rps.jhancock.com

- Manulife Financial Corporation -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number b5:33:89:6e:84:a2:f6:f7:7c:37:13:45:78:8a:b1:49 was issued on by Sectigo Limited.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Manulife Financial Corporation

Organization: Manulife Financial Corporation
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): b5:33:89:6e:84:a2:f6:f7:7c:37:13:45:78:8a:b1:49
Serial Number (int): 240857861823117659599215684397266809161
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 20:5b:1e:78:fa:fa:47:ca:e1:42:53:2c:d8:45:ff:64:4b:f0:92:42
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 6e:79:94:2e:43:27:ed:10:66:9d:ad:e0:b0:f0:f3:c8:62:65:92:36
Fingerprint (sha256): 19:a8:3e:2d:be:ba:4f:44:26:5a:91:86:e4:b7:db:b2:77:d0:1e:22:9c:24:0f:47:d2:dd:aa:c8:2a:68:21:81

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate rps.jhancock.com

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rps.jhancock.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rps.jhancock.com
44charles.com
944.rps.jhancock.com
azure.viewjhfunds.com
bco8.bcomplete.com
bco8uat.bcomplete.com
cdn.rps.jhancock.com
cdnuat.rps.jhancock.com
demos.retirement.jhancock.com
dev-retirement.johnhancock.com
documentgeneration.sandbox.jhancock.com
gb.apim.dev.manulife.com
gwam.pdfservice.dev.aks.manulife.com
jhefund.com
jhi-apim.dev.developer.manulife.com
jhi-apim.dev.management.manulife.com
jhi-apim.dev.manulife.com
jhi-apim.prod.developer.manulife.com
jhi-apim.prod.management.manulife.com
jhi-apim.prod.manulife.com
jhi-apim.test.developer.manulife.com
jhi-apim.test.management.manulife.com
jhi-apim.test.manulife.com
jhi-apim.uat.developer.manulife.com
jhi-apim.uat.management.manulife.com
jhi-apim.uat.manulife.com
jhnypensions.com
jhpensions.com
jhrpsiportal.com
johnhancockretirement.com
johnhancockretirementplanservices.com
manulifecentre.com
manulifeplace.com
onboarding.retirement.johnhancock.com
projdev.jhrpsiportal.com
projsit.jhrpsiportal.com
retirement.johnhancock.com
retirement.sponsor.manulife.com
rps-mstruat.rps.jhancock.com
rpts.rps.jhancock.com
rptsuat.rps.jhancock.com
stage.apply.johnhancock.com
test.jhrpsiportal.com
test.johnhancockretirementplanservices.com
uat.retirement.sponsor.manulife.com
viewjhfunds.com
www-east.viewjhfunds.com
www-west.viewjhfunds.com
www.44charles.com
www.jhefund.com
www.jhnypensions.com
www.jhpensions.com
www.jhrpsiportal.com
www.johnhancockretirementplanservices.com
www.manulifecentre.com
www.manulifeplace.com
www.viewjhfunds.com
www2.bcomplete.com
www2ca.bcomplete.com
www2cauat.bcomplete.com
www2cq.bcomplete.com
www2cquat.bcomplete.com
www2uat.bcomplete.com
wwwcd.bcomplete.com
wwwcduat.bcomplete.com

Other certificates including the domain name jhancock.com

(limited to 100 certificates)
nasbfepool02.mfcgd.com
stage.identity.jhancock.com
webvpn.jhancock.com
stage.jherpmx2.jhancock.com
caapiuat.rps.jhancock.com
octopus.jhancock.com
rps.jhancock.com
manulife.com
uat.igpclaimreporting.jhancock.com
qa.johnhancock.com
johnhancock.com
johnhancock.com
stg.johnhancock.com
stage.jherpmx3.jhancock.com
johnhancock.com
ltm-usc-int-a.jhancock.com
voltage-ps-0000.test.jhancock.com
johnhancock.com
voltage-pp-0000.test.jhancock.com
rps-dbwqa3tls.rps.jhancock.com
nasbaccess01.manulife.com
johnhancock.com
test.jherpdx3.jhancock.com
rps.jhancock.com
johnhancock.com
mwservicesuat.rps.jhancock.com
jherppx2.jhancock.com
teamcity.jhancock.com
lifeproservice-dev.jhancock.com
gatewayext.uat.jhancock.com
azaphnerpt01a1.mfcgd.com
www.igpinfo.com
manulife.com
rps.jhancock.com
rps-scom.rps.jhancock.com
apsbaccess01.manulife.com
vpnstg.jhancock.com
manulife.com
teamcity-test.jhancock.com
venintqa.rps.jhancock.com
rps.jhancock.com
jherpmx8.mod.manulifeusa.com
jhancock.com
johnhancock.com
test.jherpdx3.jhancock.com
usarw1.jhancock.com
demos.retirement.jhancock.com
johnhancock.com
manulife.com
johnhancock.com
johnhancock.com
jhc090-mqcsqs.jhancock.com
stg.johnhancock.com
johnhancock.com
jherppx2.jhancock.com
johnhancock.com
jhaconnect.jhannuities.com
johnhancock.com
johnhancock.com
cm2.rps.jhancock.com
larssvc.jhancock.com
test.jherpdx3.jhancock.com
enet-secure.jhancock.com
rps.jhancock.com
manulife.com
johnhancock.com
connect.jhancock.com
johnhancock.com
rps.jhancock.com
jherppx2.jhancock.com
manulife.com
johnhancock.com
test.jherpdx3.jhancock.com
emd.jhancock.com
johnhancock.com
johnhancock.com
manulife.com
jherppx9.jhancock.com
manulife.com
johnhancock.com
qa.manulifebermuda.com
stage.partnerlink.jhancock.com
ltm-usc-int-a.jhancock.com
citrixstore.jhancock.com
apsbfepool02.mfcgd.com
jherppx7.jhancock.com
anderppx01.jhancock.com
test.jherpdx3.jhancock.com
johnhancock.com
azaapnerpm01.mfcgd.com
azaphnerpt01a1.mfcgd.com
johnhancock.com
jherppx4.jhancock.com
boxi.jhancock.com
fastr-marsmobile.jhancock.com
johnhancock.com
partnerlinkc.jhancock.com
manulife.com
rps.jhancock.com
rps.jhancock.com

Certificate

The complete raw certificate details for rps.jhancock.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINojCCDIqgAwIBAgIRALUziW6Eovb3fDcTRXiKsUkwDQYJKoZIhvcNAQELBQAw
gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE
AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl
cnZlciBDQTAeFw0yMzExMjIwMDAwMDBaFw0yNDExMjEyMzU5NTlaMGMxCzAJBgNV
BAYTAkNBMRAwDgYDVQQIEwdPbnRhcmlvMScwJQYDVQQKEx5NYW51bGlmZSBGaW5h
bmNpYWwgQ29ycG9yYXRpb24xGTAXBgNVBAMTEHJwcy5qaGFuY29jay5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4eWkrKQqzXhlkQsaMeUYpJlFR
QMlrlLbxqlrPoPIE88uBZ5GUHkkP9cirQg3pVF8YjDzJGpGivISEIkYXzlEkHzXQ
4MBsXaVvenk+QzqyWgx82dd3XBNqfyeMx9rLhkzFXi4+fKDcHS0EgiTzqkP73KpC
6Un+93ON5mYnfP8xyreK/Br9/QbOWE5Knp1E/ovli/IdEM9L7jFvJmZaR8PJhYvp
5UdLQ+VIoTPqsjR1u8vLoSOYtv4mHsdvDCQWMlVwYYBCnzl3/XnNak4a8cWJA3DW
AZ30xKVNiDw0vrHj7tXSnEzTITU2CdJN2AjCiIAjJJKlBC9Eqa7/LVMPwtDtAgMB
AAGjggocMIIKGDAfBgNVHSMEGDAWgBQX2dYlJ2f5McJJQ9kwNkSMbKlP6zAdBgNV
HQ4EFgQUIFseePr6R8rhQlMs2EX/ZEvwkkIwDgYDVR0PAQH/BAQDAgWgMAwGA1Ud
EwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEoGA1UdIARD
MEEwNQYMKwYBBAGyMQECAQMEMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGln
by5jb20vQ1BTMAgGBmeBDAECAjBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3Js
LnNlY3RpZ28uY29tL1NlY3RpZ29SU0FPcmdhbml6YXRpb25WYWxpZGF0aW9uU2Vj
dXJlU2VydmVyQ0EuY3JsMIGKBggrBgEFBQcBAQR+MHwwVQYIKwYBBQUHMAKGSWh0
dHA6Ly9jcnQuc2VjdGlnby5jb20vU2VjdGlnb1JTQU9yZ2FuaXphdGlvblZhbGlk
YXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3Nw
LnNlY3RpZ28uY29tMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdwB2/4g/Crb7
lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYv4z8qTAAAEAwBIMEYCIQCzeduz
WdW+UG0W3KtE641BsUJptuw6YQ2QHTD4gp+GzwIhANDwSl+BC1RgFylcFTKPWfQC
TkzCnG7To7zYgwygiDBUAHYAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4
ZG4AAAGL+M/LjAAABAMARzBFAiEAq66XrhZzxkoK8i10lu7mQxiNbveeoozO5RW9
Um6EWFYCIB/DOpcrSqE2IGQO0wv2HN1Kszety9M1pJk77APePWgoAHYA7s3QZNXb
Gs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGL+M/KwAAABAMARzBFAiAVWGI/
B357mN0cbyKlKIoZvvVmYP5SfOkZHlVrxI5C4AIhAPajWPOEp/5Zf05n4eZU2lwC
D+7LINMRkb5t5HtCmUp3MIIG3wYDVR0RBIIG1jCCBtKCEHJwcy5qaGFuY29jay5j
b22CDTQ0Y2hhcmxlcy5jb22CFDk0NC5ycHMuamhhbmNvY2suY29tghVhenVyZS52
aWV3amhmdW5kcy5jb22CEmJjbzguYmNvbXBsZXRlLmNvbYIVYmNvOHVhdC5iY29t
cGxldGUuY29tghRjZG4ucnBzLmpoYW5jb2NrLmNvbYIXY2RudWF0LnJwcy5qaGFu
Y29jay5jb22CHWRlbW9zLnJldGlyZW1lbnQuamhhbmNvY2suY29tgh5kZXYtcmV0
aXJlbWVudC5qb2huaGFuY29jay5jb22CJ2RvY3VtZW50Z2VuZXJhdGlvbi5zYW5k
Ym94LmpoYW5jb2NrLmNvbYIYZ2IuYXBpbS5kZXYubWFudWxpZmUuY29tgiRnd2Ft
LnBkZnNlcnZpY2UuZGV2LmFrcy5tYW51bGlmZS5jb22CC2poZWZ1bmQuY29tgiNq
aGktYXBpbS5kZXYuZGV2ZWxvcGVyLm1hbnVsaWZlLmNvbYIkamhpLWFwaW0uZGV2
Lm1hbmFnZW1lbnQubWFudWxpZmUuY29tghlqaGktYXBpbS5kZXYubWFudWxpZmUu
Y29tgiRqaGktYXBpbS5wcm9kLmRldmVsb3Blci5tYW51bGlmZS5jb22CJWpoaS1h
cGltLnByb2QubWFuYWdlbWVudC5tYW51bGlmZS5jb22CGmpoaS1hcGltLnByb2Qu
bWFudWxpZmUuY29tgiRqaGktYXBpbS50ZXN0LmRldmVsb3Blci5tYW51bGlmZS5j
b22CJWpoaS1hcGltLnRlc3QubWFuYWdlbWVudC5tYW51bGlmZS5jb22CGmpoaS1h
cGltLnRlc3QubWFudWxpZmUuY29tgiNqaGktYXBpbS51YXQuZGV2ZWxvcGVyLm1h
bnVsaWZlLmNvbYIkamhpLWFwaW0udWF0Lm1hbmFnZW1lbnQubWFudWxpZmUuY29t
ghlqaGktYXBpbS51YXQubWFudWxpZmUuY29tghBqaG55cGVuc2lvbnMuY29tgg5q
aHBlbnNpb25zLmNvbYIQamhycHNpcG9ydGFsLmNvbYIZam9obmhhbmNvY2tyZXRp
cmVtZW50LmNvbYIlam9obmhhbmNvY2tyZXRpcmVtZW50cGxhbnNlcnZpY2VzLmNv
bYISbWFudWxpZmVjZW50cmUuY29tghFtYW51bGlmZXBsYWNlLmNvbYIlb25ib2Fy
ZGluZy5yZXRpcmVtZW50LmpvaG5oYW5jb2NrLmNvbYIYcHJvamRldi5qaHJwc2lw
b3J0YWwuY29tghhwcm9qc2l0LmpocnBzaXBvcnRhbC5jb22CGnJldGlyZW1lbnQu
am9obmhhbmNvY2suY29tgh9yZXRpcmVtZW50LnNwb25zb3IubWFudWxpZmUuY29t
ghxycHMtbXN0cnVhdC5ycHMuamhhbmNvY2suY29tghVycHRzLnJwcy5qaGFuY29j
ay5jb22CGHJwdHN1YXQucnBzLmpoYW5jb2NrLmNvbYIbc3RhZ2UuYXBwbHkuam9o
bmhhbmNvY2suY29tghV0ZXN0LmpocnBzaXBvcnRhbC5jb22CKnRlc3Quam9obmhh
bmNvY2tyZXRpcmVtZW50cGxhbnNlcnZpY2VzLmNvbYIjdWF0LnJldGlyZW1lbnQu
c3BvbnNvci5tYW51bGlmZS5jb22CD3ZpZXdqaGZ1bmRzLmNvbYIYd3d3LWVhc3Qu
dmlld2poZnVuZHMuY29tghh3d3ctd2VzdC52aWV3amhmdW5kcy5jb22CEXd3dy40
NGNoYXJsZXMuY29tgg93d3cuamhlZnVuZC5jb22CFHd3dy5qaG55cGVuc2lvbnMu
Y29tghJ3d3cuamhwZW5zaW9ucy5jb22CFHd3dy5qaHJwc2lwb3J0YWwuY29tgil3
d3cuam9obmhhbmNvY2tyZXRpcmVtZW50cGxhbnNlcnZpY2VzLmNvbYIWd3d3Lm1h
bnVsaWZlY2VudHJlLmNvbYIVd3d3Lm1hbnVsaWZlcGxhY2UuY29tghN3d3cudmll
d2poZnVuZHMuY29tghJ3d3cyLmJjb21wbGV0ZS5jb22CFHd3dzJjYS5iY29tcGxl
dGUuY29tghd3d3cyY2F1YXQuYmNvbXBsZXRlLmNvbYIUd3d3MmNxLmJjb21wbGV0
ZS5jb22CF3d3dzJjcXVhdC5iY29tcGxldGUuY29tghV3d3cydWF0LmJjb21wbGV0
ZS5jb22CE3d3d2NkLmJjb21wbGV0ZS5jb22CFnd3d2NkdWF0LmJjb21wbGV0ZS5j
b20wDQYJKoZIhvcNAQELBQADggEBACoa5ncyisiewWfHKegSC3FnLI26kHaDEpbQ
ZJgHAg1hK7K4xUZAtzvSn47Rt0HNUiOtHfeVwA6LNiJDQsVGerUdVhUArKJSDbc6
jkGm/O2QHwdva2gVarWZFiYTYq4F2STF+QoY0+wFYJZikuNZWphm8/cXW7BN39Lb
o5rse0+ubtMtTgJKXgJUzO6iAIIvXLWztjhVoDB6x4PBsfLabafLV3Jqc+9Y8blP
5JAi4xlTfLw/EAyq6lVCD95WM8K9YyM2LX+n/N62IAd3yZ6MLOuQZ0Z7GP5OYAKs
4DWjHBeam05CfjRVSkRUHjvpfgCxjbodRfA1oz/KVcQlDjL/VJI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+HlpKykKs14ZZELGjHlG
KSZRUUDJa5S28apaz6DyBPPLgWeRlB5JD/XIq0IN6VRfGIw8yRqRoryEhCJGF85R
JB810ODAbF2lb3p5PkM6sloMfNnXd1wTan8njMfay4ZMxV4uPnyg3B0tBIIk86pD
+9yqQulJ/vdzjeZmJ3z/Mcq3ivwa/f0GzlhOSp6dRP6L5YvyHRDPS+4xbyZmWkfD
yYWL6eVHS0PlSKEz6rI0dbvLy6EjmLb+Jh7HbwwkFjJVcGGAQp85d/15zWpOGvHF
iQNw1gGd9MSlTYg8NL6x4+7V0pxM0yE1NgnSTdgIwoiAIySSpQQvRKmu/y1TD8LQ
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 240857861823117659599215684397266809161
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rps.jhancock.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31366969535754243363278197083759079523478913895539548760538145516494851882860503947093555450004444832008545660216364779826690261387039549978793138597030966885599168554334903052445367850713627834650676045277136609333387842180200136140166313233648494034167057296628676808798490446137759201993548340723339020146024171117131019062214477328254041443208508842280817887770069646521149977837898299219722667675327545452791205582897739389264853498501938781882868138464171790650887185851478713561067367366747298198400668901522649133005989747809802931644092811640270465112826465677536759765496501315285731562411570231859279483117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							205b1e78fafa47cae142532cd845ff644bf09242
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1750 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rps.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '44charles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '944.rps.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azure.viewjhfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bco8.bcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bco8uat.bcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.rps.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdnuat.rps.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demos.retirement.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-retirement.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentgeneration.sandbox.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gb.apim.dev.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwam.pdfservice.dev.aks.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhefund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhi-apim.dev.developer.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhi-apim.dev.management.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhi-apim.dev.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhi-apim.prod.developer.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhi-apim.prod.management.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhi-apim.prod.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhi-apim.test.developer.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhi-apim.test.management.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhi-apim.test.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhi-apim.uat.developer.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhi-apim.uat.management.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhi-apim.uat.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhnypensions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhpensions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhrpsiportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancockretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancockretirementplanservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifecentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifeplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onboarding.retirement.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projdev.jhrpsiportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projsit.jhrpsiportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement.sponsor.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rps-mstruat.rps.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpts.rps.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rptsuat.rps.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.apply.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.jhrpsiportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.johnhancockretirementplanservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.retirement.sponsor.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewjhfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-east.viewjhfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-west.viewjhfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.44charles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhefund.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhnypensions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhpensions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhrpsiportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockretirementplanservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifecentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifeplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viewjhfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.bcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2ca.bcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2cauat.bcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2cq.bcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2cquat.bcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2uat.bcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcd.bcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcduat.bcomplete.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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