jhappsstaging.jhfnjunction.com
- Manulife Financial -
Issued by Sectigo RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number 1d:44:7e:f9:5b:cf:30:40:7c:48:57:af:7b:08:e7:13 was issued on by Sectigo Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Manulife Financial
Organization:
Manulife Financial
Organization unit: US Segment
Organization unit: US Segment
State / Province:
Ontario
Locality: Toronto
Country: CA
Locality: Toronto
Country: CA
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 1d:44:7e:f9:5b:cf:30:40:7c:48:57:af:7b:08:e7:13Serial Number (int): 38903263403979066156784888868344751891
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: 9c:a8:66:48:ff:38:de:89:28:78:1c:4d:39:ea:3b:4d:7b:89:67:c2
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb
Fingerprint (sha1): d2:81:40:4a:f5:61:b2:da:5f:2e:b8:2e:dd:11:f2:18:e1:6b:41:27
Fingerprint (sha256): 1a:63:d1:9c:65:b7:8a:53:ea:d4:58:1c:01:33:36:37:34:6f:4a:00:58:67:11:de:e6:b2:df:ce:81:4a:58:98
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate jhappsstaging.jhfnjunction.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for jhappsstaging.jhfnjunction.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
jhappsstaging.jhfnjunction.com
www.jhappsstaging.jhfnjunction.com
www.jhappsstaging.jhfnjunction.com
Other certificates including the domain name jhfnjunction.com
(limited to 100 certificates)
johnhancock.com
jhapps.jhfnjunction.com
myplanuat.johnhancock.com
johnhancock.com
johnhancock.com
myplanuat.johnhancock.com
eai.staging.jhfnjunction.com
bob.dev.jhfnjunction.com
johnhancock.com
bob.jhfnjunction.com
johnhancock.com
www.jhfnjunction.com
johnhancock.com
jhfnjunction.com
johnhancock.com
johnhancock.com
johnhancock.com
jhappsstaginghp.jhfnjunction.com
johnhancock.com
johnhancock.com
jhlink.jhfnjunction.com
bob.stage.jhfnjunction.com
jherppx7.jhancock.com
johnhancock.com
myplan.johnhancock.com
jhappshp.jhfnjunction.com
johnhancock.com
efactfinder.jhfnjunction.com
jhappsstaging.jhfnjunction.com
authoring.jhfnjunction.com
jhappslb.jhfnjunction.com
jhappslb.jhfnjunction.com
johnhancock.com
jhapps.jhfnjunction.com
johnhancock.com
johnhancock.com
stage.inforceillustrationportal.com
johnhancock.com
johnhancock.com
johnhancock.com
www.jhfnjunction.com
johnhancock.com
johnhancock.com
myplanuat.johnhancock.com
myplanuat.johnhancock.com
johnhancock.com
dev1.jhfnjunction.com
staging.jhfnjunction.com
jhappsstaginglb.jhfnjunction.com
johnhancock.com
staging.jhfnjunction.com
myplanuat.johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
myplan.johnhancock.com
jhappsstaging.jhfnjunction.com
johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
myplanuat.johnhancock.com
bob.dev.jhfnjunction.com
jhappsstaginghp.jhfnjunction.com
jhfnjunction.com
jhapps.jhfnjunction.com
johnhancock.com
johnhancock.com
johnhancock.com
jhfnjunction.com
johnhancock.com
www.inforceillustrationportal.com
johnhancock.com
systest2.jhfnjunction.com
dev1.jhfnjunction.com
johnhancock.com
jhfnjunction.com
authoring.jhfnjunction.com
johnhancock.com
bob.dev.jhfnjunction.com
johnhancock.com
johnhancock.com
authoring.jhfnjunction.com
b04erpd02a3.dev.manulifeusa.com
johnhancock.com
staging.jhfnjunction.com
eai.staging.jhfnjunction.com
johnhancock.com
johnhancock.com
johnhancock.com
jhappslb.jhfnjunction.com
johnhancock.com
jhappsstaginghp.jhfnjunction.com
jhappslb.jhfnjunction.com
bcs.dev.jhfnjunction.com
stage.inforceillustrationportal.com
johnhancock.com
jhapps.jhfnjunction.com
myplanuat.johnhancock.com
johnhancock.com
johnhancock.com
myplanuat.johnhancock.com
eai.staging.jhfnjunction.com
bob.dev.jhfnjunction.com
johnhancock.com
bob.jhfnjunction.com
johnhancock.com
www.jhfnjunction.com
johnhancock.com
jhfnjunction.com
johnhancock.com
johnhancock.com
johnhancock.com
jhappsstaginghp.jhfnjunction.com
johnhancock.com
johnhancock.com
jhlink.jhfnjunction.com
bob.stage.jhfnjunction.com
jherppx7.jhancock.com
johnhancock.com
myplan.johnhancock.com
jhappshp.jhfnjunction.com
johnhancock.com
efactfinder.jhfnjunction.com
jhappsstaging.jhfnjunction.com
authoring.jhfnjunction.com
jhappslb.jhfnjunction.com
jhappslb.jhfnjunction.com
johnhancock.com
jhapps.jhfnjunction.com
johnhancock.com
johnhancock.com
stage.inforceillustrationportal.com
johnhancock.com
johnhancock.com
johnhancock.com
www.jhfnjunction.com
johnhancock.com
johnhancock.com
myplanuat.johnhancock.com
myplanuat.johnhancock.com
johnhancock.com
dev1.jhfnjunction.com
staging.jhfnjunction.com
jhappsstaginglb.jhfnjunction.com
johnhancock.com
staging.jhfnjunction.com
myplanuat.johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
myplan.johnhancock.com
jhappsstaging.jhfnjunction.com
johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
myplanuat.johnhancock.com
bob.dev.jhfnjunction.com
jhappsstaginghp.jhfnjunction.com
jhfnjunction.com
jhapps.jhfnjunction.com
johnhancock.com
johnhancock.com
johnhancock.com
jhfnjunction.com
johnhancock.com
www.inforceillustrationportal.com
johnhancock.com
systest2.jhfnjunction.com
dev1.jhfnjunction.com
johnhancock.com
jhfnjunction.com
authoring.jhfnjunction.com
johnhancock.com
bob.dev.jhfnjunction.com
johnhancock.com
johnhancock.com
authoring.jhfnjunction.com
b04erpd02a3.dev.manulifeusa.com
johnhancock.com
staging.jhfnjunction.com
eai.staging.jhfnjunction.com
johnhancock.com
johnhancock.com
johnhancock.com
jhappslb.jhfnjunction.com
johnhancock.com
jhappsstaginghp.jhfnjunction.com
jhappslb.jhfnjunction.com
bcs.dev.jhfnjunction.com
stage.inforceillustrationportal.com
johnhancock.com
Certificate
The complete raw certificate details for jhappsstaging.jhfnjunction.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGvjCCBaagAwIBAgIQHUR++VvPMEB8SFevewjnEzANBgkqhkiG9w0BAQsFADCB lTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMT0wOwYDVQQD EzRTZWN0aWdvIFJTQSBPcmdhbml6YXRpb24gVmFsaWRhdGlvbiBTZWN1cmUgU2Vy dmVyIENBMB4XDTIxMDQwMjAwMDAwMFoXDTIyMDQwMjIzNTk1OVowgYwxCzAJBgNV BAYTAkNBMRAwDgYDVQQIEwdPbnRhcmlvMRAwDgYDVQQHEwdUb3JvbnRvMRswGQYD VQQKExJNYW51bGlmZSBGaW5hbmNpYWwxEzARBgNVBAsTClVTIFNlZ21lbnQxJzAl BgNVBAMTHmpoYXBwc3N0YWdpbmcuamhmbmp1bmN0aW9uLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAMcD46XAuiNWY49HoV6WDa2xZtFCM7SZZmOA c90ih2p88bwHIzcExgY0QHpt65iUPFag3TH1f1Wcojwg4J5uZRwMbsDZ55Zu3BRn KsSer8B66gTGZSO5CVtGurPznladr3z6SG6TcjKKFEkqIRCfL1d+kKGhdIOV+/Ir yqEMlIxin5FFL/8pVRVTLHS0SRjo7Cv+83SlFXZr5YfBtuVmSZ8eyF/2LWi0QdVq LUrAcYBb675tadc/HdIowVYYOrfDegGj79v0NlK206Q6872S5zrTwiXF6//6YfKP 7Q+TM0JgPr+D5gl/RfAGuTFIpFKd2TqxUFKYERtCgXiVA4hoHycCAwEAAaOCAw8w ggMLMB8GA1UdIwQYMBaAFBfZ1iUnZ/kxwklD2TA2RIxsqU/rMB0GA1UdDgQWBBSc qGZI/zjeiSh4HE056jtNe4lnwjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIw ADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSgYDVR0gBEMwQTA1Bgwr BgEEAbIxAQIBAwQwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9D UFMwCAYGZ4EMAQICMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9jcmwuc2VjdGln by5jb20vU2VjdGlnb1JTQU9yZ2FuaXphdGlvblZhbGlkYXRpb25TZWN1cmVTZXJ2 ZXJDQS5jcmwwgYoGCCsGAQUFBwEBBH4wfDBVBggrBgEFBQcwAoZJaHR0cDovL2Ny dC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBT3JnYW5pemF0aW9uVmFsaWRhdGlvblNl Y3VyZVNlcnZlckNBLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGln by5jb20wTQYDVR0RBEYwRIIeamhhcHBzc3RhZ2luZy5qaGZuanVuY3Rpb24uY29t giJ3d3cuamhhcHBzc3RhZ2luZy5qaGZuanVuY3Rpb24uY29tMIIBBgYKKwYBBAHW eQIEAgSB9wSB9ADyAHcARqVV63X6kSAwtaKJafTzfREsQXS+/Um4havy/HD+bUcA AAF4kF9p/QAABAMASDBGAiEAr3MQD0F4puOoHJgt6DjZt5zMfn4tXnodW6JtrifQ XOwCIQCj5rr5qjvHg85Cqu0m1rw1FOUbIFr5wEwLE2VBXsLtQAB3AN+lXqtogk8f bK3uuF9OPlrqzaISpGpejjsSwCBEXCpzAAABeJBfaboAAAQDAEgwRgIhAIMkaV3O BBa0TUwOR6+FcLEtD3PeFruY2fResIUpIG71AiEA8AWnBnO5oaUNSosp9jDl1ZrF C5q9ewdBanzO+M1tIRUwDQYJKoZIhvcNAQELBQADggEBACBTpniWf2Z6/WtFBYix y0/Vh5IXFb6ij7LEFZI+9gM3MB1XC0rwyv0rLDCmomD6Mm5/gipbP6JrBCEiVtyu ZzSJW0rbB/qeCL0X5OZBpKYeKCN8P7OZqiz011W8XJiaeQ+INw/ZUUpezOkIUgI8 7SnnMandirOdNRkrFLv36Hd7txo0uDN4RC/B/XZFeqfVzcku8Q5uzJc9jA2VzuvV Bt2TXahRexh0iTcaxEfvJiaLvk1/UXs+LaDj1KPvo/i6MTgc2shzSG62vPjiSFdV Q0vSWF8K90IH6yr5zmjzV1SwjtwIFrj3uyKG5tWZRH0eIkRxEeKa36v3EQ9akTsn 6vc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwPjpcC6I1Zjj0ehXpYN rbFm0UIztJlmY4Bz3SKHanzxvAcjNwTGBjRAem3rmJQ8VqDdMfV/VZyiPCDgnm5l HAxuwNnnlm7cFGcqxJ6vwHrqBMZlI7kJW0a6s/OeVp2vfPpIbpNyMooUSSohEJ8v V36QoaF0g5X78ivKoQyUjGKfkUUv/ylVFVMsdLRJGOjsK/7zdKUVdmvlh8G25WZJ nx7IX/YtaLRB1WotSsBxgFvrvm1p1z8d0ijBVhg6t8N6AaPv2/Q2UrbTpDrzvZLn OtPCJcXr//ph8o/tD5MzQmA+v4PmCX9F8Aa5MUikUp3ZOrFQUpgRG0KBeJUDiGgf JwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 38903263403979066156784888868344751891 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toronto' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US Segment' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jhappsstaging.jhfnjunction.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25123340547883316666412986940643148531209294117172813639260263314826903533696948154464487479210414649912234544149988381486240091066162966358565112292411906887134776546445181060145829594828645551753763574084327259085063314177795491161258156660511229271236958285933373941393316200329067439767045030975229224839768078693786068454307338559355390090330202059168232760125749826742202777780843034671244336743268105728743795290455928196257749120400815020408058185590480898171986081270790442952397503054212448575379121962286638614511496595498423126480279319280270730239815395923533636712862292669811587937655039863730450472743 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9ca86648ff38de8928781c4d39ea3b4d7b8967c2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhappsstaging.jhfnjunction.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhappsstaging.jhfnjunction.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f200770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000178905f69fd0000040300483046022100af73100f4178a6e3a81c982de838d9b79ccc7e7e2d5e7a1d5ba26dae27d05cec022100a3e6baf9aa3bc783ce42aaed26d6bc3514e51b205af9c04c0b1365415ec2ed40007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000178905f69ba00000403004830460221008324695dce0416b44d4c0e47af8570b12d0f73de16bb98d9f45eb08529206ef5022100f005a70673b9a1a50d4a8b29f630e5d59ac50b9abd7b07416a7ccef8cd6d2115 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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