manulife.com

- Manulife Financial Corporation -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number d6:93:c3:3e:70:3f:1d:1c:6a:8a:37:64:de:96:8a:22 was issued on by Sectigo Limited.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Manulife Financial Corporation

Organization: Manulife Financial Corporation
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): d6:93:c3:3e:70:3f:1d:1c:6a:8a:37:64:de:96:8a:22
Serial Number (int): 285222018752934025322370510414052493858
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 1c:13:d9:f2:e2:3c:a8:6d:c6:1e:1c:44:60:f5:7b:11:f8:61:d0:46
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): dc:3e:00:0e:48:92:4b:77:af:61:48:6c:c4:6b:b0:cb:31:37:db:61
Fingerprint (sha256): 41:c0:6e:98:95:96:bf:87:c9:b7:1c:f6:11:3f:d2:cc:c2:30:d9:b0:10:9b:a4:25:f4:c6:f9:2f:69:8f:09:48

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate manulife.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for manulife.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

manulife.com
10014.manulife.com
agrssponsors.manulife.com
aidp.manulife.com
api.manulifesecurities.manulife.ca
api.placementsmanuvie.manuvie.ca
api.portal.manulife.ca
appraisals-test.manulife.com
appraisals.manulife.com
attestuat.manulife.com
aviproom.manulife.com
banquescotia.monprochainchapitre.ca
canadiancommercialmortgages.manulife.com
cdd-dev.manulife.com
cdd-prod.manulife.com
cdd-uat.manulife.com
cdncetdvcacicfrtr.manulife.io
cdncetprcacicaafnapp.manulife.io
cdncetprcacicfrtr.manulife.io
cloud.mesh.preprod.api.manulife.com
cpuat.manulifeprivatewealth.com
cusc.manulife.com
disability.gb.manulife.ca
faspexdev.manulife.com
grssofmo.manulife.com
grssponsors.manulife.com
idp.manulife.com
igoinsured.com
isctapi-uat.external.manulife.com
login.manulifeghnw.com
m.manulife.com
m.manuvie.com
manulifepromos.com
manulifesecurities.manulife.ca
manuvie.ca
member.disability-uat.gb.manulife.ca
member.disability.gb.manulife.ca
mfcentralqa.manulife.com
mfcentralstage.manulife.com
monprochainchapitre.ca
myflexbenefitsdemo.manulife.com
mynextchapter.ca
mysolutionsonline.manulife.ca
mysolutionsonline.manuvie.ca
nav.manulifeim.com
placementsmanuvie.manuvie.ca
portail.assurance.manuvie.ca
portal.insurance.manulife.ca
portal.investments.manulife.ca
prod.mysolutionsonline.manulife.ca
prod.mysolutionsonline.manuvie.ca
repsource.manulife.com
repsourcepublic.manulife.com
retirementredefined.ca
retirementredefined.manulife.ca
retraiteredefinie.ca
retraiteredefinie.manuvie.ca
scotiabank.mynextchapter.ca
secureigaz.manulife.ca
secureigazuat.manulife.ca
sit.igoinsured.com
sit6.fasat.manulife.ca
sponsor.disability-uat.gb.manulife.ca
sponsor.disability.gb.manulife.ca
stage.api.portal.manulife.ca
stage.cusc.manulife.com
stage.login.manulifeghnw.com
stage.mysolutionsonline.manulife.ca
stage.mysolutionsonline.manuvie.ca
stg-nav.manulifeim.com
techconnect.manulife.com
test.cusc.manulife.com
uat-repsource.manulife.com
uat.banquescotia.monprochainchapitre.ca
uat.fasat.manulife.ca
uat.igoinsured.com
uat.mobile.manulife.ca
uat.monprochainchapitre.ca
uat.mynextchapter.ca
uat.portal.investments.manulife.ca
uat.pot.manulife.ca
uat.scotiabank.mynextchapter.ca
view-e-ds-t1.manulife.com
view-e-ds.manulife.com
viproom.manulife.com
web.manulife.com
www-uat.assurancevoyagemanuvie.ca
www-uat.manulifetravelinsurance.ca
www.appraisals-test.manulife.com
www.appraisals.manulife.com
www.canadiancommercialmortgages.manulife.com
www.cusc.manulife.com
www.igoinsured.com
www.login.manulifeghnw.com
www.mfc.com
www.monprochainchapitre.ca
www.mynextchapter.ca
www.retirementredefined.ca
www.retraiteredefinie.ca

Other certificates including the domain name manulife.com

(limited to 100 certificates)
mlisxivg01.manulife.com
manulife.com
nasbfepool02.mfcgd.com
mfcentral.manulife.com
api1.np.ca.manulife.com
idwicrmapd01.mlijkt01.manulife.com
manulife.com
manulife.com
aidp.manulife.com
azalvedlwrkdp10.p01eaedl.manulife.com
manulife.com
client.manulifebank.com
rps.jhancock.com
manulife.com
sharepoint-externalpartner.uat.ap.manulife.com
hermes.manulife.com
manulife.com
clbs37841.manulife.com
internal.mesh.test.api.manulife.com
azcedlwrks003.s01caedl.manulife.com
manulife.com
cdcwvjhpwast21.americas.manulife.net
daily.manulife.com.vn
click.e.manulife.com
sft.institutional.manulife.com
johnhancock.com
manulife.com
sts.manulife.com
manulife.com
azslvedlmgtdd01.d01saedl.manulife.com
idwicrmapt21.mlijkt01.manulife.com
idwcasp.ap.manulife.com
mfcentral.manulife.com
manulife.com
view-e-ds.manulife.com
idwelems01.mlijkt01.manulife.com
druglookup-client.manulife.com
mfcentral.manulife.com
sharepoint-externalpartner.uat.ap.manulife.com
www-aem-prod.manulife.ca
insttrip.manulife.com
manulife.com
dbpartners.manulife.com
idwinetapt01.mlijkt01.manulife.com
asiacitrix.manulife.com
arrowonramp.manulife.com
manulife.com
qitsso-uat.manulife.com
manulife.com
sf.cac.internal.mesh.dev.api.manulife.com
manulife.com
giam-qa.manulife.com
manulife.com
cconprem.manulife.com
manulife.com
manulife.com
manulife.com
idp.grsportal.ca.manulife.com
manulife.com
insanalyticsdev01.manulife.com
awsuat.manulife.com.kh
idwiqmtapp01.mlijkt01.manulife.com
johnhancock.com
manulife.com
manulife.com
myasoaibp2.ap.manulife.com
remotejp2.manulife.com
johnhancock.com
sharepoint-int.ap.manulife.com
mlifs900g01.manulife.com
nasbaccess01.manulife.com
jhappsstaging-tst.aks.manulife.com
manulife.com
manulife.com
crverifyidentity-dev.johnhancock.com
manulife.com
jpnhoapt09.japan.corp.manulife.com
client.manulifebank.com
preprod.mtls.api.manulife.com
manulife.com
idwietsisft05.mlijkt01.manulife.com
remotehk.manulife.com
azcedledges001.s01caedl.manulife.com
idwcas4tap.ap.manulife.com
manulife.com
mlixnbarplzvnaca.manulife.com
manulife.com
manulife.com
druglookup-client.manulife.com
pcf.manulife.com
proxy.auw.my.underwriting.manulife.com
manulife.com
johnhancock.com
manulife.com
financeit.devsit202201.manulife.com
tw-ssg-fw1.manulife.com
advisor.manulife.ca
azwapnwasm01.mfcgd.com
azuedldbo01.p01usedl.manulife.com
edge.prod-ext.api.manulife.com

Certificate

The complete raw certificate details for manulife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIRVTCCED2gAwIBAgIRANaTwz5wPx0caoo3ZN6WiiIwDQYJKoZIhvcNAQELBQAw
gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE
AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl
cnZlciBDQTAeFw0yNDAyMjEwMDAwMDBaFw0yNTAyMjAyMzU5NTlaMF8xCzAJBgNV
BAYTAkNBMRAwDgYDVQQIEwdPbnRhcmlvMScwJQYDVQQKEx5NYW51bGlmZSBGaW5h
bmNpYWwgQ29ycG9yYXRpb24xFTATBgNVBAMTDG1hbnVsaWZlLmNvbTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAPoY/tfNUof2SHo7U6hbwbBGmzANIgVv
5bI+Tv00/wyrOQxJjaXfIXPlLakLkifHBAJPIWNCuxfExQZ4pSDw7Y8bLoymcKls
YsZXjOHiQS20Rx1r8H9ydkNTeHDge7kbboueMrYgE7gdClEH8F4+tX+bhZ1+lVbl
flTjDTi8c6SMAz/Q8/dWZYNttonhdZpS82pie3lKG0n7Z+Qkrjpkvf6gBAJaSC6f
tmY+KRRAmVusHJfXtlvqSamnmIB8v4JZrLEEfELkwWS5XqMvlucB7L7ZKaPtg2Gr
niDhohrMlgNmPHNXnzALnOhtlnZQ9s6766C4njiRNOdY6MBuW5ScsEsCAwEAAaOC
DdMwgg3PMB8GA1UdIwQYMBaAFBfZ1iUnZ/kxwklD2TA2RIxsqU/rMB0GA1UdDgQW
BBQcE9ny4jyobcYeHERg9XsR+GHQRjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/
BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSgYDVR0gBEMwQTA1
BgwrBgEEAbIxAQIBAwQwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNv
bS9DUFMwCAYGZ4EMAQICMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9jcmwuc2Vj
dGlnby5jb20vU2VjdGlnb1JTQU9yZ2FuaXphdGlvblZhbGlkYXRpb25TZWN1cmVT
ZXJ2ZXJDQS5jcmwwgYoGCCsGAQUFBwEBBH4wfDBVBggrBgEFBQcwAoZJaHR0cDov
L2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBT3JnYW5pemF0aW9uVmFsaWRhdGlv
blNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2Vj
dGlnby5jb20wggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AM8RVu7VLnyv84db
2Wkum+kacWdKsBfsrAHSW3fOzDsIAAABjcllIvsAAAQDAEcwRQIhAJaWSVMVHmbz
trTva5SUB52fukLc3brZ1Ak0NAfUEeQ9AiByR6ksZBwdjc04anQukw0DtxBm0xmP
4t+bjLVIG7F8fgB2AKLjCuRF772tm3447Udnd1PXgluElNcrXhssxLlQpEfnAAAB
jcllI7wAAAQDAEcwRQIhAK10pSRH16NAlG0srM0YxpR5fZaQGPEuSOSaXzKxJuQ/
AiBR/9SYFlDQ9aadnKqISQq4OCYfzdkCJ7bHFKGn2V9GlAB1AE51oydcmhDDOFts
1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABjcllIzAAAAQDAEYwRAIgDybXYGYK39NE
0fU3Lx3fByIiLFehRwNHvr7HchhP5bECIGhkbczrwMoMaZU5K11iJis3mwdqyNtl
NKAqujT+NqMtMIIKmAYDVR0RBIIKjzCCCouCDG1hbnVsaWZlLmNvbYISMTAwMTQu
bWFudWxpZmUuY29tghlhZ3Jzc3BvbnNvcnMubWFudWxpZmUuY29tghFhaWRwLm1h
bnVsaWZlLmNvbYIiYXBpLm1hbnVsaWZlc2VjdXJpdGllcy5tYW51bGlmZS5jYYIg
YXBpLnBsYWNlbWVudHNtYW51dmllLm1hbnV2aWUuY2GCFmFwaS5wb3J0YWwubWFu
dWxpZmUuY2GCHGFwcHJhaXNhbHMtdGVzdC5tYW51bGlmZS5jb22CF2FwcHJhaXNh
bHMubWFudWxpZmUuY29tghZhdHRlc3R1YXQubWFudWxpZmUuY29tghVhdmlwcm9v
bS5tYW51bGlmZS5jb22CI2JhbnF1ZXNjb3RpYS5tb25wcm9jaGFpbmNoYXBpdHJl
LmNhgihjYW5hZGlhbmNvbW1lcmNpYWxtb3J0Z2FnZXMubWFudWxpZmUuY29tghRj
ZGQtZGV2Lm1hbnVsaWZlLmNvbYIVY2RkLXByb2QubWFudWxpZmUuY29tghRjZGQt
dWF0Lm1hbnVsaWZlLmNvbYIdY2RuY2V0ZHZjYWNpY2ZydHIubWFudWxpZmUuaW+C
IGNkbmNldHByY2FjaWNhYWZuYXBwLm1hbnVsaWZlLmlvgh1jZG5jZXRwcmNhY2lj
ZnJ0ci5tYW51bGlmZS5pb4IjY2xvdWQubWVzaC5wcmVwcm9kLmFwaS5tYW51bGlm
ZS5jb22CH2NwdWF0Lm1hbnVsaWZlcHJpdmF0ZXdlYWx0aC5jb22CEWN1c2MubWFu
dWxpZmUuY29tghlkaXNhYmlsaXR5LmdiLm1hbnVsaWZlLmNhghZmYXNwZXhkZXYu
bWFudWxpZmUuY29tghVncnNzb2Ztby5tYW51bGlmZS5jb22CGGdyc3Nwb25zb3Jz
Lm1hbnVsaWZlLmNvbYIQaWRwLm1hbnVsaWZlLmNvbYIOaWdvaW5zdXJlZC5jb22C
IWlzY3RhcGktdWF0LmV4dGVybmFsLm1hbnVsaWZlLmNvbYIWbG9naW4ubWFudWxp
ZmVnaG53LmNvbYIObS5tYW51bGlmZS5jb22CDW0ubWFudXZpZS5jb22CEm1hbnVs
aWZlcHJvbW9zLmNvbYIebWFudWxpZmVzZWN1cml0aWVzLm1hbnVsaWZlLmNhggpt
YW51dmllLmNhgiRtZW1iZXIuZGlzYWJpbGl0eS11YXQuZ2IubWFudWxpZmUuY2GC
IG1lbWJlci5kaXNhYmlsaXR5LmdiLm1hbnVsaWZlLmNhghhtZmNlbnRyYWxxYS5t
YW51bGlmZS5jb22CG21mY2VudHJhbHN0YWdlLm1hbnVsaWZlLmNvbYIWbW9ucHJv
Y2hhaW5jaGFwaXRyZS5jYYIfbXlmbGV4YmVuZWZpdHNkZW1vLm1hbnVsaWZlLmNv
bYIQbXluZXh0Y2hhcHRlci5jYYIdbXlzb2x1dGlvbnNvbmxpbmUubWFudWxpZmUu
Y2GCHG15c29sdXRpb25zb25saW5lLm1hbnV2aWUuY2GCEm5hdi5tYW51bGlmZWlt
LmNvbYIccGxhY2VtZW50c21hbnV2aWUubWFudXZpZS5jYYIccG9ydGFpbC5hc3N1
cmFuY2UubWFudXZpZS5jYYIccG9ydGFsLmluc3VyYW5jZS5tYW51bGlmZS5jYYIe
cG9ydGFsLmludmVzdG1lbnRzLm1hbnVsaWZlLmNhgiJwcm9kLm15c29sdXRpb25z
b25saW5lLm1hbnVsaWZlLmNhgiFwcm9kLm15c29sdXRpb25zb25saW5lLm1hbnV2
aWUuY2GCFnJlcHNvdXJjZS5tYW51bGlmZS5jb22CHHJlcHNvdXJjZXB1YmxpYy5t
YW51bGlmZS5jb22CFnJldGlyZW1lbnRyZWRlZmluZWQuY2GCH3JldGlyZW1lbnRy
ZWRlZmluZWQubWFudWxpZmUuY2GCFHJldHJhaXRlcmVkZWZpbmllLmNhghxyZXRy
YWl0ZXJlZGVmaW5pZS5tYW51dmllLmNhghtzY290aWFiYW5rLm15bmV4dGNoYXB0
ZXIuY2GCFnNlY3VyZWlnYXoubWFudWxpZmUuY2GCGXNlY3VyZWlnYXp1YXQubWFu
dWxpZmUuY2GCEnNpdC5pZ29pbnN1cmVkLmNvbYIWc2l0Ni5mYXNhdC5tYW51bGlm
ZS5jYYIlc3BvbnNvci5kaXNhYmlsaXR5LXVhdC5nYi5tYW51bGlmZS5jYYIhc3Bv
bnNvci5kaXNhYmlsaXR5LmdiLm1hbnVsaWZlLmNhghxzdGFnZS5hcGkucG9ydGFs
Lm1hbnVsaWZlLmNhghdzdGFnZS5jdXNjLm1hbnVsaWZlLmNvbYIcc3RhZ2UubG9n
aW4ubWFudWxpZmVnaG53LmNvbYIjc3RhZ2UubXlzb2x1dGlvbnNvbmxpbmUubWFu
dWxpZmUuY2GCInN0YWdlLm15c29sdXRpb25zb25saW5lLm1hbnV2aWUuY2GCFnN0
Zy1uYXYubWFudWxpZmVpbS5jb22CGHRlY2hjb25uZWN0Lm1hbnVsaWZlLmNvbYIW
dGVzdC5jdXNjLm1hbnVsaWZlLmNvbYIadWF0LXJlcHNvdXJjZS5tYW51bGlmZS5j
b22CJ3VhdC5iYW5xdWVzY290aWEubW9ucHJvY2hhaW5jaGFwaXRyZS5jYYIVdWF0
LmZhc2F0Lm1hbnVsaWZlLmNhghJ1YXQuaWdvaW5zdXJlZC5jb22CFnVhdC5tb2Jp
bGUubWFudWxpZmUuY2GCGnVhdC5tb25wcm9jaGFpbmNoYXBpdHJlLmNhghR1YXQu
bXluZXh0Y2hhcHRlci5jYYIidWF0LnBvcnRhbC5pbnZlc3RtZW50cy5tYW51bGlm
ZS5jYYITdWF0LnBvdC5tYW51bGlmZS5jYYIfdWF0LnNjb3RpYWJhbmsubXluZXh0
Y2hhcHRlci5jYYIZdmlldy1lLWRzLXQxLm1hbnVsaWZlLmNvbYIWdmlldy1lLWRz
Lm1hbnVsaWZlLmNvbYIUdmlwcm9vbS5tYW51bGlmZS5jb22CEHdlYi5tYW51bGlm
ZS5jb22CIXd3dy11YXQuYXNzdXJhbmNldm95YWdlbWFudXZpZS5jYYIid3d3LXVh
dC5tYW51bGlmZXRyYXZlbGluc3VyYW5jZS5jYYIgd3d3LmFwcHJhaXNhbHMtdGVz
dC5tYW51bGlmZS5jb22CG3d3dy5hcHByYWlzYWxzLm1hbnVsaWZlLmNvbYIsd3d3
LmNhbmFkaWFuY29tbWVyY2lhbG1vcnRnYWdlcy5tYW51bGlmZS5jb22CFXd3dy5j
dXNjLm1hbnVsaWZlLmNvbYISd3d3Lmlnb2luc3VyZWQuY29tghp3d3cubG9naW4u
bWFudWxpZmVnaG53LmNvbYILd3d3Lm1mYy5jb22CGnd3dy5tb25wcm9jaGFpbmNo
YXBpdHJlLmNhghR3d3cubXluZXh0Y2hhcHRlci5jYYIad3d3LnJldGlyZW1lbnRy
ZWRlZmluZWQuY2GCGHd3dy5yZXRyYWl0ZXJlZGVmaW5pZS5jYTANBgkqhkiG9w0B
AQsFAAOCAQEAGMYbqGynx4GNGCDQVqjyyd6a77VcFNg7pTcCArcjXcfOIsw7Cuyj
363H9ZK+l1qwL6vYH6VQiuY6BDJ80xvxQ96Rf5MZtoTQNDJK87JP1M4JYSoDT2X/
krmYFTLdnk3oQA1H4uyd+C15AeqGELqYEIrioFBEhk7Dbi/A+CB80jCNmNmIu1/r
3pFvOAnXR47w8yRYz5g9xvGoEC0SExBL8YvcqCuWNRPywXXEnoKiMzpt683C2sGd
PID59pg1BcEjdP4LS0tnyPLRDIEwKDWdKUq0JkFfbXgGcYJDm5IiIros3TgGMlBj
EX8Ije7W5EmO/GgEsaeABPaw06ZCFHENbQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+hj+181Sh/ZIejtTqFvB
sEabMA0iBW/lsj5O/TT/DKs5DEmNpd8hc+UtqQuSJ8cEAk8hY0K7F8TFBnilIPDt
jxsujKZwqWxixleM4eJBLbRHHWvwf3J2Q1N4cOB7uRtui54ytiATuB0KUQfwXj61
f5uFnX6VVuV+VOMNOLxzpIwDP9Dz91Zlg222ieF1mlLzamJ7eUobSftn5CSuOmS9
/qAEAlpILp+2Zj4pFECZW6wcl9e2W+pJqaeYgHy/glmssQR8QuTBZLleoy+W5wHs
vtkpo+2DYaueIOGiGsyWA2Y8c1efMAuc6G2WdlD2zrvroLieOJE051jowG5blJyw
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285222018752934025322370510414052493858
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'manulife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31571901972275233376197630976825582136002903373519445133824803076014471909697290776193922138028809260306553415331673386814275572741499942412186584790611730573683979944833121805818336083451733657227702759402664657788675896718141522098724670026081142090694264902761483368170802205373082182822208893957865316450733300386714469228544796400381901769524328196880290800419750904218882449960024698017139229390566730748578610139708678420108483252547828956466994355867843721798167892969138129690355181354467215264110824934967540925014453849316861238444895848531043098740400048372424938839764670713492589287832117765415223734347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c13d9f2e23ca86dc61e1c4460f57b11f861d046
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018dc96522fb000004030047304502210096964953151e66f3b6b4ef6b9494079d9fba42dcddbad9d409343407d411e43d02207247a92c641c1d8dcd386a742e930d03b71066d3198fe2df9b8cb5481bb17c7e007600a2e30ae445efbdad9b7e38ed47677753d7825b8494d72b5e1b2cc4b950a447e70000018dc96523bc0000040300473045022100ad74a52447d7a340946d2caccd18c694797d969018f12e48e49a5f32b126e43f022051ffd4981650d0f5a69d9caa88490ab838261fcdd90227b6c714a1a7d95f46940075004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018dc9652330000004030046304402200f26d760660adfd344d1f5372f1ddf0722222c57a1470347bebec772184fe5b1022068646dccebc0ca0c6995392b5d62262b379b076ac8db6534a02aba34fe36a32d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2703 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10014.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrssponsors.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aidp.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.manulifesecurities.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.placementsmanuvie.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.portal.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisals-test.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisals.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attestuat.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviproom.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banquescotia.monprochainchapitre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadiancommercialmortgages.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdd-dev.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdd-prod.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdd-uat.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdncetdvcacicfrtr.manulife.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdncetprcacicaafnapp.manulife.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdncetprcacicfrtr.manulife.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.mesh.preprod.api.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpuat.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cusc.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disability.gb.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faspexdev.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grssofmo.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grssponsors.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igoinsured.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isctapi-uat.external.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.manulifeghnw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.manuvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifepromos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifesecurities.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'member.disability-uat.gb.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'member.disability.gb.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfcentralqa.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfcentralstage.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monprochainchapitre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myflexbenefitsdemo.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynextchapter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysolutionsonline.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysolutionsonline.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nav.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placementsmanuvie.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portail.assurance.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.insurance.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.investments.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.mysolutionsonline.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.mysolutionsonline.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repsource.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repsourcepublic.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirementredefined.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirementredefined.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retraiteredefinie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retraiteredefinie.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotiabank.mynextchapter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureigaz.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureigazuat.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit.igoinsured.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit6.fasat.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsor.disability-uat.gb.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sponsor.disability.gb.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.api.portal.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.cusc.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.login.manulifeghnw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.mysolutionsonline.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.mysolutionsonline.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-nav.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techconnect.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cusc.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-repsource.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.banquescotia.monprochainchapitre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.fasat.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.igoinsured.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.mobile.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.monprochainchapitre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.mynextchapter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.portal.investments.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.pot.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.scotiabank.mynextchapter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view-e-ds-t1.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'view-e-ds.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viproom.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.assurancevoyagemanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.manulifetravelinsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appraisals-test.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appraisals.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadiancommercialmortgages.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cusc.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igoinsured.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.login.manulifeghnw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monprochainchapitre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mynextchapter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retirementredefined.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retraiteredefinie.ca'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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