client.manulifebank.com

- Manulife Financial -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 14:af:c2:c1:e6:67:5b:d8:2f:da:f9:2f:f9:f1:98:a5 was issued on by Sectigo Limited.

With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Manulife Financial

Organization: Manulife Financial
State / Province: Ontario
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 14:af:c2:c1:e6:67:5b:d8:2f:da:f9:2f:f9:f1:98:a5
Serial Number (int): 27497162015746891311773055503781959845
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 87:ce:1b:bb:20:c2:24:0c:48:15:7b:5d:1d:52:0e:b6:97:a7:f8:a8
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): d9:ad:99:96:de:06:b1:02:8b:1b:ad:56:7f:27:04:48:ee:b4:92:e9
Fingerprint (sha256): 62:c7:10:4b:3b:27:70:24:b5:ac:83:d2:36:c3:38:7a:22:d8:5a:ac:f8:ab:b5:88:5e:8c:62:46:22:4e:6d:40

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate client.manulifebank.com

27

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for client.manulifebank.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

client.manulifebank.com
*.banquemanuvie.com
*.manulifebank.com
3449.client.manulifebank.com
banquemanuvie.com
client.banquemanuvie.com
manulifebank.com
online.banquemanuvie.ca
online.banquemanuvie.com
online.manulifebank.ca
online.manulifebank.com
prd-banklink.manulife.com
uat-banklink.manulife.com
uatclient.banquemanuvie.com
uatclient.manulifebank.com
uatonline.banquemanuvie.ca
uatonline.banquemanuvie.com
uatonline.manulifebank.ca
uatonline.manulifebank.com
www.online.banquemanuvie.ca
www.online.banquemanuvie.com
www.online.manulifebank.ca
www.online.manulifebank.com
www.uatonline.banquemanuvie.ca
www.uatonline.banquemanuvie.com
www.uatonline.manulifebank.ca
www.uatonline.manulifebank.com

Other certificates including the domain name manulifebank.com

(limited to 100 certificates)
client.manulifebank.com
manulifebank.com
test.manulifebank.com
manulife.com
client.manulifebank.com
manulife.com
manulife.com
manulife.com
manulife.com
client.manulifebank.com
manulife.com
manulife.com
manulife.com
client.manulifebank.com
manulife.com
client.manulifebank.com
manulife.com
client.manulifebank.com
manulife.com
manulife.com
manulifebank.com
manulife.com
manulife.com
manulife.com
test.manulifebank.com
manulifebank.com
manulife.com
manulife.com
client.manulifebank.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
client.manulifebank.com
test.manulifebank.com
manulife.com
client.manulifebank.com
epic.manulifebank.com
manulife.com
uatpartnerservices.manulifebank.com
manulife.com
manulife.com
manulife.com
manulifebank.com
*.manulifebank.com
manulife.com
manulife.com
manulife.com
manulife.com
client.manulifebank.com
client.manulifebank.com
manulife.com
manulifebank.com
manulife.com
epic.manulifebank.com
manulife.com
manulifebank.com
manulife.com
manulife.com
manulifebank.com
manulife.com
manulife.com
client.manulifebank.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
manulife.com
client.manulifebank.com
client.manulifebank.com
client.manulifebank.com
client.manulifebank.com
manulife.com
manulife.com
manulife.com
client.manulifebank.com
manulife.com
manulifebank.com
manulife.com
manulife.com
manulife.com
test.manulifebank.com
client.manulifebank.com
manulife.com
client.manulifebank.com
manulife.com
client.manulifebank.com
manulife.com
manulife.com
manulife.com
client.manulifebank.com
manulife.com
manulife.com
manulife.com

Certificate

The complete raw certificate details for client.manulifebank.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCud3ang32JsKWhBxXY/
mTihhzODKiBVMYMDmDbZWXvWoFPBesHW2aomGnE/LoNNz0snmpSU1Aegq9059Nyt
mShpZMaVh0tLKsfcNG9Kgf/7jD9q0o/S32t9smT85bb5Odgmnx2m3TavYayekzBI
ahre88bm+HuHy3krT+e5CxyMvRDFt4b4CUkiENyfNcZxj9t9RV4DlRyjr1/qoUa+
53MxQhPaX9d8WSVl5EoGoxLlRSzmXgXqKJ0TNr1de4GrTlR3EpS1zs5YuDPgAYeU
+ovuiQgYi2VI9+t7MiCfdT4l1jczp+/yfV5c4Em3hTomd+OK/4TE4clRnoOt/RcO
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27497162015746891311773055503781959845
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'client.manulifebank.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20724590192859745677274183599765113093654087959271003703221762178684133441212178636057084153861789621618378889720754305943356571114369609454183352824127785158046994563775051310008225059051230169489199013230266086485052412914350846655282863237922765867984635413482953364443735003186114144749312654670572172647219609863189797715575897847321440352723668655272297208603772323141874777406466863551082658972178589980048502236137000644136547694809406197426241877282206841403795615400394375663236746844252131552059889588552424602523294039493848561398061809965851318466524171943817746735122608520778576560338160914826708586133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87ce1bbb20c2240c48157b5d1d520eb697a7f8a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (730 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.manulifebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.banquemanuvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.manulifebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3449.client.manulifebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banquemanuvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'client.banquemanuvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manulifebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.banquemanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.banquemanuvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.manulifebank.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.manulifebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd-banklink.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-banklink.manulife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatclient.banquemanuvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatclient.manulifebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatonline.banquemanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatonline.banquemanuvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatonline.manulifebank.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uatonline.manulifebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.online.banquemanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.online.banquemanuvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.online.manulifebank.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.online.manulifebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uatonline.banquemanuvie.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uatonline.banquemanuvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uatonline.manulifebank.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uatonline.manulifebank.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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