www.jhinvestments.com

- Manulife Financial Corporation -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 8f:7a:5e:47:8e:2c:db:43:28:b5:e1:fd:02:18:33:bb was issued on by Sectigo Limited.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Manulife Financial Corporation

Organization: Manulife Financial Corporation
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 8f:7a:5e:47:8e:2c:db:43:28:b5:e1:fd:02:18:33:bb
Serial Number (int): 190714975829687600133532094398023087035
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 30:5d:01:a8:58:33:f6:bc:3e:72:f6:5f:a6:fa:30:dd:75:87:c2:d8
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 33:e5:1c:a1:93:ea:31:ca:e1:a6:ce:f0:22:d7:12:43:f3:2c:ad:b7
Fingerprint (sha256): 1f:38:a1:ac:c7:6c:fa:ab:93:25:2d:7b:62:61:d4:ed:d3:b5:12:4a:18:e6:af:bb:7a:35:cf:50:6b:89:54:a4

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate www.jhinvestments.com

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jhinvestments.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.jhinvestments.com
author-dev-tmp.jhinvestments.com
author-dev.jhinvestments.com
author-qa-tmp.jhinvestments.com
author-qa.jhinvestments.com
author-stg-tmp.jhinvestments.com
author-stg.jhinvestments.com
dev-cps.jhinvestments.com
dev-nav.manulifeim.com
dev-retirement.johnhancock.com
dev-tmp.jhinvestments.com
dev-tmp.manulifeim.com
dev-tmp.manulifeprivatewealth.com
dev-tmp.manuliferealestatefinance.com
dev.jhinvestments.com
dev.manulifeim.com
dev.manulifeprivatewealth.com
dev.manuliferealestatefinance.com
dev.manulifesecurities.ca
dev.wam-advisor-entitlements.manulife.io
insight-stg.manulifeim.com
insight-stg64.manulifeam.com
insight.manulifeam.com
insight.manulifeim.com
mi-dev-tmp.jhinvestments.com
mi-dev.jhinvestments.com
mi-qa-tmp.jhinvestments.com
mi-qa.jhinvestments.com
mi-stg-tmp.jhinvestments.com
mi-stg.jhinvestments.com
nav.manulifeim.com
pages.jhinvestments.com
preview-dev-tmp.jhinvestments.com
preview-dev.jhinvestments.com
preview-qa-tmp.jhinvestments.com
preview-qa.jhinvestments.com
preview-stg-tmp.jhinvestments.com
preview-stg.jhinvestments.com
qa-cps.jhinvestments.com
qa-nav.manulifeim.com
qa-retirement.johnhancock.com
qa-tmp.jhinvestments.com
qa-tmp.manulifeim.com
qa-tmp.manulifeprivatewealth.com
qa-tmp.manuliferealestatefinance.com
qa.jhinvestments.com
qa.manulifeim.com
qa.manulifeprivatewealth.com
qa.manuliferealestatefinance.com
qa.manulifesecurities.ca
qa.wam-advisor-entitlements.manulife.io
retirement-dev-cps.johnhancock.com
retirement-dev-tmp.johnhancock.com
retirement-qa-cps.johnhancock.com
retirement-qa-tmp.johnhancock.com
retirement-stg-cps.johnhancock.com
retirement-stg-tmp.johnhancock.com
stage-ucits.manulifeinvestmentmgmt.com
stage.manulifeinvestmentmgmt.com
stage.manulifeinvestmentmgt.com
stg-cps.jhinvestments.com
stg-nav.manulifeim.com
stg-retail.manulifeinvestmentmgmt.com
stg-retirement.johnhancock.com
stg-tmp.jhinvestments.com
stg-tmp.manulifeim.com
stg-tmp.manulifeprivatewealth.com
stg-tmp.manuliferealestatefinance.com
stg.jhinvestments.com
stg.manulifeim.com
stg.manulifeprivatewealth.com
stg.manuliferealestatefinance.com
stg.manulifesecurities.ca
ucits-dev-tmp.manulifeim.com
ucits-dev.manulifeim.com
ucits-qa-tmp.manulifeim.com
ucits-qa.manulifeim.com
ucits-stg-tmp.manulifeim.com
ucits-stg.manulifeim.com
viewpoints-stg.manulifeam.com
viewpoints.manulifeam.com

Other certificates including the domain name jhinvestments.com

(limited to 100 certificates)
jira.jhinvestments.com
visit.jhinvestments.com
manulife.com
api-sys1.jhinvestments.com
johnhancock.com
johnhancock.com
visit.jhinvestments.com
www.jhinvestments.com
www.jhinvestments.com
dev-tmp.jhinvestments.com
www.jhinvestments.com
manulife.com
jhinvestments.com
johnhancock.com
manulife.com
author.jhinvestments.com
johnhancock.com
nasbaccess01.manulife.com
pages.jhinvestments.com
www.jhinvestments.com
jhinvestments.com
pages.jhinvestments.com
mi-dev64.jhinvestments.com
rps.jhancock.com
manulife.com
johnhancock.com
jhinvestments.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
www.jhinvestments.com
jhinvestments.com
www.jhinvestments.com
johnhancock.com
manulife.com
johnhancock.com
www.jhinvestments.com
manulife.com
pages.jhinvestments.com
johnhancock.com
johnhancock.com
ucits-stg-tmp.jhinvestments.com
manulife.com
johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
manulife.com
johnhancock.com
manulife.com
manulife.com
johnhancock.com
manulife.com
johnhancock.com
johnhancock.com
manulife.com
www.jhinvestments.com
johnhancock.com
www.jhinvestments.com
www.jhinvestments.com
johnhancock.com
visit.jhinvestments.com
manulife.com
johnhancock.com
manulife.com
stage-64.jhinvestments.com
mi-qa64.jhinvestments.com
www.jhinvestments.com
manulife.com
jira.jhinvestments.com
pages.jhinvestments.com
mi-dev64.jhinvestments.com
www.jhinvestments.com
www.jhinvestments.com
johnhancock.com
www.jhinvestments.com
www.jhinvestments.com
www.jhinvestments.com
manulife.com
manulife.com
www.jhinvestments.com
johnhancock.com
manulife.com
johnhancock.com
johnhancock.com
manulife.com
kcure-qa.jhinvestments.com
www.jhinvestments.com
johnhancockinvestments.com
johnhancock.com
qr.jhinvestments.com
johnhancock.com
johnhancock.com
esg.jhinvestments.com
johnhancock.com
manulife.com

Certificate

The complete raw certificate details for www.jhinvestments.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQPzCCDyegAwIBAgIRAI96XkeOLNtDKLXh/QIYM7swDQYJKoZIhvcNAQELBQAw
gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE
AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl
cnZlciBDQTAeFw0yMzExMTYwMDAwMDBaFw0yNDExMTUyMzU5NTlaMGgxCzAJBgNV
BAYTAkNBMRAwDgYDVQQIEwdPbnRhcmlvMScwJQYDVQQKEx5NYW51bGlmZSBGaW5h
bmNpYWwgQ29ycG9yYXRpb24xHjAcBgNVBAMTFXd3dy5qaGludmVzdG1lbnRzLmNv
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKbmP+TKlCPJZTSiOb/M
vMgz2d+i+r/NLsBNXXSAn525NRZ8T783WEG3Who8gnB9M9ZwVXnKR/tqbA0SRLjP
QFdN89IEIsGtLuYuGWjFSQ/NwS+QHcFRRNatPqo7e8MkWzHgRS73nMZvg24URcnW
74OhXFEJXkDCQYkwGHNOrIVM+BDG8gLx2OPGEss6KoOEQsMZuGtHyW6cfa8Klpmo
YysHts2X3N5UDainHJksy0YJK/rRz5HdPCgURUpw6Et8c2U5p420WLvq5VB0DQcE
DFY2WUdhS6wJZtixd1Zwug++Z+SHaEcgiXebY17U8B2jvX4e/R1h+YRhGvoLwnu5
YP0CAwEAAaOCDLQwggywMB8GA1UdIwQYMBaAFBfZ1iUnZ/kxwklD2TA2RIxsqU/r
MB0GA1UdDgQWBBQwXQGoWDP2vD5y9l+m+jDddYfC2DAOBgNVHQ8BAf8EBAMCBaAw
DAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSgYD
VR0gBEMwQTA1BgwrBgEEAbIxAQIBAwQwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9z
ZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQICMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6
Ly9jcmwuc2VjdGlnby5jb20vU2VjdGlnb1JTQU9yZ2FuaXphdGlvblZhbGlkYXRp
b25TZWN1cmVTZXJ2ZXJDQS5jcmwwgYoGCCsGAQUFBwEBBH4wfDBVBggrBgEFBQcw
AoZJaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBT3JnYW5pemF0aW9u
VmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEFBQcwAYYXaHR0cDov
L29jc3Auc2VjdGlnby5jb20wggF8BgorBgEEAdZ5AgQCBIIBbASCAWgBZgB1AHb/
iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABi9XZUOQAAAQDAEYwRAIg
ZTQBMI7zd3HK1wRij58y4qmSInylheogQJoPQQtoZWQCIFi94NDmytiWVLCIMzSE
lRGTJ198Sbt34R1+W6685dmcAHUAPxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8o
hez4ZG4AAAGL1dlRBgAABAMARjBEAiAt+nD+N+mbSow1UaSEY2gT5CvH5tmDnOa2
tuiZ2m196QIgQLgmdjSS0TJM/d+lgqT7fllrd/8KJDWVSVv1D/3I/fAAdgDuzdBk
1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYvV2VFoAAAEAwBHMEUCIQDF
T9pRCEGTT+WDmopalEhHK0zYXfOg4gtZub/xNNzgFAIgRo1SFSlPOPX8KNJ57VdK
Ivskfg53KTw1iGtJhuJzyowwggl6BgNVHREEgglxMIIJbYIVd3d3LmpoaW52ZXN0
bWVudHMuY29tgiBhdXRob3ItZGV2LXRtcC5qaGludmVzdG1lbnRzLmNvbYIcYXV0
aG9yLWRldi5qaGludmVzdG1lbnRzLmNvbYIfYXV0aG9yLXFhLXRtcC5qaGludmVz
dG1lbnRzLmNvbYIbYXV0aG9yLXFhLmpoaW52ZXN0bWVudHMuY29tgiBhdXRob3It
c3RnLXRtcC5qaGludmVzdG1lbnRzLmNvbYIcYXV0aG9yLXN0Zy5qaGludmVzdG1l
bnRzLmNvbYIZZGV2LWNwcy5qaGludmVzdG1lbnRzLmNvbYIWZGV2LW5hdi5tYW51
bGlmZWltLmNvbYIeZGV2LXJldGlyZW1lbnQuam9obmhhbmNvY2suY29tghlkZXYt
dG1wLmpoaW52ZXN0bWVudHMuY29tghZkZXYtdG1wLm1hbnVsaWZlaW0uY29tgiFk
ZXYtdG1wLm1hbnVsaWZlcHJpdmF0ZXdlYWx0aC5jb22CJWRldi10bXAubWFudWxp
ZmVyZWFsZXN0YXRlZmluYW5jZS5jb22CFWRldi5qaGludmVzdG1lbnRzLmNvbYIS
ZGV2Lm1hbnVsaWZlaW0uY29tgh1kZXYubWFudWxpZmVwcml2YXRld2VhbHRoLmNv
bYIhZGV2Lm1hbnVsaWZlcmVhbGVzdGF0ZWZpbmFuY2UuY29tghlkZXYubWFudWxp
ZmVzZWN1cml0aWVzLmNhgihkZXYud2FtLWFkdmlzb3ItZW50aXRsZW1lbnRzLm1h
bnVsaWZlLmlvghppbnNpZ2h0LXN0Zy5tYW51bGlmZWltLmNvbYIcaW5zaWdodC1z
dGc2NC5tYW51bGlmZWFtLmNvbYIWaW5zaWdodC5tYW51bGlmZWFtLmNvbYIWaW5z
aWdodC5tYW51bGlmZWltLmNvbYIcbWktZGV2LXRtcC5qaGludmVzdG1lbnRzLmNv
bYIYbWktZGV2LmpoaW52ZXN0bWVudHMuY29tghttaS1xYS10bXAuamhpbnZlc3Rt
ZW50cy5jb22CF21pLXFhLmpoaW52ZXN0bWVudHMuY29tghxtaS1zdGctdG1wLmpo
aW52ZXN0bWVudHMuY29tghhtaS1zdGcuamhpbnZlc3RtZW50cy5jb22CEm5hdi5t
YW51bGlmZWltLmNvbYIXcGFnZXMuamhpbnZlc3RtZW50cy5jb22CIXByZXZpZXct
ZGV2LXRtcC5qaGludmVzdG1lbnRzLmNvbYIdcHJldmlldy1kZXYuamhpbnZlc3Rt
ZW50cy5jb22CIHByZXZpZXctcWEtdG1wLmpoaW52ZXN0bWVudHMuY29tghxwcmV2
aWV3LXFhLmpoaW52ZXN0bWVudHMuY29tgiFwcmV2aWV3LXN0Zy10bXAuamhpbnZl
c3RtZW50cy5jb22CHXByZXZpZXctc3RnLmpoaW52ZXN0bWVudHMuY29tghhxYS1j
cHMuamhpbnZlc3RtZW50cy5jb22CFXFhLW5hdi5tYW51bGlmZWltLmNvbYIdcWEt
cmV0aXJlbWVudC5qb2huaGFuY29jay5jb22CGHFhLXRtcC5qaGludmVzdG1lbnRz
LmNvbYIVcWEtdG1wLm1hbnVsaWZlaW0uY29tgiBxYS10bXAubWFudWxpZmVwcml2
YXRld2VhbHRoLmNvbYIkcWEtdG1wLm1hbnVsaWZlcmVhbGVzdGF0ZWZpbmFuY2Uu
Y29tghRxYS5qaGludmVzdG1lbnRzLmNvbYIRcWEubWFudWxpZmVpbS5jb22CHHFh
Lm1hbnVsaWZlcHJpdmF0ZXdlYWx0aC5jb22CIHFhLm1hbnVsaWZlcmVhbGVzdGF0
ZWZpbmFuY2UuY29tghhxYS5tYW51bGlmZXNlY3VyaXRpZXMuY2GCJ3FhLndhbS1h
ZHZpc29yLWVudGl0bGVtZW50cy5tYW51bGlmZS5pb4IicmV0aXJlbWVudC1kZXYt
Y3BzLmpvaG5oYW5jb2NrLmNvbYIicmV0aXJlbWVudC1kZXYtdG1wLmpvaG5oYW5j
b2NrLmNvbYIhcmV0aXJlbWVudC1xYS1jcHMuam9obmhhbmNvY2suY29tgiFyZXRp
cmVtZW50LXFhLXRtcC5qb2huaGFuY29jay5jb22CInJldGlyZW1lbnQtc3RnLWNw
cy5qb2huaGFuY29jay5jb22CInJldGlyZW1lbnQtc3RnLXRtcC5qb2huaGFuY29j
ay5jb22CJnN0YWdlLXVjaXRzLm1hbnVsaWZlaW52ZXN0bWVudG1nbXQuY29tgiBz
dGFnZS5tYW51bGlmZWludmVzdG1lbnRtZ210LmNvbYIfc3RhZ2UubWFudWxpZmVp
bnZlc3RtZW50bWd0LmNvbYIZc3RnLWNwcy5qaGludmVzdG1lbnRzLmNvbYIWc3Rn
LW5hdi5tYW51bGlmZWltLmNvbYIlc3RnLXJldGFpbC5tYW51bGlmZWludmVzdG1l
bnRtZ210LmNvbYIec3RnLXJldGlyZW1lbnQuam9obmhhbmNvY2suY29tghlzdGct
dG1wLmpoaW52ZXN0bWVudHMuY29tghZzdGctdG1wLm1hbnVsaWZlaW0uY29tgiFz
dGctdG1wLm1hbnVsaWZlcHJpdmF0ZXdlYWx0aC5jb22CJXN0Zy10bXAubWFudWxp
ZmVyZWFsZXN0YXRlZmluYW5jZS5jb22CFXN0Zy5qaGludmVzdG1lbnRzLmNvbYIS
c3RnLm1hbnVsaWZlaW0uY29tgh1zdGcubWFudWxpZmVwcml2YXRld2VhbHRoLmNv
bYIhc3RnLm1hbnVsaWZlcmVhbGVzdGF0ZWZpbmFuY2UuY29tghlzdGcubWFudWxp
ZmVzZWN1cml0aWVzLmNhghx1Y2l0cy1kZXYtdG1wLm1hbnVsaWZlaW0uY29tghh1
Y2l0cy1kZXYubWFudWxpZmVpbS5jb22CG3VjaXRzLXFhLXRtcC5tYW51bGlmZWlt
LmNvbYIXdWNpdHMtcWEubWFudWxpZmVpbS5jb22CHHVjaXRzLXN0Zy10bXAubWFu
dWxpZmVpbS5jb22CGHVjaXRzLXN0Zy5tYW51bGlmZWltLmNvbYIddmlld3BvaW50
cy1zdGcubWFudWxpZmVhbS5jb22CGXZpZXdwb2ludHMubWFudWxpZmVhbS5jb20w
DQYJKoZIhvcNAQELBQADggEBAJTq878Gnj7Qr0lyoSpctUPBYzlue1xH7uSe2hpH
DzTu7BJy1XfCGbHgh0ipUGA+X8vw1XwrVtkKdKAKPCxU1gvvak5tj+wJYdeFMb0P
JksfzDhgUF82F5zG6kteQKqTh577VanV7VG5G+oJc+GOLe01YBF03LSv9Nfl83py
UE1xNafvIkqFYyVGkFOfsnxEUsK5/wZeI7qFjmSaHSILY+GXKU7r+cJ+ajFN74jQ
nYwziW64FjuYkips+IQFUqx3Y1+xVawjuLYF5GllhE+CqOF14hWuWEL58Cl7UjiZ
G1IQelsONSh6lOo4h46Cm7UCC5VBF3bO2GCEHlhu5vqIfuM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuY/5MqUI8llNKI5v8y8
yDPZ36L6v80uwE1ddICfnbk1FnxPvzdYQbdaGjyCcH0z1nBVecpH+2psDRJEuM9A
V03z0gQiwa0u5i4ZaMVJD83BL5AdwVFE1q0+qjt7wyRbMeBFLvecxm+DbhRFydbv
g6FcUQleQMJBiTAYc06shUz4EMbyAvHY48YSyzoqg4RCwxm4a0fJbpx9rwqWmahj
Kwe2zZfc3lQNqKccmSzLRgkr+tHPkd08KBRFSnDoS3xzZTmnjbRYu+rlUHQNBwQM
VjZZR2FLrAlm2LF3VnC6D75n5IdoRyCJd5tjXtTwHaO9fh79HWH5hGEa+gvCe7lg
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 190714975829687600133532094398023087035
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jhinvestments.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21069098926349688754860781940931850358430288027363438742618064586695780253469882176499156608512709174258449612182782444338963959618437997813159616805882826228889829926965983214630400693059230074149203416918157004750905386532269875941325298586938722521493555345017930763196804707509144478544971202945151714481497757418885646364710577541704019577797806148634514226463649780565646694166915928287195435607223472082928163033358617459807578660835542355991851633012590406825865483538161193098012953063924205194196817079870312926177743630599042652514499583160033486896545691758223342368451032969679996173168920655133014581501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							305d01a85833f6bc3e72f65fa6fa30dd7587c2d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2417 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-dev-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-dev.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-qa-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-qa.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-stg-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'author-stg.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-cps.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-nav.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-retirement.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-tmp.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-tmp.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.manulifesecurities.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wam-advisor-entitlements.manulife.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight-stg.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight-stg64.manulifeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight.manulifeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insight.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-dev-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-dev.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-qa-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-qa.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-stg-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-stg.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nav.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pages.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-dev-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-dev.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-qa-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-qa.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-stg-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-stg.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-cps.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-nav.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-retirement.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-tmp.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-tmp.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.manulifesecurities.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.wam-advisor-entitlements.manulife.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-dev-cps.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-dev-tmp.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-qa-cps.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-qa-tmp.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-stg-cps.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-stg-tmp.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-ucits.manulifeinvestmentmgmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.manulifeinvestmentmgmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.manulifeinvestmentmgt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-cps.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-nav.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-retail.manulifeinvestmentmgmt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-retirement.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.manulifesecurities.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-dev-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-dev.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-qa-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-qa.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-stg-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-stg.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewpoints-stg.manulifeam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewpoints.manulifeam.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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