manulife.com

- Manulife Financial -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number bb:d1:26:20:65:ef:cc:c1:7e:22:ab:70:a2:61:38:74 was issued on by Sectigo Limited.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Manulife Financial

Organization: Manulife Financial
Organization unit: Enterprise Tech and Services
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): bb:d1:26:20:65:ef:cc:c1:7e:22:ab:70:a2:61:38:74
Serial Number (int): 249651598553627072622226582439947483252
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 57:2c:96:79:92:17:9b:7c:63:e0:f1:e5:7b:ad:0a:4e:73:7a:af:09
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): e2:30:62:74:00:9b:2c:36:4a:08:6f:30:3e:15:8b:12:64:bb:de:33
Fingerprint (sha256): 3f:0f:30:9e:78:0f:e0:09:75:3f:2e:fb:a3:17:ce:bb:04:1c:9c:6b:2e:d3:fd:d1:dd:21:e1:45:c3:fa:c0:75

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate manulife.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for manulife.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

manulife.com
12655.manulife.com
act.manulife.com.sg
adlp.manulife.co.jp
agent.online.manulife.com.ph
agweb.manulife.co.jp
agyipp.manutouch.com.hk
api.preprod.asia.manulife.com
api.prod.asia.manulife.com
awsuat.manulife.com.kh
cpdts.manulife.com.hk
cpdtslt.manulife.com.hk
cws-bff-uat.manulife.com.ph
cws-bff.manulife.com.ph
cws-docs-uat.manulife.com.ph
cws-docs.manulife.com.ph
cws-frontdoor-uat.manulife.com.ph
cws-frontdoor.manulife.com.ph
cws-uat.manulife.com.ph
cws.manulife.com.ph
daiwaaz.manulife.co.jp
e-seikyu.manulife.co.jp
eclaim.manulife.co.id
eclaim.manulife.com.ph
eclaim.manulife.com.sg
eclaim.manulife.com.vn
eseikyu.jp
fa.manuview.sg
gateway-uat.mconnect.manulife.com
gateway.mconnect.manulife.com
idp.mymanulife.com.sg
insttrip.manulife.com
ltpwsdfp.manulife.com.hk
lttesting.mymanulife.com.hk
mamj.co.jp
manulife.co.id
manulife.co.jp
manulife.com.hk
manulife.com.kh
manulife.com.mm
manulife.com.sg
manulife.com.vn
manulifefunds.com.hk
manulifelabuan.com.my
manulinksit1.manulife.co.jp
manulinksit3.manulife.co.jp
manurecruit.sg
manutouch.com.sg
mapps.manulife.com.hk
mappslt.manulife.com.hk
miinfo-uat.manulife.co.id
miinfo.manulife.co.id
mymag.manulife.com.sg
mymfa.com.sg
mymfa.sg
mynumber.reksadana-manulife.com
mypage.manulife.co.jp
qms.manulife.com.sg
qmsdev.manulife.com.sg
seikyu.manulife.co.jp
simulation.manulife.co.jp
uat.nttfacade.manulife.co.jp
uatdoc.manulife.com
www.eseikyu.jp
www.mamj.co.jp
www.manulife.co.id
www.manulife.com.kh
www.manulife.com.mm
www.manulife.com.sg
www.manulifefunds.com.hk
www.manulifelabuan.com.my
www.manurecruit.sg
www.manutouch.com.sg
www.miinfo-uat.manulife.co.id
www.miinfo.manulife.co.id
www.mymag.manulife.com.sg
www.mymanulife.com.sg
www.mymfa.com.sg
www.mymfa.sg
www.preprod.manutouch.com.hk

Other certificates including the domain name manulife.com

(limited to 100 certificates)
mlisxivg01.manulife.com
manulife.com
nasbfepool02.mfcgd.com
mfcentral.manulife.com
api1.np.ca.manulife.com
idwicrmapd01.mlijkt01.manulife.com
manulife.com
manulife.com
aidp.manulife.com
azalvedlwrkdp10.p01eaedl.manulife.com
manulife.com
client.manulifebank.com
rps.jhancock.com
manulife.com
sharepoint-externalpartner.uat.ap.manulife.com
hermes.manulife.com
manulife.com
clbs37841.manulife.com
internal.mesh.test.api.manulife.com
azcedlwrks003.s01caedl.manulife.com
manulife.com
cdcwvjhpwast21.americas.manulife.net
daily.manulife.com.vn
click.e.manulife.com
sft.institutional.manulife.com
johnhancock.com
manulife.com
sts.manulife.com
manulife.com
azslvedlmgtdd01.d01saedl.manulife.com
idwicrmapt21.mlijkt01.manulife.com
idwcasp.ap.manulife.com
mfcentral.manulife.com
manulife.com
view-e-ds.manulife.com
idwelems01.mlijkt01.manulife.com
druglookup-client.manulife.com
mfcentral.manulife.com
sharepoint-externalpartner.uat.ap.manulife.com
www-aem-prod.manulife.ca
insttrip.manulife.com
manulife.com
dbpartners.manulife.com
idwinetapt01.mlijkt01.manulife.com
asiacitrix.manulife.com
arrowonramp.manulife.com
manulife.com
qitsso-uat.manulife.com
manulife.com
sf.cac.internal.mesh.dev.api.manulife.com
manulife.com
giam-qa.manulife.com
manulife.com
cconprem.manulife.com
manulife.com
manulife.com
manulife.com
idp.grsportal.ca.manulife.com
manulife.com
insanalyticsdev01.manulife.com
awsuat.manulife.com.kh
idwiqmtapp01.mlijkt01.manulife.com
johnhancock.com
manulife.com
manulife.com
myasoaibp2.ap.manulife.com
remotejp2.manulife.com
johnhancock.com
sharepoint-int.ap.manulife.com
mlifs900g01.manulife.com
nasbaccess01.manulife.com
jhappsstaging-tst.aks.manulife.com
manulife.com
manulife.com
crverifyidentity-dev.johnhancock.com
manulife.com
jpnhoapt09.japan.corp.manulife.com
client.manulifebank.com
preprod.mtls.api.manulife.com
manulife.com
idwietsisft05.mlijkt01.manulife.com
remotehk.manulife.com
azcedledges001.s01caedl.manulife.com
idwcas4tap.ap.manulife.com
manulife.com
mlixnbarplzvnaca.manulife.com
manulife.com
manulife.com
druglookup-client.manulife.com
pcf.manulife.com
proxy.auw.my.underwriting.manulife.com
manulife.com
johnhancock.com
manulife.com
financeit.devsit202201.manulife.com
tw-ssg-fw1.manulife.com
advisor.manulife.ca
azwapnwasm01.mfcgd.com
azuedldbo01.p01usedl.manulife.com
edge.prod-ext.api.manulife.com

Certificate

The complete raw certificate details for manulife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VC2IjeGuCoeloImy9+/
Yz2lihn3UluJzrVNWhCxEoqvXbPmI7/M9i7ePyF1br4YxSE1i4S7s84GMSAX5NNU
0x8T3bAHOW9ge25nTFB7WP3V9oT4vOr7l04n5bFLt2pjORDsTOqWXXREm2BHnSef
W0AEOqbSijZpA5HtkMgNApBdLN2lWhGy1IdB1loNNZZx0x2v6fwed3PQCkdESxVL
BnVFxZJu7ITLk2peXlH7v7eOO+3K1U2m5v6kAinRqDTXeC3Lgew53vf3BHVVkg5E
7xppsXeqd5hqeNEgMImSBNLnHE2FfQOHKCk1tTy42ubhRNmYiatD+V+2HtOHc4MS
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 249651598553627072622226582439947483252
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise Tech and Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'manulife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30968185020794937779367777644850783582503059747240360465059186263773342283086595441113822356254354986892044784660373976851690878126757391615624402699825181042533255506174372330978321387721019161511117769666709698507941589177235242988081654953493058153069005779266079212480916289164554725224120133670567225308339404790044084554943372224027825190958044855745183708399814916097968043962547985845189592688450290061915379665748178375258852670705176825567935532419664426486569236023938089758764829205306135586909853238559329113499119640786266422195335715832394987886129894501671818449398639662932820198230779858416388215387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							572c967992179b7c63e0f1e57bad0a4e737aaf09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1842 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '12655.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act.manulife.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adlp.manulife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.online.manulife.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agweb.manulife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agyipp.manutouch.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.preprod.asia.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.prod.asia.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awsuat.manulife.com.kh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpdts.manulife.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpdtslt.manulife.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cws-bff-uat.manulife.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cws-bff.manulife.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cws-docs-uat.manulife.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cws-docs.manulife.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cws-frontdoor-uat.manulife.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cws-frontdoor.manulife.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cws-uat.manulife.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cws.manulife.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daiwaaz.manulife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-seikyu.manulife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclaim.manulife.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclaim.manulife.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclaim.manulife.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclaim.manulife.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eseikyu.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fa.manuview.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway-uat.mconnect.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.mconnect.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.mymanulife.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insttrip.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ltpwsdfp.manulife.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lttesting.mymanulife.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mamj.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife.com.kh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife.com.mm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifefunds.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifelabuan.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulinksit1.manulife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulinksit3.manulife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurecruit.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manutouch.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapps.manulife.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mappslt.manulife.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miinfo-uat.manulife.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miinfo.manulife.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymag.manulife.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymfa.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymfa.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynumber.reksadana-manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypage.manulife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qms.manulife.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qmsdev.manulife.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seikyu.manulife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulation.manulife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.nttfacade.manulife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatdoc.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eseikyu.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mamj.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulife.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulife.com.kh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulife.com.mm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulife.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifefunds.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manulifelabuan.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurecruit.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manutouch.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miinfo-uat.manulife.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miinfo.manulife.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymag.manulife.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymanulife.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymfa.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymfa.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.manutouch.com.hk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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