manulife.com

- Manulife Financial Corporation -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number c3:bf:d4:6a:03:26:f3:8f:be:39:b4:33:43:3c:53:64 was issued on by Sectigo Limited.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Manulife Financial Corporation

Organization: Manulife Financial Corporation
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): c3:bf:d4:6a:03:26:f3:8f:be:39:b4:33:43:3c:53:64
Serial Number (int): 260195496148035492356697679338688762724
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f6:a3:02:16:67:7b:bb:bb:70:a1:37:66:b7:81:e0:73:5c:1a:62:26
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 29:ff:77:c1:be:e0:c5:87:8f:a2:29:fa:54:75:00:e9:2a:ca:24:0e
Fingerprint (sha256): 38:e4:87:19:01:11:17:2a:06:40:8e:43:39:e6:66:63:1b:06:85:c8:16:7c:8a:9d:6e:fb:2d:f3:db:cf:0c:1e

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate manulife.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for manulife.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

manulife.com
16049.manulife.com
advisor.uat.id.manulife.ca
agentwebsit1.manulife.co.jp
api.groupbenefits.manulife.ca
api.uat.gb.manulife.com
bdreg1.test-qa.net
demanderuneprotection.com
eznyreg1.test-qa02.net
ezusreg1.test-qa.net
groupbenefits.manulife.ca
manuliferates.ca
manuliferates.com
manulifesharepoint.mfcpoc01.com
manulinksit1.manulife.co.jp
mfatest.manulife.com
mi-stg-tmp.jhinvestments.com
mi-tmp.jhinvestments.com
mlex.pci.manulife.com
mlin.pci.manulife.com
mobile.manulife.ca
mortgagecreditor.uat.id.manulife.ca
personal.uat.id.manulife.ca
portail.investissements.manuvie.ca
psnyreg1.test-qa02.net
psusreg1.test-qa.net
registration.manulife.com
repdomws.manulife.com
retirement-stg-tmp.johnhancock.com
retirement-tmp.johnhancock.com
sit2.apply.epos.manulife.co.jp
sitmlex.pci.manulife.com
sitmlin.pci.manulife.com
sponsor.uat.id.manulife.ca
stg-tmp.jhinvestments.com
stg-tmp.manulifeprivatewealth.com
stg-tmp.manuliferealestatefinance.com
stg.manulifeim.com
tauxmanuvie.ca
tauxmanuvie.com
tmp.jhinvestments.com
tmp.manulifeim.com
tmp.manulifeprivatewealth.com
travel.uat.id.manulife.ca
tripx.prd.coverme.com
tripx.prd.pourmeproteger.com
uat.api.groupbenefits.manulife.ca
uat.api.manulifesecurities.manulife.ca
uat.api.placementsmanuvie.manuvie.ca
uat.apply.epos.manulife.co.jp
uat.assurance-manuvie.ca
uat.groupbenefits.manulife.ca
uat.id.manulife.ca
uat.manulifesecurities.manulife.ca
uat.manutouch.sg
uat.placementsmanuvie.manuvie.ca
uat.portail.investissements.manuvie.ca
uat1.fasat.manulife.ca
uat2.apply.epos.manulife.co.jp
uatclient.banquemanuvie.com
uatclient.manulifebank.com
uatdoc.manulife.com
uatm.manulife.com
uatmlex.pci.manulife.com
uatmlin.pci.manulife.com
uatonline.manulifebank.ca
ucits-stg-tmp.manulifeim.com
ucits-tmp.manulifeim.com
us-retail.dev.ext.gwam.manulife.com
www-aem-stage.bank.manulife.ca
www-aem-stage.bank.manuvie.ca
www-aem-stage.cmtcp.manulife.ca
www-aem-stage.coverme.manulife.ca
www-aem-stage.coverme.manuvie.ca
www-aem-stage.groupbenefits.manulife.ca
www-aem-stage.headless.manulife.ca
www-aem-stage.manulife.ca
www-aem-stage.manuvie.ca
www-aem-stage.rr.manulife.ca
www-aem-stage.travel.manulife.ca
www-aem-stage.travel.manuvie.ca
www-aem-stage.travelb2b.manulife.ca
www-aem-stage.travelb2b.manuvie.ca
www-uat.manulife-travel.ca
www-uat.manulife-travel.com
www-uat.voyagemanuvie.ca
www-uat.voyagemanuvie.com
www.demanderuneprotection.com
www.manuliferates.ca
www.manuliferates.com
www.tauxmanuvie.ca
www.tauxmanuvie.com

Other certificates including the domain name manulife.com

(limited to 100 certificates)
mlisxivg01.manulife.com
manulife.com
nasbfepool02.mfcgd.com
mfcentral.manulife.com
api1.np.ca.manulife.com
idwicrmapd01.mlijkt01.manulife.com
manulife.com
manulife.com
aidp.manulife.com
azalvedlwrkdp10.p01eaedl.manulife.com
manulife.com
client.manulifebank.com
rps.jhancock.com
manulife.com
sharepoint-externalpartner.uat.ap.manulife.com
hermes.manulife.com
manulife.com
clbs37841.manulife.com
internal.mesh.test.api.manulife.com
azcedlwrks003.s01caedl.manulife.com
manulife.com
cdcwvjhpwast21.americas.manulife.net
daily.manulife.com.vn
click.e.manulife.com
sft.institutional.manulife.com
johnhancock.com
manulife.com
sts.manulife.com
manulife.com
azslvedlmgtdd01.d01saedl.manulife.com
idwicrmapt21.mlijkt01.manulife.com
idwcasp.ap.manulife.com
mfcentral.manulife.com
manulife.com
view-e-ds.manulife.com
idwelems01.mlijkt01.manulife.com
druglookup-client.manulife.com
mfcentral.manulife.com
sharepoint-externalpartner.uat.ap.manulife.com
www-aem-prod.manulife.ca
insttrip.manulife.com
manulife.com
dbpartners.manulife.com
idwinetapt01.mlijkt01.manulife.com
asiacitrix.manulife.com
arrowonramp.manulife.com
manulife.com
qitsso-uat.manulife.com
manulife.com
sf.cac.internal.mesh.dev.api.manulife.com
manulife.com
giam-qa.manulife.com
manulife.com
cconprem.manulife.com
manulife.com
manulife.com
manulife.com
idp.grsportal.ca.manulife.com
manulife.com
insanalyticsdev01.manulife.com
awsuat.manulife.com.kh
idwiqmtapp01.mlijkt01.manulife.com
johnhancock.com
manulife.com
manulife.com
myasoaibp2.ap.manulife.com
remotejp2.manulife.com
johnhancock.com
sharepoint-int.ap.manulife.com
mlifs900g01.manulife.com
nasbaccess01.manulife.com
jhappsstaging-tst.aks.manulife.com
manulife.com
manulife.com
crverifyidentity-dev.johnhancock.com
manulife.com
jpnhoapt09.japan.corp.manulife.com
client.manulifebank.com
preprod.mtls.api.manulife.com
manulife.com
idwietsisft05.mlijkt01.manulife.com
remotehk.manulife.com
azcedledges001.s01caedl.manulife.com
idwcas4tap.ap.manulife.com
manulife.com
mlixnbarplzvnaca.manulife.com
manulife.com
manulife.com
druglookup-client.manulife.com
pcf.manulife.com
proxy.auw.my.underwriting.manulife.com
manulife.com
johnhancock.com
manulife.com
financeit.devsit202201.manulife.com
tw-ssg-fw1.manulife.com
advisor.manulife.ca
azwapnwasm01.mfcgd.com
azuedldbo01.p01usedl.manulife.com
edge.prod-ext.api.manulife.com

Certificate

The complete raw certificate details for manulife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC5r+r9HgLfkOHqbkCUB
e/8r+1Lz3Qq20x1hgI1Chinbm9+0yxraJZxcbwgiTmkGVrb+wtcUluOs89jBETus
qvIpVJvbWU8Kd9wqmHFX4LuYerzwJPpaa1JswN1RSBnsEu6Jg/W3jfkjFP+CCt50
ERBrF2DD54zI4w4SJSmuZNpoQVBGTZ59mVH6XRmPPgO6bMYIitP0M35QIQt7QrrC
FRO9cLrJCSyB1vUur0/QxQjSPqB0HWQZ+Sv4XHSJr06Hz+GUKwKW64dAUGb6pHOw
GPi7vj+TCdd60pt4VEk9sICGLCb3Xn60cTtK7ZsECabbFr2UdKv+fc3BvHc687aA
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 260195496148035492356697679338688762724
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'manulife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23250739553970193653578629136113770601863708839615925887862649644878965141340076277490971647324516258962493180199076485974843925889392703545233515693940146533488131955636242618739687304750935388574554283711304353190019392580115844366606776754559972197375306776394516726175095512175764374431175797036857535004219143410960179421109798422545120988746790885028633457043700863413812116107714599078935666760315374354163208366372050037126273699512277113434639569553289909922512101131991770300613787726378139552265175951781587768954832707190576710174197314951939077511505636502580515267306605833221303583624472683771889877001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6a30216677bbbbb70a13766b781e0735c1a6226
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2566 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '16049.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisor.uat.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentwebsit1.manulife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.groupbenefits.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.uat.gb.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdreg1.test-qa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demanderuneprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eznyreg1.test-qa02.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezusreg1.test-qa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupbenefits.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manuliferates.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manuliferates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifesharepoint.mfcpoc01.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulinksit1.manulife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfatest.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-stg-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlex.pci.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlin.pci.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgagecreditor.uat.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal.uat.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portail.investissements.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psnyreg1.test-qa02.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psusreg1.test-qa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repdomws.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-stg-tmp.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-tmp.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit2.apply.epos.manulife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitmlex.pci.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitmlin.pci.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsor.uat.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tauxmanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tauxmanuvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmp.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.uat.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tripx.prd.coverme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tripx.prd.pourmeproteger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.api.groupbenefits.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.api.manulifesecurities.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.api.placementsmanuvie.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.apply.epos.manulife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.assurance-manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.groupbenefits.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.manulifesecurities.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.manutouch.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.placementsmanuvie.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.portail.investissements.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat1.fasat.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.apply.epos.manulife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatclient.banquemanuvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatclient.manulifebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatdoc.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatm.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatmlex.pci.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatmlin.pci.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatonline.manulifebank.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-stg-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-retail.dev.ext.gwam.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.bank.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.bank.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.cmtcp.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.coverme.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.coverme.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.groupbenefits.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.headless.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.rr.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.travel.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.travel.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.travelb2b.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.travelb2b.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.manulife-travel.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.manulife-travel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.voyagemanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.voyagemanuvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demanderuneprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manuliferates.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manuliferates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tauxmanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tauxmanuvie.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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