johnhancock.com

- Manulife Financial -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 06:0b:d7:63:b4:f1:4d:ad:9b:d6:2b:ac:cf:e3:3d:67 was issued on by Sectigo Limited.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Manulife Financial

Organization: Manulife Financial
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 06:0b:d7:63:b4:f1:4d:ad:9b:d6:2b:ac:cf:e3:3d:67
Serial Number (int): 8036851857805272077751602699296783719
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 34:3d:56:3d:18:04:59:c2:b4:da:ec:58:34:c4:03:5d:10:9e:b4:6d
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): fd:02:10:b5:11:fb:b4:da:76:8b:40:05:9e:ec:45:80:33:be:9e:e3
Fingerprint (sha256): 34:78:7e:c4:4e:e3:48:89:48:84:56:d2:5f:20:4e:b4:03:b7:6e:6c:db:2c:d5:1c:38:ed:d8:14:4f:19:f9:3a

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate johnhancock.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for johnhancock.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

johnhancock.com
10058.johnhancock.com
75hawthorne.com
advisor.jhinvestment.com
advisor.jhinvestments.com
advisor.johnhancockinvestments.com
bob.jhfnjunction.com
bob.stage.jhfnjunction.com
consultants.jhinvestments.com
consultants.johnhancockinvestments.com
dcio.jhinvestments.com
dcio.johnhancockinvestments.com
dev.johnhancock.com
diablotechnologypark.com
identity.bcomplete.com
internal.jhinvestment.com
internal.jhinvestments.com
internal.johnhancockinvestments.com
jh-dreamui-brokerage-stage.jhase.uat.manulife.com
jhancockannuities.com
jhancockinvestment.com
jhancockinvestments.com
jhancocknewyork.com
jhannuities.com
jhannuitiesny.com
jhannuity.com
jhapim.manulife.com
jhapps.jhfnjunction.com
jhappsstaging.jhfnjunction.com
jhf529.com
jhfreedom529.com
jhfunds.com
jhfundsretirement.com
jhinvestment.com
jhinvestments.com
jhredefininglife.com
johnhancockannuities.com
johnhancockfreedom529.com
johnhancockinvestment.com
johnhancockinvestments.com
johnhancocknewyork.com
johnhancockrealestate.com
johnhancocktravel.com
manulife-venture.com
manulifebermuda.com
manulifehongkong.com
manuliferealestate.com
manulifeusa.com
mi.jhinvestments.com
news.johnhancock.com
ourdifferentapproach.com
parkplacechandler.com
qa.manulifebermuda.com
ria.jhinvestments.com
ria.johnhancockinvestments.com
sales-tst-tmp.johnhancockinsurance.com
slabtownmarketplace.com
stage-termlife.johnhancockinsurance.com
stage.identity.bcomplete.com
stg-cps.jhinvestments.com
stg-tmp.jhinvestments.com
stg.jhinvestments.com
tanasbournecommercecenter.com
uat.johnhancocktravel.com
www.75hawthorne.com
www.diablotechnologypark.com
www.jhancockannuities.com
www.jhancockinvestment.com
www.jhancockinvestments.com
www.jhannuities.com
www.jhannuitiesny.com
www.jhannuity.com
www.jhf529.com
www.jhfreedom529.com
www.jhfunds.com
www.jhinvestment.com
www.jhinvestments.com
www.jhredefininglife.com
www.johnhancockannuities.com
www.johnhancockfreedom529.com
www.johnhancockinvestment.com
www.johnhancockinvestments.com
www.johnhancockrealestate.com
www.johnhancocktravel.com
www.manulife-venture.com
www.manulifebermuda.com
www.manulifehongkong.com
www.manuliferealestate.com
www.manulifeusa.com
www.ourdifferentapproach.com
www.parkplacechandler.com
www.slabtownmarketplace.com
www.tanasbournecommercecenter.com

Other certificates including the domain name johnhancock.com

(limited to 100 certificates)
johnhancockinsurance.com
stage.identity.jhancock.com
manulife.com
rps.jhancock.com
manulife.com
uat.igpclaimreporting.jhancock.com
qa.johnhancock.com
johnhancock.com
johnhancock.com
onboarding.retirement.johnhancock.com
johnhancock.com
www.jhinvestments.com
stg.johnhancock.com
myplanuat.johnhancock.com
www.jhinvestments.com
qr.retirement.johnhancock.com
dev-tmp.jhinvestments.com
johnhancock.com
www.jhinvestments.com
manulife.com
johnhancock.com
advisorfeedbackhub.johnhancock.com
manulife.com
johnhancock.com
johnhancock.com
crverifyidentity-dev.johnhancock.com
myplanuat.johnhancock.com
www.jhinvestments.com
johnhancock.com
img.retirement.johnhancock.com
johnhancock.com
rps.jhancock.com
manulife.com
johnhancock.com
manulife.com
instant-apply.johnhancockinsurance.com
manulife.com
manulife.com
rps.jhancock.com
instant-apply.johnhancockinsurance.com
qr.myplan.johnhancock.com
manulife.com
digital-uat.customer.johnhancock.com
myplanuat.johnhancock.com
manulife.com
www.jhinvestments.com
digital-uat.customer.johnhancock.com
personalizedretirementadvice.johnhancock.com
rps.jhancock.com
www.jhinvestments.com
johnhancock.com
secure.johnhancock.com
manulife.com
johnhancock.com
johnhancock.com
www.jhinvestments.com
manulife.com
ww4.johnhancock.com
johnhancock.com
johnhancock.com
manulife.com
preferences.johnhancock.com
qr.myplan.johnhancock.com
img.retirement.johnhancock.com
johnhancock.com
manulife.com
jhshsm.johnhancock.com
qr.myplan.johnhancock.com
johnhancock.com
ww4.johnhancock.com
quote-uat.johnhancock.com
stg.johnhancock.com
johnhancock.com
digital.customer.johnhancock.com
johnhancock.com
johnhancockinsurance.com
johnhancock.com
retirementinfo.johnhancock.com
jhaconnect.jhannuities.com
johnhancock.com
johnhancock.com
onboarding.retirement.johnhancock.com
protect.johnhancock.com
jhshsm.johnhancock.com
rps.jhancock.com
qr.retirement.johnhancock.com
manulife.com
johnhancock.com
newonboardingaugust2023.retirement.johnhancock.com
johnhancock.com
rps.jhancock.com
manulife.com
johnhancock.com
manulife.com
johnhancock.com
finapp.johnhancock.com
johnhancock.com
manulife.com
manulife.com
preferencesstg.johnhancock.com

Certificate

The complete raw certificate details for johnhancock.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQADCCDuigAwIBAgIQBgvXY7TxTa2b1iusz+M9ZzANBgkqhkiG9w0BAQsFADCB
lTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMT0wOwYDVQQD
EzRTZWN0aWdvIFJTQSBPcmdhbml6YXRpb24gVmFsaWRhdGlvbiBTZWN1cmUgU2Vy
dmVyIENBMB4XDTIyMDkwNjAwMDAwMFoXDTIzMDkwNjIzNTk1OVowVjELMAkGA1UE
BhMCQ0ExEDAOBgNVBAgTB09udGFyaW8xGzAZBgNVBAoTEk1hbnVsaWZlIEZpbmFu
Y2lhbDEYMBYGA1UEAxMPam9obmhhbmNvY2suY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAnoCdfXKD8Igq3aicwrMc4N5YWjV3V83ufxEJS7rEwPrL
Awea4BqCXNojJSn+acswi7tjbPx/dReTQA8XhF3JBd5fjDGvo1nCVDvwXtRqmiKN
DT8fwmBMbMhqZReEHCum8LVu0kBFaKnApqHx8S68SuIRTZTEq7u6sWe2r4eMB1Vj
A16yYYZEcoufXv7+toMhzap3UxcOdhVDXJ0kJY51z+8AItJqlWKpX+eVCz9AVoi9
5qnkBfXDDaIcm/QkEZ7LJS8aDwCNHSig64RsGNnMnZ0jaMGXAwXLVxlI7nD6J9uR
OG9Eii1t4Mw8As6Vm6SweFdbaV/RkGBsoReaOvYRAQIDAQABo4IMiDCCDIQwHwYD
VR0jBBgwFoAUF9nWJSdn+THCSUPZMDZEjGypT+swHQYDVR0OBBYEFDQ9Vj0YBFnC
tNrsWDTEA10QnrRtMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBKBgNVHSAEQzBBMDUGDCsGAQQBsjEB
AgEDBDAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZn
gQwBAgIwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2NybC5zZWN0aWdvLmNvbS9T
ZWN0aWdvUlNBT3JnYW5pemF0aW9uVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNy
bDCBigYIKwYBBQUHAQEEfjB8MFUGCCsGAQUFBzAChklodHRwOi8vY3J0LnNlY3Rp
Z28uY29tL1NlY3RpZ29SU0FPcmdhbml6YXRpb25WYWxpZGF0aW9uU2VjdXJlU2Vy
dmVyQ0EuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5zZWN0aWdvLmNvbTCC
AXwGCisGAQQB1nkCBAIEggFsBIIBaAFmAHYArfe++nz/EMiLnT2cHj4YarRnKV3P
sQwkyoWGNOvcgooAAAGDE+6/awAABAMARzBFAiEAltn9U5M9Seo3slK9cvjKyJ/A
+UIhUorHQAQldZc4ryACICd+W+hicsWCdHCob8mbm3gJlIy1Hcs2LeB+5OQ0S3SK
AHUAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGDE+6/gAAABAMA
RjBEAiBT0GsGfoHkfWjl4JYyGfr4VxIyFpmFkSTwIvs04uSJGQIgeGhb/FVAGPYP
jufikg+5CMZJcKlHbgSFRnbKL3O5W2YAdQDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr
7Otp4Xd9bQa9bgAAAYMT7r9MAAAEAwBGMEQCIBAM62Y3KcRHCawae1JHxMeCQkRf
dGVHRXtn1A4M756mAiBBBQEc6Y45Qxs7kLOf1k2WGlnCSeuEqacH3nq/5MnFODCC
CU4GA1UdEQSCCUUwgglBgg9qb2huaGFuY29jay5jb22CFTEwMDU4LmpvaG5oYW5j
b2NrLmNvbYIPNzVoYXd0aG9ybmUuY29tghhhZHZpc29yLmpoaW52ZXN0bWVudC5j
b22CGWFkdmlzb3IuamhpbnZlc3RtZW50cy5jb22CImFkdmlzb3Iuam9obmhhbmNv
Y2tpbnZlc3RtZW50cy5jb22CFGJvYi5qaGZuanVuY3Rpb24uY29tghpib2Iuc3Rh
Z2Uuamhmbmp1bmN0aW9uLmNvbYIdY29uc3VsdGFudHMuamhpbnZlc3RtZW50cy5j
b22CJmNvbnN1bHRhbnRzLmpvaG5oYW5jb2NraW52ZXN0bWVudHMuY29tghZkY2lv
LmpoaW52ZXN0bWVudHMuY29tgh9kY2lvLmpvaG5oYW5jb2NraW52ZXN0bWVudHMu
Y29tghNkZXYuam9obmhhbmNvY2suY29tghhkaWFibG90ZWNobm9sb2d5cGFyay5j
b22CFmlkZW50aXR5LmJjb21wbGV0ZS5jb22CGWludGVybmFsLmpoaW52ZXN0bWVu
dC5jb22CGmludGVybmFsLmpoaW52ZXN0bWVudHMuY29tgiNpbnRlcm5hbC5qb2hu
aGFuY29ja2ludmVzdG1lbnRzLmNvbYIxamgtZHJlYW11aS1icm9rZXJhZ2Utc3Rh
Z2Uuamhhc2UudWF0Lm1hbnVsaWZlLmNvbYIVamhhbmNvY2thbm51aXRpZXMuY29t
ghZqaGFuY29ja2ludmVzdG1lbnQuY29tghdqaGFuY29ja2ludmVzdG1lbnRzLmNv
bYITamhhbmNvY2tuZXd5b3JrLmNvbYIPamhhbm51aXRpZXMuY29tghFqaGFubnVp
dGllc255LmNvbYINamhhbm51aXR5LmNvbYITamhhcGltLm1hbnVsaWZlLmNvbYIX
amhhcHBzLmpoZm5qdW5jdGlvbi5jb22CHmpoYXBwc3N0YWdpbmcuamhmbmp1bmN0
aW9uLmNvbYIKamhmNTI5LmNvbYIQamhmcmVlZG9tNTI5LmNvbYILamhmdW5kcy5j
b22CFWpoZnVuZHNyZXRpcmVtZW50LmNvbYIQamhpbnZlc3RtZW50LmNvbYIRamhp
bnZlc3RtZW50cy5jb22CFGpocmVkZWZpbmluZ2xpZmUuY29tghhqb2huaGFuY29j
a2FubnVpdGllcy5jb22CGWpvaG5oYW5jb2NrZnJlZWRvbTUyOS5jb22CGWpvaG5o
YW5jb2NraW52ZXN0bWVudC5jb22CGmpvaG5oYW5jb2NraW52ZXN0bWVudHMuY29t
ghZqb2huaGFuY29ja25ld3lvcmsuY29tghlqb2huaGFuY29ja3JlYWxlc3RhdGUu
Y29tghVqb2huaGFuY29ja3RyYXZlbC5jb22CFG1hbnVsaWZlLXZlbnR1cmUuY29t
ghNtYW51bGlmZWJlcm11ZGEuY29tghRtYW51bGlmZWhvbmdrb25nLmNvbYIWbWFu
dWxpZmVyZWFsZXN0YXRlLmNvbYIPbWFudWxpZmV1c2EuY29tghRtaS5qaGludmVz
dG1lbnRzLmNvbYIUbmV3cy5qb2huaGFuY29jay5jb22CGG91cmRpZmZlcmVudGFw
cHJvYWNoLmNvbYIVcGFya3BsYWNlY2hhbmRsZXIuY29tghZxYS5tYW51bGlmZWJl
cm11ZGEuY29tghVyaWEuamhpbnZlc3RtZW50cy5jb22CHnJpYS5qb2huaGFuY29j
a2ludmVzdG1lbnRzLmNvbYImc2FsZXMtdHN0LXRtcC5qb2huaGFuY29ja2luc3Vy
YW5jZS5jb22CF3NsYWJ0b3dubWFya2V0cGxhY2UuY29tgidzdGFnZS10ZXJtbGlm
ZS5qb2huaGFuY29ja2luc3VyYW5jZS5jb22CHHN0YWdlLmlkZW50aXR5LmJjb21w
bGV0ZS5jb22CGXN0Zy1jcHMuamhpbnZlc3RtZW50cy5jb22CGXN0Zy10bXAuamhp
bnZlc3RtZW50cy5jb22CFXN0Zy5qaGludmVzdG1lbnRzLmNvbYIddGFuYXNib3Vy
bmVjb21tZXJjZWNlbnRlci5jb22CGXVhdC5qb2huaGFuY29ja3RyYXZlbC5jb22C
E3d3dy43NWhhd3Rob3JuZS5jb22CHHd3dy5kaWFibG90ZWNobm9sb2d5cGFyay5j
b22CGXd3dy5qaGFuY29ja2FubnVpdGllcy5jb22CGnd3dy5qaGFuY29ja2ludmVz
dG1lbnQuY29tght3d3cuamhhbmNvY2tpbnZlc3RtZW50cy5jb22CE3d3dy5qaGFu
bnVpdGllcy5jb22CFXd3dy5qaGFubnVpdGllc255LmNvbYIRd3d3LmpoYW5udWl0
eS5jb22CDnd3dy5qaGY1MjkuY29tghR3d3cuamhmcmVlZG9tNTI5LmNvbYIPd3d3
LmpoZnVuZHMuY29tghR3d3cuamhpbnZlc3RtZW50LmNvbYIVd3d3LmpoaW52ZXN0
bWVudHMuY29tghh3d3cuamhyZWRlZmluaW5nbGlmZS5jb22CHHd3dy5qb2huaGFu
Y29ja2FubnVpdGllcy5jb22CHXd3dy5qb2huaGFuY29ja2ZyZWVkb201MjkuY29t
gh13d3cuam9obmhhbmNvY2tpbnZlc3RtZW50LmNvbYIed3d3LmpvaG5oYW5jb2Nr
aW52ZXN0bWVudHMuY29tgh13d3cuam9obmhhbmNvY2tyZWFsZXN0YXRlLmNvbYIZ
d3d3LmpvaG5oYW5jb2NrdHJhdmVsLmNvbYIYd3d3Lm1hbnVsaWZlLXZlbnR1cmUu
Y29tghd3d3cubWFudWxpZmViZXJtdWRhLmNvbYIYd3d3Lm1hbnVsaWZlaG9uZ2tv
bmcuY29tghp3d3cubWFudWxpZmVyZWFsZXN0YXRlLmNvbYITd3d3Lm1hbnVsaWZl
dXNhLmNvbYIcd3d3Lm91cmRpZmZlcmVudGFwcHJvYWNoLmNvbYIZd3d3LnBhcmtw
bGFjZWNoYW5kbGVyLmNvbYIbd3d3LnNsYWJ0b3dubWFya2V0cGxhY2UuY29tgiF3
d3cudGFuYXNib3VybmVjb21tZXJjZWNlbnRlci5jb20wDQYJKoZIhvcNAQELBQAD
ggEBAICL8zisfV1clzj/fTYxu2QAHYBZIHEJmZqlwrTFGVqfta4byEftfbVOHYXA
YPX+vPVHZn6mWotWANPGCtJ1ilhQ8Yh37/pMQeTrh1wkAgO66P5saQe/WDCKC1D2
/6QsbKgx/iGEz2dlosWocxoDdEhcM7lWuVZnfjoutlJzKJ3O32uvEckWqKYlOUAj
I1Y5LBYhHTgW9oekFrM1EjgNXGfuPAxWL5eFetyUiWCXdWzTflhDBOmwrNwDtw+7
h/0/hGeYFcVE6Y1vbfxk513NDx09ODA43qRGgQXHXfnV3ngW9Yq6sXZTUZinrXjw
qBn+9ybGEseqCqXgqP5EFfj5FTg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoCdfXKD8Igq3aicwrMc
4N5YWjV3V83ufxEJS7rEwPrLAwea4BqCXNojJSn+acswi7tjbPx/dReTQA8XhF3J
Bd5fjDGvo1nCVDvwXtRqmiKNDT8fwmBMbMhqZReEHCum8LVu0kBFaKnApqHx8S68
SuIRTZTEq7u6sWe2r4eMB1VjA16yYYZEcoufXv7+toMhzap3UxcOdhVDXJ0kJY51
z+8AItJqlWKpX+eVCz9AVoi95qnkBfXDDaIcm/QkEZ7LJS8aDwCNHSig64RsGNnM
nZ0jaMGXAwXLVxlI7nD6J9uROG9Eii1t4Mw8As6Vm6SweFdbaV/RkGBsoReaOvYR
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8036851857805272077751602699296783719
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'johnhancock.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20009074701290542494869583494197142149859479466324302763988405637509780382234591374023375935477854969695789473177238055482039454107801742091595597120725105260946951884394568109912924263183548842750963283119008296572411184834404913863583910242048695001798070685027642081508846131905275026487581293389977473401035806733661005024033301741780375362534640923482590272854861634400545170343581935527963544220964392685466610582418785735109568489506475857431568520712155235008802273018324211568020660438439660059429186836246418722660105055394429416404515408272040841923670063845155688958882280982977025315514568994121651196161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							343d563d180459c2b4daec5834c4035d109eb46d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018313eebf6b000004030047304502210096d9fd53933d49ea37b252bd72f8cac89fc0f94221528ac7400425759738af200220277e5be86272c5827470a86fc99b9b7809948cb51dcb362de07ee4e4344b748a0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018313eebf800000040300463044022053d06b067e81e47d68e5e0963219faf85712321699859124f022fb34e2e48919022078685bfc554018f60f8ee7e2920fb908c64970a9476e04854676ca2f73b95b66007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018313eebf4c00000403004630440220100ceb663729c44709ac1a7b5247c4c78242445f746547457b67d40e0cef9ea602204105011ce98e39431b3b90b39fd64d961a59c249eb84a9a707de7abfe4c9c538
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2373 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10058.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '75hawthorne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisor.jhinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisor.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisor.johnhancockinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bob.jhfnjunction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bob.stage.jhfnjunction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultants.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultants.johnhancockinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcio.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcio.johnhancockinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diablotechnologypark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.bcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.jhinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.johnhancockinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh-dreamui-brokerage-stage.jhase.uat.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhancockannuities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhancockinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhancockinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhancocknewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhannuities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhannuitiesny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhannuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhapim.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhapps.jhfnjunction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhappsstaging.jhfnjunction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhf529.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhfreedom529.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhfundsretirement.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhredefininglife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancockannuities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancockfreedom529.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancockinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancockinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancocknewyork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancockrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnhancocktravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife-venture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifebermuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifehongkong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manuliferealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifeusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourdifferentapproach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkplacechandler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.manulifebermuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ria.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ria.johnhancockinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales-tst-tmp.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slabtownmarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-termlife.johnhancockinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.identity.bcomplete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-cps.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tanasbournecommercecenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.johnhancocktravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.75hawthorne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diablotechnologypark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhancockannuities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhancockinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhancockinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhannuities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhannuitiesny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhannuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhf529.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhfreedom529.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhredefininglife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockannuities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockfreedom529.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockinvestment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancockrealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnhancocktravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulife-venture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifebermuda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifehongkong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manuliferealestate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifeusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourdifferentapproach.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkplacechandler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slabtownmarketplace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tanasbournecommercecenter.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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