6t8cNspLvhUqKzLxM0I+mbvHW15KDwAnv01d7/q
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 73108934834917249871264188371471916930
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'manulife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27440631244405951892980588405679911420595738274847732320340345116437902765032461829369451490224210928635457658154599327374057053663190126586456884829605038383998480533192059190366400760423259715033496559887473054825629091550976101600492237731103463762571045090848233946184929466707211045062573483981272024515319628154439929605353192375218787120355240511185321021109735950915925652482986508096503248380825127644638524983198259767288652853629533476799718975328133845130968855314522384126471112012840752528418871394830370869321739800569633704041637966237241755022778353442919029053919209863476583887017445053170783873701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65ea2c461162cdd2521faf95fdce1a00d0ec6890
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2588 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10014.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrssponsors.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aidp.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.manulifesecurities.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.placementsmanuvie.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.portal.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisals-test.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisals.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attestuat.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviproom.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banquescotia.monprochainchapitre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadiancommercialmortgages.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdd-dev.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdd-prod.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdd-uat.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdncetdvcacicfrtr.manulife.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdncetprcacicaafnapp.manulife.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdncetprcacicfrtr.manulife.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.mesh.preprod.api.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpuat.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cusc.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edocs-bff.manulifeim.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edocs-uat-bff.manulifeim.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edocs-uat.manulifeim.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edocs.manulifeim.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faspexdev.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grssofmo.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grssponsors.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igoinsured.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isctapi-uat.external.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.manulifeghnw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.manuvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifesecurities.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfcentralqa.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfcentralstage.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monprochainchapitre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myflexbenefitsdemo.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynextchapter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysolutionsonline.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysolutionsonline.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nav.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placementsmanuvie.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portail.assurance.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.insurance.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.investments.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.mysolutionsonline.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.mysolutionsonline.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repsource.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repsourcepublic.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirementredefined.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirementredefined.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retraiteredefinie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retraiteredefinie.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotiabank.mynextchapter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureigaz.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureigazuat.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit6.fasat.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit6.fasat.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.api.portal.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.cusc.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.login.manulifeghnw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.mysolutionsonline.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.mysolutionsonline.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-nav.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techconnect.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cusc.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-repsource.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.banquescotia.monprochainchapitre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.fasat.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.fasat.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.igoinsured.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.mobile.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.monprochainchapitre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.mynextchapter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.portal.investments.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.pot.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.scotiabank.mynextchapter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viproom.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.assurancevoyagemanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.manulifetravelinsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appraisals-test.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appraisals.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadiancommercialmortgages.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cusc.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igoinsured.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.login.manulifeghnw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monprochainchapitre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mynextchapter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retirementredefined.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retraiteredefinie.ca'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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