manulife.com

- Manulife Financial -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number e3:72:08:ee:fb:52:92:f4:cf:1e:56:40:35:77:fd:4c was issued on by Sectigo Limited.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Manulife Financial

Organization: Manulife Financial
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): e3:72:08:ee:fb:52:92:f4:cf:1e:56:40:35:77:fd:4c
Serial Number (int): 302326858078408944470894943951144877388
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9b:37:6d:9f:d6:2c:f1:3e:0b:f1:eb:02:9b:52:7b:f5:a4:7a:ed:ef
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): a0:15:c7:ec:51:2f:11:6d:20:c9:86:35:71:06:bb:b6:3b:f6:8b:47
Fingerprint (sha256): 4d:78:fb:99:83:85:0b:d7:cd:e2:d9:7a:3f:79:98:ff:d2:b0:99:61:f5:0f:1d:f7:91:a2:6b:4b:da:4f:3d:18

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate manulife.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for manulife.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

manulife.com
10014.manulife.com
agrssponsors.manulife.com
aidp.manulife.com
api.manulifesecurities.manulife.ca
api.placementsmanuvie.manuvie.ca
api.portal.manulife.ca
appraisals-test.manulife.com
appraisals.manulife.com
attestuat.manulife.com
aviproom.manulife.com
banquescotia.monprochainchapitre.ca
canadiancommercialmortgages.manulife.com
cdd-dev.manulife.com
cdd-prod.manulife.com
cdd-uat.manulife.com
cdncetdvcacicfrtr.manulife.io
cdncetprcacicaafnapp.manulife.io
cdncetprcacicfrtr.manulife.io
cloud.mesh.preprod.api.manulife.com
cp.manulifeprivatewealth.com
cpuat.manulifeprivatewealth.com
cusc.manulife.com
dr.api.manulifesecurities.manulife.ca
dr.api.portal.manulife.ca
edi-hotfix.manulife.ca
edi-preprod.manulife.ca
edi-staging.manulife.ca
edi-stagingx.manulife.ca
edi-uat.manulife.ca
edi-uatx.manulife.ca
edi.manulife.ca
edocs-bff.manulifeim.ca
edocs-uat-bff.manulifeim.ca
edocs-uat.manulifeim.ca
edocs.manulifeim.ca
enter.manulife.com
enteruat.manulife.com
grssofmo.manulife.com
grssponsors.manulife.com
idp.manulife.com
landing.manulifeprivatewealth.com
login.manulifeghnw.com
m.manulife.com
m.manuvie.com
manulife.ca
manulifesecurities.manulife.ca
manuvie.ca
mfc.com
mfcentralqa.manulife.com
mfcentralstage.manulife.com
monprochainchapitre.ca
mynextchapter.ca
mysolutionsonline.manulife.ca
mysolutionsonline.manuvie.ca
nav.manulifeim.com
placementsmanuvie.manuvie.ca
portail.assurance.manuvie.ca
portal.insurance.manulife.ca
prod.mysolutionsonline.manulife.ca
prod.mysolutionsonline.manuvie.ca
repsource.manulife.com
repsourcepublic.manulife.com
retirementredefined.ca
retirementredefined.manulife.ca
retraiteredefinie.ca
retraiteredefinie.manuvie.ca
scotiabank.mynextchapter.ca
secureigaz.manulife.ca
secureigazuat.manulife.ca
stage.api.portal.manulife.ca
stage.cusc.manulife.com
stage.login.manulifeghnw.com
stage.mysolutionsonline.manulife.ca
stage.mysolutionsonline.manuvie.ca
stg-nav.manulifeim.com
techconnect.manulife.com
test.cusc.manulife.com
uat.banquescotia.monprochainchapitre.ca
uat.monprochainchapitre.ca
uat.mynextchapter.ca
uat.pot.manulife.ca
uat.scotiabank.mynextchapter.ca
uls-meud.manulife.com
viproom.manulife.com
web.manulife.com
www.appraisals-test.manulife.com
www.appraisals.manulife.com
www.canadiancommercialmortgages.manulife.com
www.cusc.manulife.com
www.login.manulifeghnw.com
www.mfc.com
www.monprochainchapitre.ca
www.mynextchapter.ca
www.retirementredefined.ca
www.retraiteredefinie.ca

Other certificates including the domain name manulife.com

(limited to 100 certificates)
mlisxivg01.manulife.com
manulife.com
nasbfepool02.mfcgd.com
mfcentral.manulife.com
api1.np.ca.manulife.com
idwicrmapd01.mlijkt01.manulife.com
manulife.com
manulife.com
aidp.manulife.com
azalvedlwrkdp10.p01eaedl.manulife.com
manulife.com
client.manulifebank.com
rps.jhancock.com
manulife.com
sharepoint-externalpartner.uat.ap.manulife.com
hermes.manulife.com
manulife.com
clbs37841.manulife.com
internal.mesh.test.api.manulife.com
azcedlwrks003.s01caedl.manulife.com
manulife.com
cdcwvjhpwast21.americas.manulife.net
daily.manulife.com.vn
click.e.manulife.com
sft.institutional.manulife.com
johnhancock.com
manulife.com
sts.manulife.com
manulife.com
azslvedlmgtdd01.d01saedl.manulife.com
idwicrmapt21.mlijkt01.manulife.com
idwcasp.ap.manulife.com
mfcentral.manulife.com
manulife.com
view-e-ds.manulife.com
idwelems01.mlijkt01.manulife.com
druglookup-client.manulife.com
mfcentral.manulife.com
sharepoint-externalpartner.uat.ap.manulife.com
www-aem-prod.manulife.ca
insttrip.manulife.com
manulife.com
dbpartners.manulife.com
idwinetapt01.mlijkt01.manulife.com
asiacitrix.manulife.com
arrowonramp.manulife.com
manulife.com
qitsso-uat.manulife.com
manulife.com
sf.cac.internal.mesh.dev.api.manulife.com
manulife.com
giam-qa.manulife.com
manulife.com
cconprem.manulife.com
manulife.com
manulife.com
manulife.com
idp.grsportal.ca.manulife.com
manulife.com
insanalyticsdev01.manulife.com
awsuat.manulife.com.kh
idwiqmtapp01.mlijkt01.manulife.com
johnhancock.com
manulife.com
manulife.com
myasoaibp2.ap.manulife.com
remotejp2.manulife.com
johnhancock.com
sharepoint-int.ap.manulife.com
mlifs900g01.manulife.com
nasbaccess01.manulife.com
jhappsstaging-tst.aks.manulife.com
manulife.com
manulife.com
crverifyidentity-dev.johnhancock.com
manulife.com
jpnhoapt09.japan.corp.manulife.com
client.manulifebank.com
preprod.mtls.api.manulife.com
manulife.com
idwietsisft05.mlijkt01.manulife.com
remotehk.manulife.com
azcedledges001.s01caedl.manulife.com
idwcas4tap.ap.manulife.com
manulife.com
mlixnbarplzvnaca.manulife.com
manulife.com
manulife.com
druglookup-client.manulife.com
pcf.manulife.com
proxy.auw.my.underwriting.manulife.com
manulife.com
johnhancock.com
manulife.com
financeit.devsit202201.manulife.com
tw-ssg-fw1.manulife.com
advisor.manulife.ca
azwapnwasm01.mfcgd.com
azuedldbo01.p01usedl.manulife.com
edge.prod-ext.api.manulife.com

Certificate

The complete raw certificate details for manulife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPMjCCDhqgAwIBAgIRAONyCO77UpL0zx5WQDV3/UwwDQYJKoZIhvcNAQELBQAw
gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE
AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl
cnZlciBDQTAeFw0yMzA0MDQwMDAwMDBaFw0yNDA0MDMyMzU5NTlaMFMxCzAJBgNV
BAYTAkNBMRAwDgYDVQQIEwdPbnRhcmlvMRswGQYDVQQKExJNYW51bGlmZSBGaW5h
bmNpYWwxFTATBgNVBAMTDG1hbnVsaWZlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMXIAn6VD9oe1FuW+/XYVG54OFlU6HqTmzfAo+yR1oiGqVhh
e7/kHOuRywXvFLHOTGIMeDtsMamVIqtmbWNi+TjCQUhjhR1Vjt2UDgNmod1hWXqd
cjo7aLMfDlisASsIxRANRMyVTVWeMW85bC8RgGQT3HzDVd9xlXyrRfTaSWikZGxF
dcPOCChbR7qlDxbTgVVH7rEpmuddlxushFHGEoEOSjkaPx1YihgVgS4MgkfXeGOi
/kPKz64dNeZUqXYFehYJblC/DE90rYBuFZXUEqk9JnUU9jpK7ToOKAomisZIntGH
OQTw52zhWOIwqeC3/GiMmTjD3IkODg+CFmY3lM8CAwEAAaOCC7wwggu4MB8GA1Ud
IwQYMBaAFBfZ1iUnZ/kxwklD2TA2RIxsqU/rMB0GA1UdDgQWBBSbN22f1izxPgvx
6wKbUnv1pHrt7zAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSgYDVR0gBEMwQTA1BgwrBgEEAbIxAQIB
AwQwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EM
AQICMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2Vj
dGlnb1JTQU9yZ2FuaXphdGlvblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcmww
gYoGCCsGAQUFBwEBBH4wfDBVBggrBgEFBQcwAoZJaHR0cDovL2NydC5zZWN0aWdv
LmNvbS9TZWN0aWdvUlNBT3JnYW5pemF0aW9uVmFsaWRhdGlvblNlY3VyZVNlcnZl
ckNBLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wEwYK
KwYBBAHWeQIEAwEB/wQCBQAwggntBgNVHREEggnkMIIJ4IIMbWFudWxpZmUuY29t
ghIxMDAxNC5tYW51bGlmZS5jb22CGWFncnNzcG9uc29ycy5tYW51bGlmZS5jb22C
EWFpZHAubWFudWxpZmUuY29tgiJhcGkubWFudWxpZmVzZWN1cml0aWVzLm1hbnVs
aWZlLmNhgiBhcGkucGxhY2VtZW50c21hbnV2aWUubWFudXZpZS5jYYIWYXBpLnBv
cnRhbC5tYW51bGlmZS5jYYIcYXBwcmFpc2Fscy10ZXN0Lm1hbnVsaWZlLmNvbYIX
YXBwcmFpc2Fscy5tYW51bGlmZS5jb22CFmF0dGVzdHVhdC5tYW51bGlmZS5jb22C
FWF2aXByb29tLm1hbnVsaWZlLmNvbYIjYmFucXVlc2NvdGlhLm1vbnByb2NoYWlu
Y2hhcGl0cmUuY2GCKGNhbmFkaWFuY29tbWVyY2lhbG1vcnRnYWdlcy5tYW51bGlm
ZS5jb22CFGNkZC1kZXYubWFudWxpZmUuY29tghVjZGQtcHJvZC5tYW51bGlmZS5j
b22CFGNkZC11YXQubWFudWxpZmUuY29tgh1jZG5jZXRkdmNhY2ljZnJ0ci5tYW51
bGlmZS5pb4IgY2RuY2V0cHJjYWNpY2FhZm5hcHAubWFudWxpZmUuaW+CHWNkbmNl
dHByY2FjaWNmcnRyLm1hbnVsaWZlLmlvgiNjbG91ZC5tZXNoLnByZXByb2QuYXBp
Lm1hbnVsaWZlLmNvbYIcY3AubWFudWxpZmVwcml2YXRld2VhbHRoLmNvbYIfY3B1
YXQubWFudWxpZmVwcml2YXRld2VhbHRoLmNvbYIRY3VzYy5tYW51bGlmZS5jb22C
JWRyLmFwaS5tYW51bGlmZXNlY3VyaXRpZXMubWFudWxpZmUuY2GCGWRyLmFwaS5w
b3J0YWwubWFudWxpZmUuY2GCFmVkaS1ob3RmaXgubWFudWxpZmUuY2GCF2VkaS1w
cmVwcm9kLm1hbnVsaWZlLmNhghdlZGktc3RhZ2luZy5tYW51bGlmZS5jYYIYZWRp
LXN0YWdpbmd4Lm1hbnVsaWZlLmNhghNlZGktdWF0Lm1hbnVsaWZlLmNhghRlZGkt
dWF0eC5tYW51bGlmZS5jYYIPZWRpLm1hbnVsaWZlLmNhghdlZG9jcy1iZmYubWFu
dWxpZmVpbS5jYYIbZWRvY3MtdWF0LWJmZi5tYW51bGlmZWltLmNhghdlZG9jcy11
YXQubWFudWxpZmVpbS5jYYITZWRvY3MubWFudWxpZmVpbS5jYYISZW50ZXIubWFu
dWxpZmUuY29tghVlbnRlcnVhdC5tYW51bGlmZS5jb22CFWdyc3NvZm1vLm1hbnVs
aWZlLmNvbYIYZ3Jzc3BvbnNvcnMubWFudWxpZmUuY29tghBpZHAubWFudWxpZmUu
Y29tgiFsYW5kaW5nLm1hbnVsaWZlcHJpdmF0ZXdlYWx0aC5jb22CFmxvZ2luLm1h
bnVsaWZlZ2hudy5jb22CDm0ubWFudWxpZmUuY29tgg1tLm1hbnV2aWUuY29tggtt
YW51bGlmZS5jYYIebWFudWxpZmVzZWN1cml0aWVzLm1hbnVsaWZlLmNhggptYW51
dmllLmNhggdtZmMuY29tghhtZmNlbnRyYWxxYS5tYW51bGlmZS5jb22CG21mY2Vu
dHJhbHN0YWdlLm1hbnVsaWZlLmNvbYIWbW9ucHJvY2hhaW5jaGFwaXRyZS5jYYIQ
bXluZXh0Y2hhcHRlci5jYYIdbXlzb2x1dGlvbnNvbmxpbmUubWFudWxpZmUuY2GC
HG15c29sdXRpb25zb25saW5lLm1hbnV2aWUuY2GCEm5hdi5tYW51bGlmZWltLmNv
bYIccGxhY2VtZW50c21hbnV2aWUubWFudXZpZS5jYYIccG9ydGFpbC5hc3N1cmFu
Y2UubWFudXZpZS5jYYIccG9ydGFsLmluc3VyYW5jZS5tYW51bGlmZS5jYYIicHJv
ZC5teXNvbHV0aW9uc29ubGluZS5tYW51bGlmZS5jYYIhcHJvZC5teXNvbHV0aW9u
c29ubGluZS5tYW51dmllLmNhghZyZXBzb3VyY2UubWFudWxpZmUuY29tghxyZXBz
b3VyY2VwdWJsaWMubWFudWxpZmUuY29tghZyZXRpcmVtZW50cmVkZWZpbmVkLmNh
gh9yZXRpcmVtZW50cmVkZWZpbmVkLm1hbnVsaWZlLmNhghRyZXRyYWl0ZXJlZGVm
aW5pZS5jYYIccmV0cmFpdGVyZWRlZmluaWUubWFudXZpZS5jYYIbc2NvdGlhYmFu
ay5teW5leHRjaGFwdGVyLmNhghZzZWN1cmVpZ2F6Lm1hbnVsaWZlLmNhghlzZWN1
cmVpZ2F6dWF0Lm1hbnVsaWZlLmNhghxzdGFnZS5hcGkucG9ydGFsLm1hbnVsaWZl
LmNhghdzdGFnZS5jdXNjLm1hbnVsaWZlLmNvbYIcc3RhZ2UubG9naW4ubWFudWxp
ZmVnaG53LmNvbYIjc3RhZ2UubXlzb2x1dGlvbnNvbmxpbmUubWFudWxpZmUuY2GC
InN0YWdlLm15c29sdXRpb25zb25saW5lLm1hbnV2aWUuY2GCFnN0Zy1uYXYubWFu
dWxpZmVpbS5jb22CGHRlY2hjb25uZWN0Lm1hbnVsaWZlLmNvbYIWdGVzdC5jdXNj
Lm1hbnVsaWZlLmNvbYIndWF0LmJhbnF1ZXNjb3RpYS5tb25wcm9jaGFpbmNoYXBp
dHJlLmNhghp1YXQubW9ucHJvY2hhaW5jaGFwaXRyZS5jYYIUdWF0Lm15bmV4dGNo
YXB0ZXIuY2GCE3VhdC5wb3QubWFudWxpZmUuY2GCH3VhdC5zY290aWFiYW5rLm15
bmV4dGNoYXB0ZXIuY2GCFXVscy1tZXVkLm1hbnVsaWZlLmNvbYIUdmlwcm9vbS5t
YW51bGlmZS5jb22CEHdlYi5tYW51bGlmZS5jb22CIHd3dy5hcHByYWlzYWxzLXRl
c3QubWFudWxpZmUuY29tght3d3cuYXBwcmFpc2Fscy5tYW51bGlmZS5jb22CLHd3
dy5jYW5hZGlhbmNvbW1lcmNpYWxtb3J0Z2FnZXMubWFudWxpZmUuY29tghV3d3cu
Y3VzYy5tYW51bGlmZS5jb22CGnd3dy5sb2dpbi5tYW51bGlmZWdobncuY29tggt3
d3cubWZjLmNvbYIad3d3Lm1vbnByb2NoYWluY2hhcGl0cmUuY2GCFHd3dy5teW5l
eHRjaGFwdGVyLmNhghp3d3cucmV0aXJlbWVudHJlZGVmaW5lZC5jYYIYd3d3LnJl
dHJhaXRlcmVkZWZpbmllLmNhMA0GCSqGSIb3DQEBCwUAA4IBAQAOX0T3xfZFkk2C
TkuxWG8yahFMT7dmWQ07LYcCUgnz7kZRDY7esq98cIzirMxRlyXPcY8LoJq6XybQ
5Pvg7myqxOk92/P4+IigK2vKKfLi62gqklXBwWI9EqFawhvDJUihk0jKXSck66ae
Qgb8/1kPEy1FXYQ73iw3BZFSRUVhvvx7xaxX08Ueen/TSi86rmQylVCD8iKw9zFJ
eFZlRCRp39jtP6YQPUppJ78eAVm9h83RrVO1rNB7iqP3fOg6llM3qZhjeloGsYVn
iYujNK4DtFs/d3BRWs/qxlqzeJ+1+EHBWkPue7Bmud+0KDwlodpYu0U4QlPaZ8lu
jFnhX/Lm
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcgCfpUP2h7UW5b79dhU
bng4WVToepObN8Cj7JHWiIapWGF7v+Qc65HLBe8Usc5MYgx4O2wxqZUiq2ZtY2L5
OMJBSGOFHVWO3ZQOA2ah3WFZep1yOjtosx8OWKwBKwjFEA1EzJVNVZ4xbzlsLxGA
ZBPcfMNV33GVfKtF9NpJaKRkbEV1w84IKFtHuqUPFtOBVUfusSma512XG6yEUcYS
gQ5KORo/HViKGBWBLgyCR9d4Y6L+Q8rPrh015lSpdgV6FgluUL8MT3StgG4VldQS
qT0mdRT2OkrtOg4oCiaKxkie0Yc5BPDnbOFY4jCp4Lf8aIyZOMPciQ4OD4IWZjeU
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302326858078408944470894943951144877388
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'manulife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24967574559009920692625632324596851660270555633116446428760055072645422767730214828203988555062246932926120017606884202936380136771081110051364449098360302367416270155975771911148215693406359953928037422548732051974778815121468521226613725477603880899632902844008805499938126172278848729100561674640981365486784144737911260444358075337174848576197824534798791458640870939535370340255218346297642281410865968838050535191379932480388007753655189489762269291122967920621868509621807241292996103164168005831495592259458627380590352685689908817691412738425865234868121295395946825695920356169002553568068184815814894392527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b376d9fd62cf13e0bf1eb029b527bf5a47aedef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2532 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10014.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrssponsors.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aidp.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.manulifesecurities.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.placementsmanuvie.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.portal.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisals-test.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appraisals.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attestuat.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviproom.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banquescotia.monprochainchapitre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadiancommercialmortgages.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdd-dev.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdd-prod.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdd-uat.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdncetdvcacicfrtr.manulife.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdncetprcacicaafnapp.manulife.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdncetprcacicfrtr.manulife.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.mesh.preprod.api.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpuat.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cusc.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr.api.manulifesecurities.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr.api.portal.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edi-hotfix.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edi-preprod.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edi-staging.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edi-stagingx.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edi-uat.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edi-uatx.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edi.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edocs-bff.manulifeim.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edocs-uat-bff.manulifeim.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edocs-uat.manulifeim.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edocs.manulifeim.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enter.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enteruat.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grssofmo.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grssponsors.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idp.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'landing.manulifeprivatewealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.manulifeghnw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.manuvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifesecurities.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfcentralqa.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfcentralstage.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monprochainchapitre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynextchapter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysolutionsonline.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysolutionsonline.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nav.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placementsmanuvie.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portail.assurance.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.insurance.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.mysolutionsonline.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.mysolutionsonline.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repsource.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repsourcepublic.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirementredefined.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirementredefined.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retraiteredefinie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retraiteredefinie.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scotiabank.mynextchapter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureigaz.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureigazuat.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.api.portal.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.cusc.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.login.manulifeghnw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.mysolutionsonline.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.mysolutionsonline.manuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-nav.manulifeim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techconnect.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cusc.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.banquescotia.monprochainchapitre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.monprochainchapitre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.mynextchapter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.pot.manulife.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.scotiabank.mynextchapter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uls-meud.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viproom.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appraisals-test.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.appraisals.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadiancommercialmortgages.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cusc.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.login.manulifeghnw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monprochainchapitre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mynextchapter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retirementredefined.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retraiteredefinie.ca'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000e5f44f7c5f645924d824e4bb1586f326a114c4fb766590d3b2d87025209f3ee46510d8edeb2af7c708ce2accc519725cf718f0ba09aba5f26d0e4fbe0ee6caac4e93ddbf3f8f888a02b6bca29f2e2eb682a9255c1c1623d12a15ac21bc32548a19348ca5d2724eba69e4206fcff590f132d455d843bde2c37059152454561befc7bc5ac57d3c51e7a7fd34a2f3aae6432955083f222b0f73149785665442469dfd8ed3fa6103d4a6927bf1e0159bd87cdd1ad53b5acd07b8aa3f77ce83a965337a998637a5a06b18567898ba334ae03b45b3f7770515acfeac65ab3789fb5f841c15a43ee7bb066b9dfb4283c25a1da58bb45384253da67c96e8c59e15ff2e6