johnhancock.com

- Manulife Financial -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 48:3d:b9:54:6e:6c:b2:20:86:ae:73:f3:f0:8a:8c:d9 was issued on by Sectigo Limited.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Manulife Financial

Organization: Manulife Financial
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 48:3d:b9:54:6e:6c:b2:20:86:ae:73:f3:f0:8a:8c:d9
Serial Number (int): 96024904740001650341748177120174705881
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 20:be:c6:3b:99:5c:bd:a6:73:e3:fd:dd:75:87:91:86:f1:13:6a:e6
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): f7:c4:63:af:c4:44:9d:93:2b:45:2e:83:82:89:47:e2:d5:ac:9e:c4
Fingerprint (sha256): 1a:17:e3:6b:3f:e2:3d:8e:0e:2b:7d:7f:c7:47:6f:d2:9d:1f:9d:db:fe:a3:1b:84:de:18:df:01:c9:fb:e1:65

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate johnhancock.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for johnhancock.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

johnhancock.com
3061.johnhancock.com
707fifth.com
980howe.com
advisor-stg-tmp.johnhancockinsurance.com
apply.jhsimpleterm.com
apps.johnhancockinsurance.com
customer.johnhancock.com
dashboard.customer.johnhancock.com
dev.tmp.mysales.johnhancock.com
digital-uat.customer.johnhancock.com
digital.customer.johnhancock.com
docs.johnhancockinvestments.com
expresstrack-stg.johnhancockinsurance.com
failover-www.johnhancockvitality.com
hnrgmaps-dev.hnrg.com
jh401kadviser.com
jh401kadvisor.com
jhancock.com
jhancocknypensions.com
jhancockpensions.com
jhaspire.com
jhbusinessanalyzer.com
jhfundchanges.com
jhgoenroll.com
jhgroupannuities.com
jhlifeinsurance.com
jhsimpleterm.com
johnhancockaspire.com
johnhancockretirement.com
myjhplan.com
myplan.johnhancock.com
myplan1.johnhancock.com
myplanuat.johnhancock.com
mysales.johnhancock.com
pers-stg.manulifebermuda.com
pers-tst.manulifebermuda.com
quote.jhsimpleterm.com
registration-uat.johnhancock.com
registration.johnhancock.com
retirement-uat.customer.johnhancock.com
retirement.customer.johnhancock.com
sales-tst.manulifebermuda.com
stage.jhannuities.com
stg-tmp.jhsimpleterm.com
stg.jhaspire.com
stg.jhgroupannuities.com
stg.johnhancock.com
stg.johnhancockaspire.com
stg.johnhancockinsurance.com
stg.manulifebermuda.com
stg.mysales.johnhancock.com
www.707fifth.com
www.980howe.com
www.digital-uat.customer.johnhancock.com
www.digital.customer.johnhancock.com
www.hnrgmaps-dev.hnrg.com
www.jh401kadviser.com
www.jh401kadvisor.com
www.jhancock.com
www.jhancocknypensions.com
www.jhancockpensions.com
www.jhaspire.com
www.jhbusinessanalyzer.com
www.jhfundchanges.com
www.jhgoenroll.com
www.jhgroupannuities.com
www.jhsimpleterm.com
www.johnhancock.com
www.johnhancockaspire.com
www.johnhancockretirement.com
www.myjhplan.com
www.myplan.johnhancock.com
www.mysales.johnhancock.com
www.ps.jhancocknypensions.com
www.ps.jhancockpensions.com

Other certificates including the domain name johnhancock.com

(limited to 100 certificates)
johnhancockinsurance.com
stage.identity.jhancock.com
manulife.com
rps.jhancock.com
manulife.com
uat.igpclaimreporting.jhancock.com
qa.johnhancock.com
johnhancock.com
johnhancock.com
onboarding.retirement.johnhancock.com
johnhancock.com
www.jhinvestments.com
stg.johnhancock.com
myplanuat.johnhancock.com
www.jhinvestments.com
qr.retirement.johnhancock.com
dev-tmp.jhinvestments.com
johnhancock.com
www.jhinvestments.com
manulife.com
johnhancock.com
advisorfeedbackhub.johnhancock.com
manulife.com
johnhancock.com
johnhancock.com
crverifyidentity-dev.johnhancock.com
myplanuat.johnhancock.com
www.jhinvestments.com
johnhancock.com
img.retirement.johnhancock.com
johnhancock.com
rps.jhancock.com
manulife.com
johnhancock.com
manulife.com
instant-apply.johnhancockinsurance.com
manulife.com
manulife.com
rps.jhancock.com
instant-apply.johnhancockinsurance.com
qr.myplan.johnhancock.com
manulife.com
digital-uat.customer.johnhancock.com
myplanuat.johnhancock.com
manulife.com
www.jhinvestments.com
digital-uat.customer.johnhancock.com
personalizedretirementadvice.johnhancock.com
rps.jhancock.com
www.jhinvestments.com
johnhancock.com
secure.johnhancock.com
manulife.com
johnhancock.com
johnhancock.com
www.jhinvestments.com
manulife.com
ww4.johnhancock.com
johnhancock.com
johnhancock.com
manulife.com
preferences.johnhancock.com
qr.myplan.johnhancock.com
img.retirement.johnhancock.com
johnhancock.com
manulife.com
jhshsm.johnhancock.com
qr.myplan.johnhancock.com
johnhancock.com
ww4.johnhancock.com
quote-uat.johnhancock.com
stg.johnhancock.com
johnhancock.com
digital.customer.johnhancock.com
johnhancock.com
johnhancockinsurance.com
johnhancock.com
retirementinfo.johnhancock.com
jhaconnect.jhannuities.com
johnhancock.com
johnhancock.com
onboarding.retirement.johnhancock.com
protect.johnhancock.com
jhshsm.johnhancock.com
rps.jhancock.com
qr.retirement.johnhancock.com
manulife.com
johnhancock.com
newonboardingaugust2023.retirement.johnhancock.com
johnhancock.com
rps.jhancock.com
manulife.com
johnhancock.com
manulife.com
johnhancock.com
finapp.johnhancock.com
johnhancock.com
manulife.com
manulife.com
preferencesstg.johnhancock.com

Certificate

The complete raw certificate details for johnhancock.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkreHphXSMDB9zuYcHzJk
Xy7t+kQ3oI1VWgjOReefLlB06s+00E90FdD49eApjHFVMZxvOwcJTNZ3JLuf801+
ht3Wq+YHCuV/6WkezyCsbHEr9JXIk8djMkSeolR5qevqdpx47nXpHFxgzLAzgr2G
fBNp4BiNC+S6oeGOYOnC+XDe4tf+8QdsjaTvta4yFGeAuXt1tTd6wr4bto666qKZ
2B2bKUGVj2nSQ8VV7dvaRpG5kO6yV8DxEsu0tjOHhiL2V6dBMFvM2JRa656/pXTh
ol1rgxhuCYigI+gKAM0pRFLKUTXlUiEyL44aG7PgWwhFpVCZFvrmppMYQRw1aTGY
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 96024904740001650341748177120174705881
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'johnhancock.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18521294480945191539117066777574779845095771239086699748965399601196948771769864164924248884761795817703763491217537981327052024480388704694225311422782414101690409487260074988947733187120420842194362725939221334782786452771769796905180652175400627518775827057778502156856810283928322607012356558146607337529835354599978195579233498032923418259245055074932225000552142832040421793130631646366749524569905364626009807449148736049265903391676370571202652376324822109415064149409295403365302373399081304389581081800852051353176597943902638988947637561294024601118063573364904566391339823449655238440673509105091736606823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20bec63b995cbda673e3fddd75879186f1136ae6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1961 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3061.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '707fifth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '980howe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisor-stg-tmp.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.jhsimpleterm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.customer.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.tmp.mysales.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital-uat.customer.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.customer.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.johnhancockinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expresstrack-stg.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'failover-www.johnhancockvitality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnrgmaps-dev.hnrg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh401kadviser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh401kadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhancocknypensions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhancockpensions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhaspire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhbusinessanalyzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhfundchanges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhgoenroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhgroupannuities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhlifeinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhsimpleterm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancockaspire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancockretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myjhplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplan.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplan1.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplanuat.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysales.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pers-stg.manulifebermuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pers-tst.manulifebermuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quote.jhsimpleterm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration-uat.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-uat.customer.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement.customer.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales-tst.manulifebermuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.jhannuities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.jhsimpleterm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.jhaspire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.jhgroupannuities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.johnhancockaspire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.manulifebermuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mysales.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.707fifth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.980howe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digital-uat.customer.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digital.customer.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnrgmaps-dev.hnrg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jh401kadviser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jh401kadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhancocknypensions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhancockpensions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhaspire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhbusinessanalyzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhfundchanges.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhgoenroll.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhgroupannuities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhsimpleterm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockaspire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myjhplan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myplan.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysales.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.jhancocknypensions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ps.jhancockpensions.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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