www.jhinvestments.com

- Manulife Financial -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 89:d1:b4:01:42:fd:77:83:07:c5:c4:5a:42:41:95:16 was issued on by Sectigo Limited.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Manulife Financial

Organization: Manulife Financial
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 89:d1:b4:01:42:fd:77:83:07:c5:c4:5a:42:41:95:16
Serial Number (int): 183193076399656506636391369571372733718
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 7f:be:d6:b8:ad:42:0a:d5:d8:85:95:a1:1a:65:b9:9f:0d:1f:98:7f
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): d9:de:de:01:cc:21:ab:5b:84:1b:fb:ee:b2:88:4c:e6:62:b3:39:43
Fingerprint (sha256): 1e:23:36:22:49:ce:4b:b7:4e:dc:e5:fa:3e:4d:58:f5:98:2a:20:88:f6:06:43:1c:cd:09:cd:80:59:fd:4c:0a

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate www.jhinvestments.com

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jhinvestments.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.jhinvestments.com
author-dev-tmp.jhinvestments.com
author-dev.jhinvestments.com
author-qa-tmp.jhinvestments.com
author-qa.jhinvestments.com
author-stg-tmp.jhinvestments.com
author-stg.jhinvestments.com
dev-cps.jhinvestments.com
dev-nav.manulifeim.com
dev-retirement.johnhancock.com
dev-tmp.jhinvestments.com
dev-tmp.manulifeim.com
dev-tmp.manulifeprivatewealth.com
dev-tmp.manuliferealestatefinance.com
dev.jhinvestments.com
dev.manulifeim.com
dev.manulifeprivatewealth.com
dev.manuliferealestatefinance.com
dev.wam-advisor-entitlements.manulife.io
insight-stg.manulifeim.com
insight-stg64.manulifeam.com
insight.manulifeam.com
insight.manulifeim.com
mi-dev-tmp.jhinvestments.com
mi-dev.jhinvestments.com
mi-qa-tmp.jhinvestments.com
mi-qa.jhinvestments.com
mi-stg-tmp.jhinvestments.com
mi-stg.jhinvestments.com
nav.manulifeim.com
pages.jhinvestments.com
preview-dev-tmp.jhinvestments.com
preview-dev.jhinvestments.com
preview-qa-tmp.jhinvestments.com
preview-qa.jhinvestments.com
preview-stg-tmp.jhinvestments.com
preview-stg.jhinvestments.com
qa-cps.jhinvestments.com
qa-nav.manulifeim.com
qa-retirement.johnhancock.com
qa-tmp.jhinvestments.com
qa-tmp.manulifeim.com
qa-tmp.manulifeprivatewealth.com
qa-tmp.manuliferealestatefinance.com
qa.jhinvestments.com
qa.manulifeim.com
qa.manulifeprivatewealth.com
qa.manuliferealestatefinance.com
qa.wam-advisor-entitlements.manulife.io
retirement-dev-cps.johnhancock.com
retirement-dev-tmp.johnhancock.com
retirement-qa-cps.johnhancock.com
retirement-qa-tmp.johnhancock.com
retirement-stg-cps.johnhancock.com
retirement-stg-tmp.johnhancock.com
stage-ucits.manulifeinvestmentmgmt.com
stage.manulifeinvestmentmgmt.com
stage.manulifeinvestmentmgt.com
stg-cps.jhinvestments.com
stg-nav.manulifeim.com
stg-retail.manulifeinvestmentmgmt.com
stg-retirement.johnhancock.com
stg-tmp.jhinvestments.com
stg-tmp.manulifeim.com
stg-tmp.manulifeprivatewealth.com
stg-tmp.manuliferealestatefinance.com
stg.jhinvestments.com
stg.manulifeim.com
stg.manulifeprivatewealth.com
stg.manuliferealestatefinance.com
ucits-dev-tmp.manulifeim.com
ucits-dev.manulifeim.com
ucits-qa-tmp.manulifeim.com
ucits-qa.manulifeim.com
ucits-stg-tmp.manulifeim.com
ucits-stg.manulifeim.com
viewpoints-stg.manulifeam.com
viewpoints.manulifeam.com

Other certificates including the domain name jhinvestments.com

(limited to 100 certificates)
jira.jhinvestments.com
visit.jhinvestments.com
manulife.com
api-sys1.jhinvestments.com
johnhancock.com
johnhancock.com
visit.jhinvestments.com
www.jhinvestments.com
www.jhinvestments.com
dev-tmp.jhinvestments.com
www.jhinvestments.com
manulife.com
jhinvestments.com
johnhancock.com
manulife.com
author.jhinvestments.com
johnhancock.com
nasbaccess01.manulife.com
pages.jhinvestments.com
www.jhinvestments.com
jhinvestments.com
pages.jhinvestments.com
mi-dev64.jhinvestments.com
rps.jhancock.com
manulife.com
johnhancock.com
jhinvestments.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
www.jhinvestments.com
jhinvestments.com
www.jhinvestments.com
johnhancock.com
manulife.com
johnhancock.com
www.jhinvestments.com
manulife.com
pages.jhinvestments.com
johnhancock.com
johnhancock.com
ucits-stg-tmp.jhinvestments.com
manulife.com
johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
manulife.com
johnhancock.com
manulife.com
manulife.com
johnhancock.com
manulife.com
johnhancock.com
johnhancock.com
manulife.com
www.jhinvestments.com
johnhancock.com
www.jhinvestments.com
www.jhinvestments.com
johnhancock.com
visit.jhinvestments.com
manulife.com
johnhancock.com
manulife.com
stage-64.jhinvestments.com
mi-qa64.jhinvestments.com
www.jhinvestments.com
manulife.com
jira.jhinvestments.com
pages.jhinvestments.com
mi-dev64.jhinvestments.com
www.jhinvestments.com
www.jhinvestments.com
johnhancock.com
www.jhinvestments.com
www.jhinvestments.com
www.jhinvestments.com
manulife.com
manulife.com
www.jhinvestments.com
johnhancock.com
manulife.com
johnhancock.com
johnhancock.com
manulife.com
kcure-qa.jhinvestments.com
www.jhinvestments.com
johnhancockinvestments.com
johnhancock.com
qr.jhinvestments.com
johnhancock.com
johnhancock.com
esg.jhinvestments.com
johnhancock.com
manulife.com

Certificate

The complete raw certificate details for www.jhinvestments.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fb6HPdlOrg/3s+uqqq7
3GZPuKguesd2w63GsC05DPpplfLdvpTQMTnv0mrNQ8v9tRdOzIrcuyv1AioelMGd
xQFAtD3YVw0mWxBXTwkp9/4eLSWD9GAPyvgHxBD+jKOEbFkcgXZnl4ZsbNX1heHp
sOMsUye3wSKSEckrpTGxDBIdBLdfNmzZr8OsDXoXjiHKI6S6eECmtCacHLqTdjB4
7FQbKMpiGo5rf2fFaUmX5uUmFHA7tls/RGfTZeAFR/KJSsSdXinSX0v4iG6vz/4l
8zgGlx/Zdleb9wTLUCCnFUfNi+MCnglOuNAGqWNVQoA7DEoJsTw5t0tU1eYNm7Qp
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 183193076399656506636391369571372733718
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jhinvestments.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29030360737276901170375125595569926240126914794712445074867045074593516227877728043026662545523196923901790796408537426989309964240997111332401370830266891226826130637021312773316286231308150867737258290672440023435988697272331784616239461003613675997794120985787876487398213619001369312498763040982849823309229841657826990137169568229543336595870765132523178003964408009372682373957180378109611566477003977399839989216628435163591397300056515235470099605849438069821982112297229600536405162031302974425973026014215495646677872183728073449988016125273579143275456073129202160139714375709411355880925336564789304109491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7fbed6b8ad420ad5d88595a11a65b99f0d1f987f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2337 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-dev-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-dev.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-qa-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-qa.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-stg-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-stg.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-cps.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-nav.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-retirement.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-tmp.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-tmp.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wam-advisor-entitlements.manulife.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight-stg.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight-stg64.manulifeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight.manulifeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-dev-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-dev.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-qa-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-qa.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-stg-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-stg.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nav.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-dev-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-dev.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-qa-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-qa.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-stg-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-stg.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-cps.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-nav.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-retirement.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-tmp.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-tmp.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.wam-advisor-entitlements.manulife.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-dev-cps.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-dev-tmp.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-qa-cps.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-qa-tmp.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-stg-cps.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-stg-tmp.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-ucits.manulifeinvestmentmgmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.manulifeinvestmentmgmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.manulifeinvestmentmgt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-cps.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-nav.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-retail.manulifeinvestmentmgmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-retirement.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-dev-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-dev.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-qa-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-qa.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-stg-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-stg.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewpoints-stg.manulifeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewpoints.manulifeam.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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