johnhancock.com

- Manulife Financial -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 44:fd:75:c2:81:de:10:2c:1e:e7:8b:0d:c1:ce:35:78 was issued on by Sectigo Limited.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Manulife Financial

Organization: Manulife Financial
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 44:fd:75:c2:81:de:10:2c:1e:e7:8b:0d:c1:ce:35:78
Serial Number (int): 91703543270962769930853518778068514168
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 9a:73:4f:3b:61:f1:52:f1:7c:36:b0:b2:42:e6:a2:5e:40:ec:93:f9
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): d8:fb:b8:52:29:7c:b8:a9:5a:c2:00:67:f6:1b:db:2c:0a:09:33:9b
Fingerprint (sha256): 14:15:e1:5a:42:0a:d3:f4:fd:f0:99:e7:d9:6b:ba:39:a4:e0:88:06:bc:26:ca:85:f9:e6:a5:47:66:5c:1c:3f

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate johnhancock.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for johnhancock.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

johnhancock.com
11514.johnhancock.com
44charles.com
advisor.johnhancockinsurance.com
agent.johnhancockinsurance.com
api.jhinvestments.com
apply.johnhancockinsurance.com
apps-stage.johnhancockinsurance.com
confluence.jhinvestments.com
dev-api.jhinvestments.com
expresstrack.johnhancockinsurance.com
finalexpense.johnhancockinsurance.com
fuw-apply.johnhancockinsurance.com
identity.jhancock.com
insight.manulifeam.com
insight.manulifeim.com
instant-apply.johnhancockinsurance.com
jh1.jhlifeinsurance.com
jhancockrealestate.com
jhcalculator.com
jhcustomerzoom.jhancock.com
jhekitpdf.com
jhfixedproducts.com
jhlifeinsurance.com
jhmclient.com
jhmgroup.com
jhrewardslife.com
jhrewardslife.johnhancockinsurance.com
jhsaleshub.com
jhsalesnet.com
jhservicenet.com
jira.jhinvestments.com
johnhancockinsurance.com
johnhancockvitality.com
life.customer.johnhancock.com
ltc.customer.johnhancock.com
ltcconnect.johnhancockinsurance.com
ltcprovider.johnhancockinsurance.com
maisonmanuvie.com
manulifeinvestmentmgmt.com
manulifeinvestmentmgt.com
manuliferealestatefinance.com
mas.jhancock.com
mgroupclient.jhancock.com
mi-stg-cps.jhinvestments.com
od.jhekitpdf.com
pages.johnhancockrealestate.com
partnerlink.jhancock.com
partnerlinkc.jhancock.com
pers.manulifebermuda.com
prod-api.jhinvestments.com
qa.johnhancock.com
quote-uat.johnhancock.com
register.jhancock.com
sales-stg-tmp.johnhancockinsurance.com
sales-tmp.johnhancockinsurance.com
sales.johnhancockinsurance.com
sales.manulifebermuda.com
secure.johnhancockinsurance.com
simpleterm-uat.johnhancock.com
stage.identity.jhancock.com
stage.johnhancockvitality.com
stage.manulifebermuda.com
stage.partnerlink.jhancock.com
stage.register.jhancock.com
stagec.partnerlink.jhancock.com
stg-tmp.manulifeim.com
stg.rewardslife.johnhancockinsurance.com
stg64.johnhancockinsurance.com
termlife.johnhancock.com
termlife.johnhancockinsurance.com
test.partnerlink.jhancock.com
test.register.jhancock.com
tmp.jhsaleshub.com
tmp.manulifebermuda.com
ucits.manulifeinvestmentmgmt.com
viewpoints.manulifeam.com
www.jhancockrealestate.com
www.jhcalculator.com
www.jhekitpdf.com
www.jhfixedproducts.com
www.jhlifeinsurance.com
www.jhmclient.com
www.jhmgroup.com
www.jhproposals.com
www.jhrewardslife.com
www.jhsaleshub.com
www.jhsalesnet.com
www.jhservicenet.com
www.johnhancockinsurance.com
www.johnhancockvitality.com
www.manulifeinvestmentmgmt.com
www.manulifeinvestmentmgt.com
www.manuliferealestatefinance.com

Other certificates including the domain name johnhancock.com

(limited to 100 certificates)
johnhancockinsurance.com
stage.identity.jhancock.com
manulife.com
rps.jhancock.com
manulife.com
uat.igpclaimreporting.jhancock.com
qa.johnhancock.com
johnhancock.com
johnhancock.com
onboarding.retirement.johnhancock.com
johnhancock.com
www.jhinvestments.com
stg.johnhancock.com
myplanuat.johnhancock.com
www.jhinvestments.com
qr.retirement.johnhancock.com
dev-tmp.jhinvestments.com
johnhancock.com
www.jhinvestments.com
manulife.com
johnhancock.com
advisorfeedbackhub.johnhancock.com
manulife.com
johnhancock.com
johnhancock.com
crverifyidentity-dev.johnhancock.com
myplanuat.johnhancock.com
www.jhinvestments.com
johnhancock.com
img.retirement.johnhancock.com
johnhancock.com
rps.jhancock.com
manulife.com
johnhancock.com
manulife.com
instant-apply.johnhancockinsurance.com
manulife.com
manulife.com
rps.jhancock.com
instant-apply.johnhancockinsurance.com
qr.myplan.johnhancock.com
manulife.com
digital-uat.customer.johnhancock.com
myplanuat.johnhancock.com
manulife.com
www.jhinvestments.com
digital-uat.customer.johnhancock.com
personalizedretirementadvice.johnhancock.com
rps.jhancock.com
www.jhinvestments.com
johnhancock.com
secure.johnhancock.com
manulife.com
johnhancock.com
johnhancock.com
www.jhinvestments.com
manulife.com
ww4.johnhancock.com
johnhancock.com
johnhancock.com
manulife.com
preferences.johnhancock.com
qr.myplan.johnhancock.com
img.retirement.johnhancock.com
johnhancock.com
manulife.com
jhshsm.johnhancock.com
qr.myplan.johnhancock.com
johnhancock.com
ww4.johnhancock.com
quote-uat.johnhancock.com
stg.johnhancock.com
johnhancock.com
digital.customer.johnhancock.com
johnhancock.com
johnhancockinsurance.com
johnhancock.com
retirementinfo.johnhancock.com
jhaconnect.jhannuities.com
johnhancock.com
johnhancock.com
onboarding.retirement.johnhancock.com
protect.johnhancock.com
jhshsm.johnhancock.com
rps.jhancock.com
qr.retirement.johnhancock.com
manulife.com
johnhancock.com
newonboardingaugust2023.retirement.johnhancock.com
johnhancock.com
rps.jhancock.com
manulife.com
johnhancock.com
manulife.com
johnhancock.com
finapp.johnhancock.com
johnhancock.com
manulife.com
manulife.com
preferencesstg.johnhancock.com

Certificate

The complete raw certificate details for johnhancock.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQojCCD4qgAwIBAgIQRP11woHeECwe54sNwc41eDANBgkqhkiG9w0BAQsFADCB
lTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMT0wOwYDVQQD
EzRTZWN0aWdvIFJTQSBPcmdhbml6YXRpb24gVmFsaWRhdGlvbiBTZWN1cmUgU2Vy
dmVyIENBMB4XDTIyMTEwMzAwMDAwMFoXDTIzMTEwMzIzNTk1OVowVjELMAkGA1UE
BhMCQ0ExEDAOBgNVBAgTB09udGFyaW8xGzAZBgNVBAoTEk1hbnVsaWZlIEZpbmFu
Y2lhbDEYMBYGA1UEAxMPam9obmhhbmNvY2suY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAosPZqENv4S2OeHksAdyldRDbeyOTMXMynCYwQQLBWLQw
MKa9WmIQVr1xwgrm/TTt1s7zrP7q1fapDd7VrniTcywPtXrZq0LHMMQ27YXfIHgh
0Q2MVssQD8/Yhn3zTih5guHtrhkRTOzwqi1vPRTfzR8YngAS1cT+XQjStXUjG6P5
qG7/jBLNkuW4syNcV1agm0r6Fl7DUN7pdT6VcQD8CBqLBIadVUi0renBLc+lOJI/
p4E2bgLF/SkWtueUrqib2NfpmSD1zykOh/CcjlVRnGhRHYFuxdkyDVsMtSDuIfjs
6QbTVk3WvkVHwubNDOmF6FGchlerjE41kJtnlqjqgQIDAQABo4INKjCCDSYwHwYD
VR0jBBgwFoAUF9nWJSdn+THCSUPZMDZEjGypT+swHQYDVR0OBBYEFJpzTzth8VLx
fDawskLmol5A7JP5MA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBKBgNVHSAEQzBBMDUGDCsGAQQBsjEB
AgEDBDAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZn
gQwBAgIwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2NybC5zZWN0aWdvLmNvbS9T
ZWN0aWdvUlNBT3JnYW5pemF0aW9uVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNy
bDCBigYIKwYBBQUHAQEEfjB8MFUGCCsGAQUFBzAChklodHRwOi8vY3J0LnNlY3Rp
Z28uY29tL1NlY3RpZ29SU0FPcmdhbml6YXRpb25WYWxpZGF0aW9uU2VjdXJlU2Vy
dmVyQ0EuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTCC
AX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYArfe++nz/EMiLnT2cHj4YarRnKV3P
sQwkyoWGNOvcgooAAAGEPWjDfgAABAMARzBFAiB/mOGZuJ6C9/b37lLnLTq/3WDL
ritAAjz0JnlsrQT1fgIhAOynQQSI8QeS09yRyWC13Yhw+EaPL7QkP7xyvuv4YKfh
AHYAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGEPWjDTgAABAMA
RzBFAiEAsa2EcS1Rl2rrSKV/kFkztcYOcMLlAAPxF5S3KuxeoN0CIDZVuwrfzf5V
ODwiBdfQ25+yaqxeqsLe/WeGrT55Of70AHYA6D7Q2j71BjUy51covIlryQPTy9ER
a+zraeF3fW0GvW4AAAGEPWjDHgAABAMARzBFAiAiYjPjpVBm3ChEaKQTRYCUqyRJ
+lf3hkqsbR/PxU6TpwIhAPWmYzMzhQ4N7OuKmQh5mZMU2BF+CSohDan3pluV+BrN
MIIJ7gYDVR0RBIIJ5TCCCeGCD2pvaG5oYW5jb2NrLmNvbYIVMTE1MTQuam9obmhh
bmNvY2suY29tgg00NGNoYXJsZXMuY29tgiBhZHZpc29yLmpvaG5oYW5jb2NraW5z
dXJhbmNlLmNvbYIeYWdlbnQuam9obmhhbmNvY2tpbnN1cmFuY2UuY29tghVhcGku
amhpbnZlc3RtZW50cy5jb22CHmFwcGx5LmpvaG5oYW5jb2NraW5zdXJhbmNlLmNv
bYIjYXBwcy1zdGFnZS5qb2huaGFuY29ja2luc3VyYW5jZS5jb22CHGNvbmZsdWVu
Y2UuamhpbnZlc3RtZW50cy5jb22CGWRldi1hcGkuamhpbnZlc3RtZW50cy5jb22C
JWV4cHJlc3N0cmFjay5qb2huaGFuY29ja2luc3VyYW5jZS5jb22CJWZpbmFsZXhw
ZW5zZS5qb2huaGFuY29ja2luc3VyYW5jZS5jb22CImZ1dy1hcHBseS5qb2huaGFu
Y29ja2luc3VyYW5jZS5jb22CFWlkZW50aXR5LmpoYW5jb2NrLmNvbYIWaW5zaWdo
dC5tYW51bGlmZWFtLmNvbYIWaW5zaWdodC5tYW51bGlmZWltLmNvbYImaW5zdGFu
dC1hcHBseS5qb2huaGFuY29ja2luc3VyYW5jZS5jb22CF2poMS5qaGxpZmVpbnN1
cmFuY2UuY29tghZqaGFuY29ja3JlYWxlc3RhdGUuY29tghBqaGNhbGN1bGF0b3Iu
Y29tghtqaGN1c3RvbWVyem9vbS5qaGFuY29jay5jb22CDWpoZWtpdHBkZi5jb22C
E2poZml4ZWRwcm9kdWN0cy5jb22CE2pobGlmZWluc3VyYW5jZS5jb22CDWpobWNs
aWVudC5jb22CDGpobWdyb3VwLmNvbYIRamhyZXdhcmRzbGlmZS5jb22CJmpocmV3
YXJkc2xpZmUuam9obmhhbmNvY2tpbnN1cmFuY2UuY29tgg5qaHNhbGVzaHViLmNv
bYIOamhzYWxlc25ldC5jb22CEGpoc2VydmljZW5ldC5jb22CFmppcmEuamhpbnZl
c3RtZW50cy5jb22CGGpvaG5oYW5jb2NraW5zdXJhbmNlLmNvbYIXam9obmhhbmNv
Y2t2aXRhbGl0eS5jb22CHWxpZmUuY3VzdG9tZXIuam9obmhhbmNvY2suY29tghxs
dGMuY3VzdG9tZXIuam9obmhhbmNvY2suY29tgiNsdGNjb25uZWN0LmpvaG5oYW5j
b2NraW5zdXJhbmNlLmNvbYIkbHRjcHJvdmlkZXIuam9obmhhbmNvY2tpbnN1cmFu
Y2UuY29tghFtYWlzb25tYW51dmllLmNvbYIabWFudWxpZmVpbnZlc3RtZW50bWdt
dC5jb22CGW1hbnVsaWZlaW52ZXN0bWVudG1ndC5jb22CHW1hbnVsaWZlcmVhbGVz
dGF0ZWZpbmFuY2UuY29tghBtYXMuamhhbmNvY2suY29tghltZ3JvdXBjbGllbnQu
amhhbmNvY2suY29tghxtaS1zdGctY3BzLmpoaW52ZXN0bWVudHMuY29tghBvZC5q
aGVraXRwZGYuY29tgh9wYWdlcy5qb2huaGFuY29ja3JlYWxlc3RhdGUuY29tghhw
YXJ0bmVybGluay5qaGFuY29jay5jb22CGXBhcnRuZXJsaW5rYy5qaGFuY29jay5j
b22CGHBlcnMubWFudWxpZmViZXJtdWRhLmNvbYIacHJvZC1hcGkuamhpbnZlc3Rt
ZW50cy5jb22CEnFhLmpvaG5oYW5jb2NrLmNvbYIZcXVvdGUtdWF0LmpvaG5oYW5j
b2NrLmNvbYIVcmVnaXN0ZXIuamhhbmNvY2suY29tgiZzYWxlcy1zdGctdG1wLmpv
aG5oYW5jb2NraW5zdXJhbmNlLmNvbYIic2FsZXMtdG1wLmpvaG5oYW5jb2NraW5z
dXJhbmNlLmNvbYIec2FsZXMuam9obmhhbmNvY2tpbnN1cmFuY2UuY29tghlzYWxl
cy5tYW51bGlmZWJlcm11ZGEuY29tgh9zZWN1cmUuam9obmhhbmNvY2tpbnN1cmFu
Y2UuY29tgh5zaW1wbGV0ZXJtLXVhdC5qb2huaGFuY29jay5jb22CG3N0YWdlLmlk
ZW50aXR5LmpoYW5jb2NrLmNvbYIdc3RhZ2Uuam9obmhhbmNvY2t2aXRhbGl0eS5j
b22CGXN0YWdlLm1hbnVsaWZlYmVybXVkYS5jb22CHnN0YWdlLnBhcnRuZXJsaW5r
LmpoYW5jb2NrLmNvbYIbc3RhZ2UucmVnaXN0ZXIuamhhbmNvY2suY29tgh9zdGFn
ZWMucGFydG5lcmxpbmsuamhhbmNvY2suY29tghZzdGctdG1wLm1hbnVsaWZlaW0u
Y29tgihzdGcucmV3YXJkc2xpZmUuam9obmhhbmNvY2tpbnN1cmFuY2UuY29tgh5z
dGc2NC5qb2huaGFuY29ja2luc3VyYW5jZS5jb22CGHRlcm1saWZlLmpvaG5oYW5j
b2NrLmNvbYIhdGVybWxpZmUuam9obmhhbmNvY2tpbnN1cmFuY2UuY29tgh10ZXN0
LnBhcnRuZXJsaW5rLmpoYW5jb2NrLmNvbYIadGVzdC5yZWdpc3Rlci5qaGFuY29j
ay5jb22CEnRtcC5qaHNhbGVzaHViLmNvbYIXdG1wLm1hbnVsaWZlYmVybXVkYS5j
b22CIHVjaXRzLm1hbnVsaWZlaW52ZXN0bWVudG1nbXQuY29tghl2aWV3cG9pbnRz
Lm1hbnVsaWZlYW0uY29tghp3d3cuamhhbmNvY2tyZWFsZXN0YXRlLmNvbYIUd3d3
LmpoY2FsY3VsYXRvci5jb22CEXd3dy5qaGVraXRwZGYuY29tghd3d3cuamhmaXhl
ZHByb2R1Y3RzLmNvbYIXd3d3LmpobGlmZWluc3VyYW5jZS5jb22CEXd3dy5qaG1j
bGllbnQuY29tghB3d3cuamhtZ3JvdXAuY29tghN3d3cuamhwcm9wb3NhbHMuY29t
ghV3d3cuamhyZXdhcmRzbGlmZS5jb22CEnd3dy5qaHNhbGVzaHViLmNvbYISd3d3
Lmpoc2FsZXNuZXQuY29tghR3d3cuamhzZXJ2aWNlbmV0LmNvbYIcd3d3LmpvaG5o
YW5jb2NraW5zdXJhbmNlLmNvbYIbd3d3LmpvaG5oYW5jb2Nrdml0YWxpdHkuY29t
gh53d3cubWFudWxpZmVpbnZlc3RtZW50bWdtdC5jb22CHXd3dy5tYW51bGlmZWlu
dmVzdG1lbnRtZ3QuY29tgiF3d3cubWFudWxpZmVyZWFsZXN0YXRlZmluYW5jZS5j
b20wDQYJKoZIhvcNAQELBQADggEBAJp77UnYu12SpSPt46v6E85CNPTLbZEWq4ad
RlCa1VtDsS2I+tKzRuFgPKcDWLfxBQQhgHYYPLhpTq8LyWkyRYK4Nvu4bAV1+iLq
N85nPpQiPkUsq/nqQrvzcMx1k8ZucKKBMqERLXOn71qpWC1Ile3a6xZSP8r/3z6k
e7qUGLcxVqsfYSKCdN6WH6KeS0kS+71keJfKYV9f4QKhleEnM4wD1A/xTR8XVV8r
Nv7jhFg+OK+AP6JQc5V8ABD4/wDKJRXWi2QX1uY08w+qD9paL3WLp9i10GEQIvzF
cjnpZXefZTvRtjsKAEstk0s18XnAApnc637PywrJrulhPGl+ZYY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosPZqENv4S2OeHksAdyl
dRDbeyOTMXMynCYwQQLBWLQwMKa9WmIQVr1xwgrm/TTt1s7zrP7q1fapDd7VrniT
cywPtXrZq0LHMMQ27YXfIHgh0Q2MVssQD8/Yhn3zTih5guHtrhkRTOzwqi1vPRTf
zR8YngAS1cT+XQjStXUjG6P5qG7/jBLNkuW4syNcV1agm0r6Fl7DUN7pdT6VcQD8
CBqLBIadVUi0renBLc+lOJI/p4E2bgLF/SkWtueUrqib2NfpmSD1zykOh/CcjlVR
nGhRHYFuxdkyDVsMtSDuIfjs6QbTVk3WvkVHwubNDOmF6FGchlerjE41kJtnlqjq
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 91703543270962769930853518778068514168
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'johnhancock.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20547182749317644672681804264537765867311875749316987604304388538530002386911395204577323123121604173372574588431786602804980780819276427340803382443683003181137697701006144455893442187257259053757739568737520887341159128140733739212943544809130682604543309045573951596559167195762376433418017350509703522108065546484250923438527430545394900778419047468946812924721091629988483175357974693787433412623109295396749477629377800863139521032086020459066057766778751720482879076851901509045718308127406477732721098920835190233700407078161198624951931958349755400970065059352676022265533887403633582927404167556036599278209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a734f3b61f152f17c36b0b242e6a25e40ec93f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2533 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '11514.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '44charles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisor.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps-stage.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confluence.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-api.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresstrack.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finalexpense.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuw-apply.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight.manulifeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instant-apply.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh1.jhlifeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhancockrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhcalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhcustomerzoom.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhekitpdf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhfixedproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhlifeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhmclient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhmgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhrewardslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhrewardslife.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhsaleshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhsalesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhservicenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancockvitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life.customer.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ltc.customer.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ltcconnect.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ltcprovider.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maisonmanuvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifeinvestmentmgmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifeinvestmentmgt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mas.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgroupclient.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-stg-cps.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'od.jhekitpdf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.johnhancockrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerlink.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerlinkc.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pers.manulifebermuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-api.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quote-uat.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales-stg-tmp.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales-tmp.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.manulifebermuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simpleterm-uat.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.identity.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.johnhancockvitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.manulifebermuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.partnerlink.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.register.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagec.partnerlink.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.rewardslife.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg64.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'termlife.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'termlife.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.partnerlink.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.register.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmp.jhsaleshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmp.manulifebermuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits.manulifeinvestmentmgmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewpoints.manulifeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhancockrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhcalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhekitpdf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhfixedproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhlifeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhmclient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhmgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhproposals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhrewardslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhsaleshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhsalesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhservicenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockvitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifeinvestmentmgmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifeinvestmentmgt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manuliferealestatefinance.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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