johnhancock.com

- Manulife Financial Corporation -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 09:f5:00:27:07:c0:c5:ca:ea:6c:ab:79:8b:5f:92:4b was issued on by Sectigo Limited.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Manulife Financial Corporation

Organization: Manulife Financial Corporation
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 09:f5:00:27:07:c0:c5:ca:ea:6c:ab:79:8b:5f:92:4b
Serial Number (int): 13235167784703056556880318624327242315
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ee:7b:eb:08:0d:f1:79:fc:88:34:16:b4:17:fb:28:48:11:a6:7c:58
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 77:ab:7a:53:4b:15:5e:1d:82:86:94:11:33:3f:58:13:07:02:c0:d4
Fingerprint (sha256): 14:ac:e9:7a:31:83:93:5d:9a:f5:0c:92:5a:14:b7:9e:30:ee:49:f7:36:b4:3f:b4:11:6f:a3:0f:42:b6:3f:6a

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate johnhancock.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for johnhancock.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

johnhancock.com
11514.johnhancock.com
44charles.com
advisor.johnhancockinsurance.com
agent.johnhancockinsurance.com
agents.johnhancockinsurance.com
apps-stage.johnhancockinsurance.com
dapops.flidev.rps.jhancock.com
dapops.fliprd.rps.jhancock.com
dapops.fliqa.rps.jhancock.com
dapops.fliuat.rps.jhancock.com
dev-api.jhinvestments.com
expresstrack.johnhancockinsurance.com
fuw-apply.johnhancockinsurance.com
hancockrecreation.com
identity.jhancock.com
ids.johnhancockvitality.com
insight.manulifeam.com
insight.manulifeim.com
instant-apply.johnhancockinsurance.com
jh1.jhlifeinsurance.com
jhancockrealestate.com
jhcalculator.com
jhekitpdf.com
jhfixedproducts.com
jhlifeinsurance.com
jhmclient.com
jhmgroup.com
jhmyportfolio.com
jhproposals.com
jhrewardslife.com
jhrewardslife.johnhancockinsurance.com
jhriskquiz.com
jhsaleshub.com
jhsalesnet.com
jhservicenet.com
johnhancockinsurance.com
johnhancockvitality.com
life.customer.johnhancock.com
ltc.customer.johnhancock.com
ltcconnect.johnhancockinsurance.com
ltcprovider.johnhancockinsurance.com
manulifeinvestmentmgmt.com
manulifeinvestmentmgt.com
manuliferealestatefinance.com
mgroupclient.jhancock.com
mi-stg-cps.jhinvestments.com
od.jhekitpdf.com
partnerlink.jhancock.com
partnerlinkc.jhancock.com
pers.manulifebermuda.com
policy.johnhancockvitality.com
prod-api.jhinvestments.com
qa.johnhancock.com
register.jhancock.com
sales-stg-tmp.johnhancockinsurance.com
sales.johnhancockinsurance.com
sales2.johnhancockinsurance.com
sales2.manulifebermuda.com
secure.johnhancockinsurance.com
simpleterm-uat.johnhancock.com
stage.identity.jhancock.com
stage.johnhancockvitality.com
stage.partnerlink.jhancock.com
stage.register.jhancock.com
stagec.partnerlink.jhancock.com
stg-tmp.manulifeim.com
stg.rewardslife.johnhancockinsurance.com
test.partnerlink.jhancock.com
test.register.jhancock.com
ucits.manulifeinvestmentmgmt.com
viewpoints.manulifeam.com
www.hancockrecreation.com
www.jhancockrealestate.com
www.jhcalculator.com
www.jhekitpdf.com
www.jhfixedproducts.com
www.jhlifeinsurance.com
www.jhmclient.com
www.jhmgroup.com
www.jhmyportfolio.com
www.jhproposals.com
www.jhrewardslife.com
www.jhriskquiz.com
www.jhsaleshub.com
www.jhsalesnet.com
www.jhservicenet.com
www.johnhancockinsurance.com
www.johnhancockvitality.com
www.manulifeinvestmentmgmt.com
www.manulifeinvestmentmgt.com
www.manuliferealestatefinance.com

Other certificates including the domain name johnhancock.com

(limited to 100 certificates)
johnhancockinsurance.com
stage.identity.jhancock.com
manulife.com
rps.jhancock.com
manulife.com
uat.igpclaimreporting.jhancock.com
qa.johnhancock.com
johnhancock.com
johnhancock.com
onboarding.retirement.johnhancock.com
johnhancock.com
www.jhinvestments.com
stg.johnhancock.com
myplanuat.johnhancock.com
www.jhinvestments.com
qr.retirement.johnhancock.com
dev-tmp.jhinvestments.com
johnhancock.com
www.jhinvestments.com
manulife.com
johnhancock.com
advisorfeedbackhub.johnhancock.com
manulife.com
johnhancock.com
johnhancock.com
crverifyidentity-dev.johnhancock.com
myplanuat.johnhancock.com
www.jhinvestments.com
johnhancock.com
img.retirement.johnhancock.com
johnhancock.com
rps.jhancock.com
manulife.com
johnhancock.com
manulife.com
instant-apply.johnhancockinsurance.com
manulife.com
manulife.com
rps.jhancock.com
instant-apply.johnhancockinsurance.com
qr.myplan.johnhancock.com
manulife.com
digital-uat.customer.johnhancock.com
myplanuat.johnhancock.com
manulife.com
www.jhinvestments.com
digital-uat.customer.johnhancock.com
personalizedretirementadvice.johnhancock.com
rps.jhancock.com
www.jhinvestments.com
johnhancock.com
secure.johnhancock.com
manulife.com
johnhancock.com
johnhancock.com
www.jhinvestments.com
ww4.johnhancock.com
johnhancock.com
johnhancock.com
manulife.com
preferences.johnhancock.com
qr.myplan.johnhancock.com
img.retirement.johnhancock.com
johnhancock.com
manulife.com
jhshsm.johnhancock.com
qr.myplan.johnhancock.com
johnhancock.com
ww4.johnhancock.com
quote-uat.johnhancock.com
stg.johnhancock.com
johnhancock.com
digital.customer.johnhancock.com
johnhancock.com
johnhancockinsurance.com
johnhancock.com
retirementinfo.johnhancock.com
jhaconnect.jhannuities.com
johnhancock.com
johnhancock.com
onboarding.retirement.johnhancock.com
protect.johnhancock.com
jhshsm.johnhancock.com
rps.jhancock.com
qr.retirement.johnhancock.com
manulife.com
johnhancock.com
newonboardingaugust2023.retirement.johnhancock.com
johnhancock.com
rps.jhancock.com
manulife.com
johnhancock.com
manulife.com
johnhancock.com
finapp.johnhancock.com
johnhancock.com
manulife.com
manulife.com
preferencesstg.johnhancock.com
johnhancock.com

Certificate

The complete raw certificate details for johnhancock.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37a4mOW63LddCbmuSrNx
NBqPYMuZ2wu+brIwiwSY7TCOEzguyhQXPU5FfIi63H+tZnSSPyUCAw7d6xUkxpfg
k7Y/y2/MPxAPDM3uElg1dFPNSOxgpWaWkzkqYaPEZ1JiNCMM4mE8Eb8DczpJbmYd
IiPkAcquq1Wr8s0rVRufp6fnvSoQJVahEqAOS5OMCQ1KYCwqJiCsxM9gn30TQP6D
uu49Q39vpG/UDjv70qNitpUrvXZWCt9WzMMzKsKtqKhVKHQhc6hosTng4OcRWGvq
CXehaK7pgjbVteX2UM+ToeEQKK/s2TMEopBcfNVT1nLBxCsqdW2VS0GmsAqJB0lS
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13235167784703056556880318624327242315
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'johnhancock.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28241245131662056579545392841382880606812879815665760547915407061251056194087818168349504781168646725858315017716971752490198499766361491348716352638691599381049366029990487638478924585046194503210456756685653879867815653969645921717781933892377985492974404208810575846803046580852326234821413747852280869286107994368587406451723917184683846201184345357366695758627057870100255035795701953855775741841700424852250589751269404475530422234557371394826328413668752640442083993202746097045314677475942302559546149191887642704214761238346923740934274840661895575938199724102390541354573458733513454299656838286543078117921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee7beb080df179fc883416b417fb284811a67c58
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2458 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '11514.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '44charles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisor.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agents.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps-stage.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dapops.flidev.rps.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dapops.fliprd.rps.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dapops.fliqa.rps.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dapops.fliuat.rps.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-api.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresstrack.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuw-apply.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hancockrecreation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ids.johnhancockvitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight.manulifeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instant-apply.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh1.jhlifeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhancockrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhcalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhekitpdf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhfixedproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhlifeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhmclient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhmgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhmyportfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhproposals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhrewardslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhrewardslife.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhriskquiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhsaleshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhsalesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhservicenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancockvitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life.customer.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ltc.customer.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ltcconnect.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ltcprovider.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifeinvestmentmgmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifeinvestmentmgt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgroupclient.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-stg-cps.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'od.jhekitpdf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerlink.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerlinkc.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pers.manulifebermuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policy.johnhancockvitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-api.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales-stg-tmp.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales2.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales2.manulifebermuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simpleterm-uat.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.identity.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.johnhancockvitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.partnerlink.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.register.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagec.partnerlink.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.rewardslife.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.partnerlink.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.register.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits.manulifeinvestmentmgmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewpoints.manulifeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hancockrecreation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhancockrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhcalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhekitpdf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhfixedproducts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhlifeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhmclient.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhmgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhmyportfolio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhproposals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhrewardslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhriskquiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhsaleshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhsalesnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhservicenet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockvitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifeinvestmentmgmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifeinvestmentmgt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manuliferealestatefinance.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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