uatonline.manulifebank.ca
- Manulife Financial -
Issued by Sectigo RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number 03:36:d4:e4:9f:8e:4e:ed:83:19:d4:cc:b0:86:74:c7 was issued on by Sectigo Limited.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Manulife Financial
Organization:
Manulife Financial
Organization unit: Canadian Segment
Organization unit: Canadian Segment
State / Province:
Ontario
Country: CA
Country: CA
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 03:36:d4:e4:9f:8e:4e:ed:83:19:d4:cc:b0:86:74:c7Serial Number (int): 4272386001952812470940884368437441735
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: a4:f8:43:1e:10:a6:2d:84:d1:31:86:dc:b8:e0:3e:98:6e:8f:f3:2a
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb
Fingerprint (sha1): cd:9d:84:45:f7:40:a5:0a:8c:15:28:1d:de:de:fa:3d:43:26:d5:fa
Fingerprint (sha256): 3c:95:ac:f2:04:15:e3:88:89:cd:2b:30:a9:55:de:f0:7e:86:ec:9f:91:f5:1e:e8:04:a5:cf:30:f4:1e:3b:6b
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate uatonline.manulifebank.ca
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for uatonline.manulifebank.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
uatonline.manulifebank.ca
bank-client-site-ui-uat-ext.apps.cac.pcf.manulife.com
bank-client-site-ui-uat-ext.apps.cae.pcf.manulife.com
bank-client-site-ui-uat-ext.apps.cac.pcf.manulife.com
bank-client-site-ui-uat-ext.apps.cae.pcf.manulife.com
Other certificates including the domain name manulifebank.ca
(limited to 100 certificates)
online.manulifebank.ca
manulife.com
manulife.com
www-aem-prod.manulife.ca
manulife.com
manulife.com
client.manulifebank.com
manulife.com
online.manulifebank.ca
www-aem-prod.manulife.ca
manulife.com
uat.statements.manulifebank.ca
manulife.com
manulife.com
manulife.com
manulife.com
client.manulifebank.com
manulife.com
interac.manulifebank.ca
manulife.com
interac-uat.manulifebank.ca
manulife.com
online.manulifebank.ca
manulife.com
manulife.com
manulife.com
interac-uat.manulifebank.ca
client.manulifebank.com
manulife.com
manulifebank.ca
uatonline.manulifebank.ca
manulife.com
client.manulifebank.com
manulife.com
manulife.com
manulife.com
interac.manulifebank.ca
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
www.manulifebank.ca
repsource.ca
repsource.ca
online.manulifebank.ca
manulife.com
manulife.com
client.manulifebank.com
manulife.com
manulife.com
www-aem-prod.manulife.ca
manulife.com
www-aem-prod.manulife.ca
manulife.com
manulife.com
manulife.com
www-aem-prod.manulife.ca
www-aem-prod.manulife.ca
manulife.com
www-aem-prod.manulife.ca
manulife.com
manulife.com
manulife.com
client.manulifebank.com
repsource.ca
manulife.com
manulife.com
manulife.com
uatonline.manulifebank.ca
manulife.com
manulife.com
manulife.com
www-aem-prod.manulife.ca
bank.uat.pcf.lb.manulife.com
manulife.com
manulife.com
uatonline.manulifebank.ca
manulife.com
interac-uat.manulifebank.ca
interac-uat.manulifebank.ca
client.manulifebank.com
manulife.com
manulife.com
manulifebank.ca
manulife.com
manulife.com
www-aem-prod.manulife.ca
www-aem-prod.manulife.ca
interac.manulifebank.ca
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
www-aem-prod.manulife.ca
manulife.com
manulife.com
client.manulifebank.com
manulife.com
online.manulifebank.ca
www-aem-prod.manulife.ca
manulife.com
uat.statements.manulifebank.ca
manulife.com
manulife.com
manulife.com
manulife.com
client.manulifebank.com
manulife.com
interac.manulifebank.ca
manulife.com
interac-uat.manulifebank.ca
manulife.com
online.manulifebank.ca
manulife.com
manulife.com
manulife.com
interac-uat.manulifebank.ca
client.manulifebank.com
manulife.com
manulifebank.ca
uatonline.manulifebank.ca
manulife.com
client.manulifebank.com
manulife.com
manulife.com
manulife.com
interac.manulifebank.ca
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
www.manulifebank.ca
repsource.ca
repsource.ca
online.manulifebank.ca
manulife.com
manulife.com
client.manulifebank.com
manulife.com
manulife.com
www-aem-prod.manulife.ca
manulife.com
www-aem-prod.manulife.ca
manulife.com
manulife.com
manulife.com
www-aem-prod.manulife.ca
www-aem-prod.manulife.ca
manulife.com
www-aem-prod.manulife.ca
manulife.com
manulife.com
manulife.com
client.manulifebank.com
repsource.ca
manulife.com
manulife.com
manulife.com
uatonline.manulifebank.ca
manulife.com
manulife.com
manulife.com
www-aem-prod.manulife.ca
bank.uat.pcf.lb.manulife.com
manulife.com
manulife.com
uatonline.manulifebank.ca
manulife.com
interac-uat.manulifebank.ca
interac-uat.manulifebank.ca
client.manulifebank.com
manulife.com
manulife.com
manulifebank.ca
manulife.com
manulife.com
www-aem-prod.manulife.ca
www-aem-prod.manulife.ca
interac.manulifebank.ca
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
Certificate
The complete raw certificate details for uatonline.manulifebank.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHazCCBlOgAwIBAgIQAzbU5J+OTu2DGdTMsIZ0xzANBgkqhkiG9w0BAQsFADCB lTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMT0wOwYDVQQD EzRTZWN0aWdvIFJTQSBPcmdhbml6YXRpb24gVmFsaWRhdGlvbiBTZWN1cmUgU2Vy dmVyIENBMB4XDTIyMDYwODAwMDAwMFoXDTIzMDYwODIzNTk1OVowezELMAkGA1UE BhMCQ0ExEDAOBgNVBAgTB09udGFyaW8xGzAZBgNVBAoTEk1hbnVsaWZlIEZpbmFu Y2lhbDEZMBcGA1UECxMQQ2FuYWRpYW4gU2VnbWVudDEiMCAGA1UEAxMZdWF0b25s aW5lLm1hbnVsaWZlYmFuay5jYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAObLR5hjukxd4bSypzuJwAIh9DowcVR2SPsRYQc4dO+cgjdOMIZAIKJ5aNH3 CZOWv8aC6ockzlfpKMElDaFTPSQozmWGJW61supPDiQE7BO/1h9mW3rcp3jZz7Lw 8y1EN8CXuB9Ya5mHc06stedQGk6Y0SOoMlqYuA/ltUO+vaNYwTp1e0EB8wCoyKnD leptW3Qg5IODvURElzXMDmomMTHVBkst246PAquRdRE6Y+hrrT9J2g52x9YeU9/b wsn2K8j5a+AJEdX/iHwRPJYOzmnYfFLx+noLGWGgAckgMPJ65Gqr8SDC937zGpAs uQu8h1KVcOb7OiCR4Ayo5gUEKikCAwEAAaOCA84wggPKMB8GA1UdIwQYMBaAFBfZ 1iUnZ/kxwklD2TA2RIxsqU/rMB0GA1UdDgQWBBSk+EMeEKYthNExhty44D6Ybo/z KjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwSgYDVR0gBEMwQTA1BgwrBgEEAbIxAQIBAwQwJTAjBggr BgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQICMFoGA1Ud HwRTMFEwT6BNoEuGSWh0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2VjdGlnb1JTQU9y Z2FuaXphdGlvblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcmwwgYoGCCsGAQUF BwEBBH4wfDBVBggrBgEFBQcwAoZJaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0 aWdvUlNBT3JnYW5pemF0aW9uVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAj BggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wggF9BgorBgEEAdZ5 AgQCBIIBbQSCAWkBZwB1AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKK AAABgUNhAA4AAAQDAEYwRAIgXvzahdf6k6YeN1NeTtuOD9x1dSbQlHwxXitIetGo LPoCICYFD6bE6hXucRSpqcB1hud1/uJmwyAoV4hsxkuYEFlMAHUAejKMVNi3LbYg 6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGBQ2EAGgAABAMARjBEAiBngAGc/ZJr 1xM+quKQsSRUt7qfMHLp3iuhHbxNRUAKtQIgLUSGqOr+HmWdkwa4hu9A3ePLIE0E CbGmT6mnidgQB/AAdwDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAA AYFDYP/uAAAEAwBIMEYCIQC3+WfSh64SEqHjh5IQE669HlRrwmi2fEeskNayIlvx uAIhAJCmFmlDvt1fXx2iUDbNs75BvDPeEyYoo1oYbBPZ8XlFMIGUBgNVHREEgYww gYmCGXVhdG9ubGluZS5tYW51bGlmZWJhbmsuY2GCNWJhbmstY2xpZW50LXNpdGUt dWktdWF0LWV4dC5hcHBzLmNhYy5wY2YubWFudWxpZmUuY29tgjViYW5rLWNsaWVu dC1zaXRlLXVpLXVhdC1leHQuYXBwcy5jYWUucGNmLm1hbnVsaWZlLmNvbTANBgkq hkiG9w0BAQsFAAOCAQEABNISRVNWIcNMWzeWqo7169+baf1PqzFCLwKkCHd4CU+d p1TmZw5U+V+dMRjfoUkVdsnA1Tu0I6XanauGzIKeMEkmpbec52OLm5mE06QzHq6S mezOT0Qx6GEO8qWrnceirVI5fNk5l2E7QXfIy3Bm3v17HZo+Q5pM94eHgekL3hFZ GXhZtoegrn0W0exl0KR2wugPjJzTLabSLdpqiWVOBbv7bMjMzwv5YbvI2H+H1IIN HJmeYpCFuro6XrLQq+hu4uUwquyiPWkaayiuBvGLVevz1FeMF9jrzJic8Nhv/bkT HT907Zxghwpc2aYA1d/OOSnZ82+6aMo4IuZvGKCtSQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5stHmGO6TF3htLKnO4nA AiH0OjBxVHZI+xFhBzh075yCN04whkAgonlo0fcJk5a/xoLqhyTOV+kowSUNoVM9 JCjOZYYlbrWy6k8OJATsE7/WH2ZbetyneNnPsvDzLUQ3wJe4H1hrmYdzTqy151Aa TpjRI6gyWpi4D+W1Q769o1jBOnV7QQHzAKjIqcOV6m1bdCDkg4O9RESXNcwOaiYx MdUGSy3bjo8Cq5F1ETpj6GutP0naDnbH1h5T39vCyfYryPlr4AkR1f+IfBE8lg7O adh8UvH6egsZYaABySAw8nrkaqvxIML3fvMakCy5C7yHUpVw5vs6IJHgDKjmBQQq KQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4272386001952812470940884368437441735 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canadian Segment' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uatonline.manulifebank.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29135051083023289675068554537314870650616707679932241737841452831746060806012943658831536190298714152861759744866403383759849691638890291322035697047647757754130371262706997237552585132583836184930380937372922046030433604155706364386301090153966199800367516872352426637409361600900205827466243547656040343874855924363441862510798555384888576059770701394773614628334406693753430958874326192692055225074317462138871574330144260488281687812438197626930346035351480260533177210175771063375846023015277975466708435047059431837418039391173406626991324392492952616558590212206629170152103634408346355360728311791119814109737 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a4f8431e10a62d84d13186dcb8e03e986e8ff32a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatonline.manulifebank.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bank-client-site-ui-uat-ext.apps.cac.pcf.manulife.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bank-client-site-ui-uat-ext.apps.cae.pcf.manulife.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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