cws.manulife.com.kh
- Manulife Financial Corporation -
Issued by Sectigo RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number 3f:ce:d5:1a:87:55:c6:86:0b:6e:42:17:75:c1:77:2a was issued on by Sectigo Limited.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Manulife Financial Corporation
Organization:
Manulife Financial Corporation
State / Province:
Ontario
Country: CA
Country: CA
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate will expire on
Certificate Details
Serial Number (hex): 3f:ce:d5:1a:87:55:c6:86:0b:6e:42:17:75:c1:77:2aSerial Number (int): 84815299142369850182890015513058047786
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: b4:4f:fc:bc:54:c8:54:33:a2:2b:29:ca:b7:72:b4:87:55:73:ad:be
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb
Fingerprint (sha1): 99:39:29:a6:1e:2d:85:5e:b0:8d:b2:a8:96:f9:b8:69:20:db:04:ad
Fingerprint (sha256): 26:01:5c:43:da:5e:6c:b6:2c:fd:fc:6a:08:82:18:01:1a:00:b9:cd:e8:aa:0e:24:53:6a:d8:6b:f2:86:6f:22
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate cws.manulife.com.kh
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cws.manulife.com.kh
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cws.manulife.com.kh
azwappkhcws01.mfcgd.com
azwappkhcwsw01.mfcgd.com
azwappkhcws01.mfcgd.com
azwappkhcwsw01.mfcgd.com
Other certificates including the domain name manulife.com.kh
(limited to 100 certificates)
cws.manulife.com.kh
manulife.com
ptkuat.manulife.com.kh
manulife.com
manulife.com
ptk.manulife.com.kh
manulife.com
manulife.com
awsuat.manulife.com.kh
manulife.com.kh
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
cws.manulife.com.kh
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com.kh
manulife.com
manulife.com
manulife.com
new.manulife.com.kh
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com.kh
manulife.com
aws.manulife.com.kh
manulife.com
manulife.com.kh
manulife.com
manulife.com
manulife.com
manulife.com
aws.manulife.com.kh
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
www.manulife.com.kh
cws.manulife.com.kh
manulife.com
manulife.com
manulife.com
cws.manulife.com.kh
manulife.com
aws.manulife.com.kh
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
mail.manulife.com.kh
manulife.com
cws.manulife.com.kh
awsuat.manulife.com.kh
manulife.com
manulife.com
cws.manulife.com.kh
cws.manulife.com.kh
manulife.com
eclaim.manulife.com.kh
manulife.com
manulife.com
aws.manulife.com.kh
manulife.com
manulife.com
manulife.com
manulife.com
aws.manulife.com.kh
manulife.com.kh
manulife.com
aws.manulife.com.kh
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
ptkuat.manulife.com.kh
manulife.com
manulife.com
ptk.manulife.com.kh
manulife.com
manulife.com
awsuat.manulife.com.kh
manulife.com.kh
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
cws.manulife.com.kh
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com.kh
manulife.com
manulife.com
manulife.com
new.manulife.com.kh
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com.kh
manulife.com
aws.manulife.com.kh
manulife.com
manulife.com.kh
manulife.com
manulife.com
manulife.com
manulife.com
aws.manulife.com.kh
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
www.manulife.com.kh
cws.manulife.com.kh
manulife.com
manulife.com
manulife.com
cws.manulife.com.kh
manulife.com
aws.manulife.com.kh
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
mail.manulife.com.kh
manulife.com
cws.manulife.com.kh
awsuat.manulife.com.kh
manulife.com
manulife.com
cws.manulife.com.kh
cws.manulife.com.kh
manulife.com
eclaim.manulife.com.kh
manulife.com
manulife.com
aws.manulife.com.kh
manulife.com
manulife.com
manulife.com
manulife.com
aws.manulife.com.kh
manulife.com.kh
manulife.com
aws.manulife.com.kh
manulife.com
manulife.com
manulife.com
manulife.com
Certificate
The complete raw certificate details for cws.manulife.com.kh in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIQP87VGodVxoYLbkIXdcF3KjANBgkqhkiG9w0BAQsFADCB lTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMT0wOwYDVQQD EzRTZWN0aWdvIFJTQSBPcmdhbml6YXRpb24gVmFsaWRhdGlvbiBTZWN1cmUgU2Vy dmVyIENBMB4XDTIzMTEyNDAwMDAwMFoXDTI0MTEyMzIzNTk1OVowZjELMAkGA1UE BhMCQ0ExEDAOBgNVBAgTB09udGFyaW8xJzAlBgNVBAoTHk1hbnVsaWZlIEZpbmFu Y2lhbCBDb3Jwb3JhdGlvbjEcMBoGA1UEAxMTY3dzLm1hbnVsaWZlLmNvbS5raDCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMabKH0G941DuVwVbo+gUM1m dunC3cgwSuTk2JXNE8CayD/iV7cFBvw6spO75aFmrqGqA1mnIIa2rv546+ZAj3Xf OfpwPSA9G4msGkP4Z8AdKi4GNXOHFjyJ0BpahgfomcpRcEsLsYxL6SSm3kiwewk2 fMn9lxr1U5DUNnsacLTQIAhvG5TtNhVanlnIeucAl65vKKI+faQHWeN7TFqF0kDM A9C06gm5M04lCur2b68WTPS3sJbdgRMzgpE9wJn8NvNTqigJwacN2keG0amCD9ZL 4wR+xKc8JgIGfj7y5p5EnoWXiWbLbi4PeJxNgeWOubAxzOIzvSGK7clE2+Mfh6MC AwEAAaOCA4wwggOIMB8GA1UdIwQYMBaAFBfZ1iUnZ/kxwklD2TA2RIxsqU/rMB0G A1UdDgQWBBS0T/y8VMhUM6IrKcq3crSHVXOtvjAOBgNVHQ8BAf8EBAMCBaAwDAYD VR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSgYDVR0g BEMwQTA1BgwrBgEEAbIxAQIBAwQwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0 aWdvLmNvbS9DUFMwCAYGZ4EMAQICMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9j cmwuc2VjdGlnby5jb20vU2VjdGlnb1JTQU9yZ2FuaXphdGlvblZhbGlkYXRpb25T ZWN1cmVTZXJ2ZXJDQS5jcmwwgYoGCCsGAQUFBwEBBH4wfDBVBggrBgEFBQcwAoZJ aHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBT3JnYW5pemF0aW9uVmFs aWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29j c3Auc2VjdGlnby5jb20wggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AHb/iD8K tvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABi//WqjsAAAQDAEcwRQIgTW+2 F1lT0PKPYKX1bwYUaky4BsqpqdVsZCynTWjDiHYCIQDq/NKcdsHFAvrIwGEdQnMt JiKK9R/EIqirhD5n5XivZwB3AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs +GRuAAABi//WqxgAAAQDAEgwRgIhANj9M67ulOQG5eE6TCf2NERcwwUklGLKIBh6 2fNHIzB/AiEAx7H5fV8FXQzLww45VgvG+AF8yeSkRfbqjf9ITjy/0VAAdgDuzdBk 1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYv/1qqzAAAEAwBHMEUCIHAr 6tbyrxHodGHk9xYqQG2XyvCTEG40YK8h11Ye+bR3AiEAut5GlgRtiEJcBZO3a7ZJ iL4Gcu0tk9mh866NYrlCmdowUQYDVR0RBEowSIITY3dzLm1hbnVsaWZlLmNvbS5r aIIXYXp3YXBwa2hjd3MwMS5tZmNnZC5jb22CGGF6d2FwcGtoY3dzdzAxLm1mY2dk LmNvbTANBgkqhkiG9w0BAQsFAAOCAQEAA0Q8RnfPuggDYvjDLp7cyNucpFkcrTmy EoFvgIHo8M7FzXyf5cNsG+Nfufty5P0YIM1wjDXHFjTE7K4zyCi/NgSLFP9DWu/N rpPhZUS1aOJjs7sr9fF1jLedvEahLMmKSWj4piUpgPfEVb2+sB0Z4pWfzwkzkneb f78cgPTiBsv6T9P36aS6mKQCgjj/5Qe51NGHc2uXnx7JdynS4g5EZX67IPcOUv7e gGhNLCgiUfHWIbCnUzcQZsBqZ53Qo5gphQJFivtFJepUgro2mgt7IAqzQGYYJ19o 7KoUlDUPU2vbwnOrbbZ6s4B+nF4p4zM4nZvCFLBDfO1Nz3TGv1tb3Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpsofQb3jUO5XBVuj6BQ zWZ26cLdyDBK5OTYlc0TwJrIP+JXtwUG/Dqyk7vloWauoaoDWacghrau/njr5kCP dd85+nA9ID0biawaQ/hnwB0qLgY1c4cWPInQGlqGB+iZylFwSwuxjEvpJKbeSLB7 CTZ8yf2XGvVTkNQ2expwtNAgCG8blO02FVqeWch65wCXrm8ooj59pAdZ43tMWoXS QMwD0LTqCbkzTiUK6vZvrxZM9Lewlt2BEzOCkT3Amfw281OqKAnBpw3aR4bRqYIP 1kvjBH7EpzwmAgZ+PvLmnkSehZeJZstuLg94nE2B5Y65sDHM4jO9IYrtyUTb4x+H owIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 84815299142369850182890015513058047786 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cws.manulife.com.kh' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25071695722489649528156820533285117916039165302890485582191923912652169022211766768974704314622541421736389645976519584537535229060116376578172358111836798339709215172660888561500765970690465230129598279429871306699926284613935801822008710345701010169312238025392839449629201945411204810287202999360554906415826500303402594078704693219986677563590322065539041552022094532377231759939057769349521085155466908718592034859792621696180326523447202652872264279946816703918302155256460886442118977618005527675372364199469193017917001534136123564587764811875155915740865904796640272966396969570556827944551738782127195391907 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b44ffcbc54c85433a22b29cab772b4875573adbe . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 016900760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bffd6aa3b000004030047304502204d6fb6175953d0f28f60a5f56f06146a4cb806caa9a9d56c642ca74d68c38876022100eafcd29c76c1c502fac8c0611d42732d26228af51fc422a8ab843e67e578af670077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018bffd6ab180000040300483046022100d8fd33aeee94e406e5e13a4c27f634445cc305249462ca20187ad9f34723307f022100c7b1f97d5f055d0ccbc30e39560bc6f8017cc9e4a445f6ea8dff484e3cbfd150007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bffd6aab300000403004730450220702bead6f2af11e87461e4f7162a406d97caf093106e3460af21d7561ef9b477022100bade4696046d88425c0593b76bb64988be0672ed2d93d9a1f3ae8d62b94299da . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cws.manulife.com.kh' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azwappkhcws01.mfcgd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azwappkhcwsw01.mfcgd.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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