manulife.com

- Manulife Financial Corporation -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 15:49:6a:b2:56:7d:9c:68:68:20:df:27:54:7d:27:49 was issued on by Sectigo Limited.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Manulife Financial Corporation

Organization: Manulife Financial Corporation
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 15:49:6a:b2:56:7d:9c:68:68:20:df:27:54:7d:27:49
Serial Number (int): 28294989646954755551203162784209381193
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: f6:2b:87:89:1d:5a:71:47:a8:0e:06:da:0b:f9:65:20:7c:ee:c3:4a
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 37:b5:6d:9b:86:cf:35:51:0e:da:2c:c2:de:98:4c:41:10:e1:ef:34
Fingerprint (sha256): 3b:f1:9d:df:b0:fa:08:d0:de:4f:52:0d:c3:61:c3:8c:1d:77:e7:ce:89:fe:e3:25:dc:cf:87:4f:44:da:c2:a8

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate manulife.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for manulife.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

manulife.com
16049.manulife.com
advisor.uat.id.manulife.ca
agentwebsit1.manulife.co.jp
ak-edge.preprod-ext.api.manulife.com
ak-edge.prod-ext.api.manulife.com
api.groupbenefits.manulife.ca
api.sit.gb.manulife.com
api.uat.gb.manulife.com
bdreg1.test-qa.net
demanderuneprotection.com
edge.microgateway-ext.dev.cac.microgateway.aks.manulife.com
edge.microgateway-ext.dev.sea.microgateway.aks.manulife.com
edge.microgateway-ext.test.cac.microgateway.aks.manulife.com
edge.microgateway-ext.test.sea.microgateway.aks.manulife.com
eznyreg1.test-qa02.net
ezusreg1.test-qa.net
groupbenefits.manulife.ca
manuliferates.ca
manuliferates.com
manulinksit1.manulife.co.jp
mi-stg-tmp.jhinvestments.com
mi-tmp.jhinvestments.com
mobile.manulife.ca
mortgagecreditor.uat.id.manulife.ca
ondex.manulife.com
ondexx.manulife.com
personal.uat.id.manulife.ca
psnyreg1.test-qa02.net
psusreg1.test-qa.net
registration.manulife.com
retirement-stg-tmp.johnhancock.com
retirement-tmp.johnhancock.com
sit2.apply.epos.manulife.co.jp
sponsor.uat.id.manulife.ca
stg-tmp.jhinvestments.com
stg-tmp.manulifeprivatewealth.com
stg-tmp.manuliferealestatefinance.com
stg.manulifeim.com
tauxmanuvie.ca
tauxmanuvie.com
tmp.jhinvestments.com
tmp.manulifeim.com
tmp.manulifeprivatewealth.com
travel.uat.id.manulife.ca
tripx.prd.coverme.com
tripx.prd.pourmeproteger.com
tripx.uat.pourmeproteger.com
uat.api.groupbenefits.manulife.ca
uat.api.manulifesecurities.manulife.ca
uat.api.placementsmanuvie.manuvie.ca
uat.apply.epos.manulife.co.jp
uat.assurance-manuvie.ca
uat.groupbenefits.manulife.ca
uat.id.manulife.ca
uat.manulife-insurance.ca
uat.manulifesecurities.manulife.ca
uat.manutouch.sg
uat.placementsmanuvie.manuvie.ca
uat2.apply.epos.manulife.co.jp
uatclient.banquemanuvie.com
uatclient.manulifebank.com
uatdoc.manulife.com
uatm.manulife.com
uatonline.manulifebank.ca
ucits-stg-tmp.manulifeim.com
ucits-tmp.manulifeim.com
www-aem-stage.bank.manulife.ca
www-aem-stage.bank.manuvie.ca
www-aem-stage.cmtcp.manulife.ca
www-aem-stage.coverme.manulife.ca
www-aem-stage.coverme.manuvie.ca
www-aem-stage.groupbenefits.manulife.ca
www-aem-stage.headless.manulife.ca
www-aem-stage.manulife.ca
www-aem-stage.manuvie.ca
www-aem-stage.rr.manulife.ca
www-aem-stage.travel.manulife.ca
www-aem-stage.travel.manuvie.ca
www-aem-stage.travelb2b.manulife.ca
www-aem-stage.travelb2b.manuvie.ca
www-uat.manulife-travel.ca
www-uat.manulife-travel.com
www-uat.voyagemanuvie.ca
www-uat.voyagemanuvie.com
www.demanderuneprotection.com
www.manuliferates.ca
www.manuliferates.com
www.tauxmanuvie.ca
www.tauxmanuvie.com

Other certificates including the domain name manulife.com

(limited to 100 certificates)
mlisxivg01.manulife.com
manulife.com
nasbfepool02.mfcgd.com
mfcentral.manulife.com
api1.np.ca.manulife.com
idwicrmapd01.mlijkt01.manulife.com
manulife.com
manulife.com
aidp.manulife.com
azalvedlwrkdp10.p01eaedl.manulife.com
manulife.com
client.manulifebank.com
rps.jhancock.com
manulife.com
sharepoint-externalpartner.uat.ap.manulife.com
hermes.manulife.com
manulife.com
clbs37841.manulife.com
internal.mesh.test.api.manulife.com
azcedlwrks003.s01caedl.manulife.com
manulife.com
cdcwvjhpwast21.americas.manulife.net
daily.manulife.com.vn
click.e.manulife.com
sft.institutional.manulife.com
johnhancock.com
manulife.com
sts.manulife.com
manulife.com
azslvedlmgtdd01.d01saedl.manulife.com
idwicrmapt21.mlijkt01.manulife.com
idwcasp.ap.manulife.com
mfcentral.manulife.com
manulife.com
view-e-ds.manulife.com
idwelems01.mlijkt01.manulife.com
druglookup-client.manulife.com
mfcentral.manulife.com
sharepoint-externalpartner.uat.ap.manulife.com
www-aem-prod.manulife.ca
insttrip.manulife.com
manulife.com
dbpartners.manulife.com
idwinetapt01.mlijkt01.manulife.com
asiacitrix.manulife.com
arrowonramp.manulife.com
manulife.com
qitsso-uat.manulife.com
manulife.com
sf.cac.internal.mesh.dev.api.manulife.com
manulife.com
giam-qa.manulife.com
manulife.com
cconprem.manulife.com
manulife.com
manulife.com
manulife.com
idp.grsportal.ca.manulife.com
manulife.com
insanalyticsdev01.manulife.com
awsuat.manulife.com.kh
idwiqmtapp01.mlijkt01.manulife.com
johnhancock.com
manulife.com
manulife.com
myasoaibp2.ap.manulife.com
remotejp2.manulife.com
johnhancock.com
sharepoint-int.ap.manulife.com
mlifs900g01.manulife.com
nasbaccess01.manulife.com
jhappsstaging-tst.aks.manulife.com
manulife.com
manulife.com
crverifyidentity-dev.johnhancock.com
manulife.com
jpnhoapt09.japan.corp.manulife.com
client.manulifebank.com
preprod.mtls.api.manulife.com
manulife.com
idwietsisft05.mlijkt01.manulife.com
remotehk.manulife.com
azcedledges001.s01caedl.manulife.com
idwcas4tap.ap.manulife.com
manulife.com
mlixnbarplzvnaca.manulife.com
manulife.com
manulife.com
druglookup-client.manulife.com
pcf.manulife.com
proxy.auw.my.underwriting.manulife.com
manulife.com
johnhancock.com
manulife.com
financeit.devsit202201.manulife.com
tw-ssg-fw1.manulife.com
advisor.manulife.ca
azwapnwasm01.mfcgd.com
azuedldbo01.p01usedl.manulife.com
edge.prod-ext.api.manulife.com

Certificate

The complete raw certificate details for manulife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H7W2IMZOXV7tCX6Ssv/
HRBvQWLP2fFtHYtDXpWYivdEITXVeoOeVP6wn+6EtknHr1K7aEN1osKkV/xQMPFg
J2dVUyMx1ZYo5INB4h0k5n7AfupS9SkjMdLHoy+ZNCS5NWLJdAbF6bnj6L4a63+o
bUyzwVgdk8kqBatE65UFJWNEp8LTFOY6kgLtsPHsJXKPRjGc28v20i+17yuYvCB4
EX/R90UCe1md3aehYavK/23ZuOVVAj/FpbbLnQELBkwz9JOXQ4Y3B8R3xw1Sk0rR
Qf510EazLM4e0zTfh7D7MeWeKtSNjCUPeJ7/tyU7rYatJUhelc9fWkGlig7jIefb
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28294989646954755551203162784209381193
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'manulife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28339927073388730776845278970714355164434358603707027740647220795807401862760540773335357717445738793750812898086530020325590562456489455016809641272000197264609732608619108827205648957851643671894500605657371110098726061817155040213149696300173812939069519174363258276955683224393480321509723389172770240022404049975277149269862140559385555877945673560761566162807986084337477017381423008333573666664887195395513894925543930228919116065178741762080059655481458215021930572900844420517168075856425984820940102274839397453053568976552552022818439382010067410950178400704783700454642650333533087910331998037091237223391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f62b87891d5a7147a80e06da0bf965207ceec34a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2643 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '16049.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisor.uat.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentwebsit1.manulife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ak-edge.preprod-ext.api.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ak-edge.prod-ext.api.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.groupbenefits.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.sit.gb.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.uat.gb.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdreg1.test-qa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demanderuneprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.microgateway-ext.dev.cac.microgateway.aks.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.microgateway-ext.dev.sea.microgateway.aks.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.microgateway-ext.test.cac.microgateway.aks.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge.microgateway-ext.test.sea.microgateway.aks.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eznyreg1.test-qa02.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezusreg1.test-qa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupbenefits.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manuliferates.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manuliferates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulinksit1.manulife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-stg-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mortgagecreditor.uat.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondex.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ondexx.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal.uat.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psnyreg1.test-qa02.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psusreg1.test-qa.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registration.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-stg-tmp.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement-tmp.johnhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit2.apply.epos.manulife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsor.uat.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-tmp.manuliferealestatefinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tauxmanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tauxmanuvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmp.jhinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmp.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.uat.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tripx.prd.coverme.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tripx.prd.pourmeproteger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tripx.uat.pourmeproteger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.api.groupbenefits.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.api.manulifesecurities.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.api.placementsmanuvie.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.apply.epos.manulife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.assurance-manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.groupbenefits.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.id.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.manulife-insurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.manulifesecurities.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.manutouch.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.placementsmanuvie.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.apply.epos.manulife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatclient.banquemanuvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatclient.manulifebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatdoc.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatm.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatonline.manulifebank.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-stg-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucits-tmp.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.bank.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.bank.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.cmtcp.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.coverme.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.coverme.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.groupbenefits.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.headless.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.rr.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.travel.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.travel.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.travelb2b.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-aem-stage.travelb2b.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.manulife-travel.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.manulife-travel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.voyagemanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.voyagemanuvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demanderuneprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manuliferates.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manuliferates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tauxmanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tauxmanuvie.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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