johnhancock.com

- Manulife Financial -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 60:12:9c:23:c1:96:db:f0:94:96:a5:bb:f7:0e:bd:eb was issued on by Sectigo Limited.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Manulife Financial

Organization: Manulife Financial
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 60:12:9c:23:c1:96:db:f0:94:96:a5:bb:f7:0e:bd:eb
Serial Number (int): 127702515827602392760564024439603117547
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 9e:23:ff:8f:c1:69:94:a5:18:fc:af:38:a9:12:1f:60:b2:8f:0d:7f
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 6b:0d:92:49:09:e8:fa:86:63:33:19:dd:ad:c5:6b:66:a5:db:34:cf
Fingerprint (sha256): 2a:9a:b0:e9:6c:e2:81:e0:36:e1:8c:0d:e0:fb:61:38:4b:0e:c3:7d:e7:3a:ae:fd:92:ae:17:a3:8f:b7:bb:29

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate johnhancock.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for johnhancock.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

johnhancock.com
10058.johnhancock.com
75hawthorne.com
advisor.jhinvestment.com
advisor.jhinvestments.com
advisor.johnhancockinvestments.com
bob.jhfnjunction.com
bob.stage.jhfnjunction.com
consultants.jhinvestments.com
consultants.johnhancockinvestments.com
dcio.jhinvestments.com
dcio.johnhancockinvestments.com
dev.johnhancock.com
diablotechnologypark.com
identity.bcomplete.com
internal.jhinvestment.com
internal.jhinvestments.com
internal.johnhancockinvestments.com
jh-dreamui-brokerage-stage.jhase.uat.manulife.com
jhancockannuities.com
jhancockinvestment.com
jhancockinvestments.com
jhancocknewyork.com
jhannuities.com
jhannuitiesny.com
jhannuity.com
jhapps.jhfnjunction.com
jhappsstaging.jhfnjunction.com
jhf529.com
jhinvestment.com
jhinvestments.com
jhredefininglife.com
johnhancockannuities.com
johnhancockfreedom529.com
johnhancockinvestment.com
johnhancockinvestments.com
johnhancocknewyork.com
johnhancockrealestate.com
johnhancocktravel.com
manulife-venture.com
manulifebermuda.com
manulifehongkong.com
manuliferealestate.com
manulifeusa.com
mi.jhinvestments.com
news.johnhancock.com
ourdifferentapproach.com
parkplacechandler.com
qa.manulifebermuda.com
ria.jhinvestments.com
ria.johnhancockinvestments.com
sales-tst-tmp.johnhancockinsurance.com
slabtownmarketplace.com
stage.identity.bcomplete.com
stg-cps.jhinvestments.com
stg-tmp.jhinvestments.com
stg.jhinvestments.com
tanasbournecommercecenter.com
www.75hawthorne.com
www.diablotechnologypark.com
www.jhancockannuities.com
www.jhancockinvestment.com
www.jhancockinvestments.com
www.jhannuities.com
www.jhannuitiesny.com
www.jhannuity.com
www.jhf529.com
www.jhinvestment.com
www.jhinvestments.com
www.jhredefininglife.com
www.johnhancockannuities.com
www.johnhancockfreedom529.com
www.johnhancockinvestment.com
www.johnhancockinvestments.com
www.johnhancockrealestate.com
www.johnhancocktravel.com
www.manulife-venture.com
www.manulifebermuda.com
www.manulifehongkong.com
www.manuliferealestate.com
www.manulifeusa.com
www.ourdifferentapproach.com
www.parkplacechandler.com
www.slabtownmarketplace.com
www.tanasbournecommercecenter.com

Other certificates including the domain name johnhancock.com

(limited to 100 certificates)
johnhancockinsurance.com
stage.identity.jhancock.com
manulife.com
rps.jhancock.com
manulife.com
uat.igpclaimreporting.jhancock.com
qa.johnhancock.com
johnhancock.com
johnhancock.com
onboarding.retirement.johnhancock.com
johnhancock.com
www.jhinvestments.com
stg.johnhancock.com
myplanuat.johnhancock.com
www.jhinvestments.com
qr.retirement.johnhancock.com
dev-tmp.jhinvestments.com
johnhancock.com
www.jhinvestments.com
manulife.com
johnhancock.com
advisorfeedbackhub.johnhancock.com
manulife.com
johnhancock.com
johnhancock.com
crverifyidentity-dev.johnhancock.com
myplanuat.johnhancock.com
www.jhinvestments.com
johnhancock.com
img.retirement.johnhancock.com
johnhancock.com
rps.jhancock.com
manulife.com
johnhancock.com
manulife.com
instant-apply.johnhancockinsurance.com
manulife.com
manulife.com
rps.jhancock.com
instant-apply.johnhancockinsurance.com
qr.myplan.johnhancock.com
manulife.com
digital-uat.customer.johnhancock.com
myplanuat.johnhancock.com
manulife.com
www.jhinvestments.com
digital-uat.customer.johnhancock.com
personalizedretirementadvice.johnhancock.com
rps.jhancock.com
www.jhinvestments.com
johnhancock.com
secure.johnhancock.com
manulife.com
johnhancock.com
johnhancock.com
www.jhinvestments.com
manulife.com
ww4.johnhancock.com
johnhancock.com
johnhancock.com
manulife.com
preferences.johnhancock.com
qr.myplan.johnhancock.com
img.retirement.johnhancock.com
johnhancock.com
manulife.com
jhshsm.johnhancock.com
qr.myplan.johnhancock.com
johnhancock.com
ww4.johnhancock.com
quote-uat.johnhancock.com
stg.johnhancock.com
johnhancock.com
digital.customer.johnhancock.com
johnhancock.com
johnhancockinsurance.com
johnhancock.com
retirementinfo.johnhancock.com
jhaconnect.jhannuities.com
johnhancock.com
johnhancock.com
onboarding.retirement.johnhancock.com
protect.johnhancock.com
jhshsm.johnhancock.com
rps.jhancock.com
qr.retirement.johnhancock.com
manulife.com
johnhancock.com
newonboardingaugust2023.retirement.johnhancock.com
johnhancock.com
rps.jhancock.com
manulife.com
johnhancock.com
manulife.com
johnhancock.com
finapp.johnhancock.com
johnhancock.com
manulife.com
manulife.com
preferencesstg.johnhancock.com

Certificate

The complete raw certificate details for johnhancock.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SwFMw/nxDE8roUQP/uL
1Giz58Dtnxopv24wusvVCw7lrKhGA4IvwLIQaKNo3oiBCYH78u3tg1IRsY4ZeV7E
BBRTFlgNSwGo1AjdA5iGKh8EiOqgb6gNt3EgKFLqcCWVOLqzd7LjUKIEloloEa2Q
ZQ+m3hI68n+3M3A6xuJzgzmnV2wSjGcQsaHSUqkpwQBSYHoCfkbQ8yJs9s88fROE
FWvZpIY7DNjNnTi5DT1/PsZAWG0UzM+npZPJOtZTlUHTwTUeVQUMMX+M44yizPqg
OYrbCeD6sSBC9KMi9FLbJWXdz0jFcviPjyZoiZGniz8VwOUguZvjvpI81ZereHPr
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 127702515827602392760564024439603117547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'johnhancock.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26910466181866210840127368782447587608367539108931694984407177965153103016038175502337634984028730126927510281160349090637750249029796886197950151371246946971657148640228772607069776625707165717339868975024551769725954958234806828293454725962424574585412696153978942015263933707439619246463742428245797340970007525086842430806285151521233106457682018205486323106140775816605937404972033446430270059766122459689450614295243585612339699687751506033600779505673503729462784519319926341897786228156257607316521727736652328764718176867702912370777902843929440901861116037761480309220888924272860571136545533048701897141217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e23ff8fc16994a518fcaf38a9121f60b28f0d7f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2191 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10058.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '75hawthorne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisor.jhinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisor.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisor.johnhancockinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bob.jhfnjunction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bob.stage.jhfnjunction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultants.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultants.johnhancockinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcio.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcio.johnhancockinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diablotechnologypark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.bcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.jhinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.johnhancockinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh-dreamui-brokerage-stage.jhase.uat.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhancockannuities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhancockinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhancockinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhancocknewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhannuities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhannuitiesny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhannuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhapps.jhfnjunction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhappsstaging.jhfnjunction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhf529.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhredefininglife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancockannuities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancockfreedom529.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancockinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancockinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancocknewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancockrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancocktravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife-venture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifebermuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifehongkong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manuliferealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifeusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourdifferentapproach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkplacechandler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.manulifebermuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ria.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ria.johnhancockinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales-tst-tmp.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slabtownmarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.identity.bcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-cps.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tanasbournecommercecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.75hawthorne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diablotechnologypark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhancockannuities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhancockinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhancockinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhannuities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhannuitiesny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhannuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhf529.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhredefininglife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockannuities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockfreedom529.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancocktravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulife-venture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifebermuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifehongkong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manuliferealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifeusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourdifferentapproach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkplacechandler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slabtownmarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tanasbournecommercecenter.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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