jhapps.jhfnjunction.com

- Manulife Financial Corporation -

Issued by COMODO High-Assurance Secure Server CA

About this certificate

This digital certificate with serial number cb:78:ab:7a:fc:b6:50:71:55:1e:26:a4:84:c9:c9:72 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Manulife Financial Corporation

Organization: Manulife Financial Corporation
Organization unit: John Hancock Financial Network
Organization unit: Hosted by The Manufacturers Life Insurance Company
Organization unit: PlatinumSSL
Address: 200 Bloor St. E
Postal code: M4W 1E5
State / Province: Ontario
Locality: Toronto
Country: CA

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): cb:78:ab:7a:fc:b6:50:71:55:1e:26:a4:84:c9:c9:72
Serial Number (int): 270459836803450779544871086148555491698
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: b9:5e:be:f2:d1:74:40:23:0f:4b:dc:01:05:5a:25:6c:e4:42:6a:5e
AuthorityKeyId: 3f:d5:b5:d0:d6:44:79:50:4a:17:a3:9b:8c:4a:dc:b8:b0:22:64:6b

Fingerprint (sha1): f4:5c:4f:26:eb:18:a6:88:a9:33:7b:88:79:6a:9c:11:78:d7:2e:3f
Fingerprint (sha256): 45:90:47:81:4a:48:5c:59:0c:f6:d3:70:c4:6a:d1:d9:ac:e3:5e:3f:93:89:e7:57:50:3e:5f:ad:fa:78:a1:a2

Issuing Certificate URL: http://crt.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crl

Check the revocation status for certificate jhapps.jhfnjunction.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jhapps.jhfnjunction.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jhapps.jhfnjunction.com
www.jhapps.jhfnjunction.com

Other certificates including the domain name jhfnjunction.com

(limited to 100 certificates)
johnhancock.com
jhapps.jhfnjunction.com
myplanuat.johnhancock.com
johnhancock.com
johnhancock.com
myplanuat.johnhancock.com
eai.staging.jhfnjunction.com
bob.dev.jhfnjunction.com
johnhancock.com
bob.jhfnjunction.com
johnhancock.com
www.jhfnjunction.com
johnhancock.com
jhfnjunction.com
johnhancock.com
johnhancock.com
johnhancock.com
jhappsstaginghp.jhfnjunction.com
johnhancock.com
johnhancock.com
jhlink.jhfnjunction.com
bob.stage.jhfnjunction.com
jherppx7.jhancock.com
johnhancock.com
myplan.johnhancock.com
jhappshp.jhfnjunction.com
johnhancock.com
efactfinder.jhfnjunction.com
jhappsstaging.jhfnjunction.com
authoring.jhfnjunction.com
jhappslb.jhfnjunction.com
jhappslb.jhfnjunction.com
johnhancock.com
jhapps.jhfnjunction.com
johnhancock.com
johnhancock.com
stage.inforceillustrationportal.com
johnhancock.com
johnhancock.com
johnhancock.com
www.jhfnjunction.com
johnhancock.com
johnhancock.com
myplanuat.johnhancock.com
myplanuat.johnhancock.com
johnhancock.com
dev1.jhfnjunction.com
staging.jhfnjunction.com
jhappsstaginglb.jhfnjunction.com
johnhancock.com
staging.jhfnjunction.com
myplanuat.johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
myplan.johnhancock.com
jhappsstaging.jhfnjunction.com
johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
myplanuat.johnhancock.com
bob.dev.jhfnjunction.com
jhappsstaginghp.jhfnjunction.com
jhfnjunction.com
jhapps.jhfnjunction.com
johnhancock.com
johnhancock.com
johnhancock.com
jhfnjunction.com
johnhancock.com
www.inforceillustrationportal.com
johnhancock.com
systest2.jhfnjunction.com
dev1.jhfnjunction.com
johnhancock.com
jhfnjunction.com
authoring.jhfnjunction.com
johnhancock.com
bob.dev.jhfnjunction.com
johnhancock.com
johnhancock.com
authoring.jhfnjunction.com
b04erpd02a3.dev.manulifeusa.com
johnhancock.com
staging.jhfnjunction.com
eai.staging.jhfnjunction.com
johnhancock.com
johnhancock.com
johnhancock.com
jhappslb.jhfnjunction.com
johnhancock.com
jhappsstaginghp.jhfnjunction.com
jhappslb.jhfnjunction.com
bcs.dev.jhfnjunction.com
stage.inforceillustrationportal.com
johnhancock.com

Certificate

The complete raw certificate details for jhapps.jhfnjunction.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx15Ez+YA2fuCOwDnnR5
dMmHP/QX810SDHnsw9un6fEMpeIxwQNm05Pi2TMf8Vbqhva1Z7lORI7rFKmMDtvY
Gspdfn6s6aYL+EszAdzsKhvzQsYU8aCfaSbgOh/be3Ye25MCEn/vA5Al/HlfwIDk
4m5JTCG0BG7i1snmP2wxIRr3hpchVbPJZsWRpGWtDyK0AITR+Qgw2kF6IBskkkxv
5aUcgXpy2PMlITV3mb+oD0j5Rn+g0CZ+JpMxmRvObXh4NmxLXFnbDntwqSwe5vTI
lhiVVBQYzS+fR/CZpr0grK1EBNaganCwC+L9Y72SEktfXGe8A5D/bt84Hqn7mC++
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270459836803450779544871086148555491698
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO High-Assurance Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-07-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'M4W 1E5'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toronto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '200 Bloor St. E'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'John Hancock Financial Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by The Manufacturers Life Insurance Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PlatinumSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jhapps.jhfnjunction.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21601283802496733442892089510526482933773350919106139154579618574221121530185455793162331538321338434609349525941254159188027912983034613627275171861860324846470380921775081394039897490108706736036040753393305398829581872594881392868850281525424639284659663894423619167623482222563294048346274580150235116769045975362003015061644851163403411175203215453249741571499973987823666435771354768241355395391704509827411064822002589995085790638507892963563742654677871512169224991343591929185813568565344256293970468000149853898352870611893211424615661725515367724806060996749820467385549788853511986143654947440984140529179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3fd5b5d0d64479504a17a39b8c4adcb8b022646b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b95ebef2d17440230f4bdc01055a256ce4426a5e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODOHigh-AssuranceSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhapps.jhfnjunction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jhapps.jhfnjunction.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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