www.igpinfo.com

- Manulife Financial -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number e0:0d:f4:4d:9b:fd:d3:fc:3a:c7:5a:03:f6:4c:2f:53 was issued on by Sectigo Limited.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Manulife Financial

Organization: Manulife Financial
Organization unit: John Hancock US Division
Address: 601 Congress Street
Postal code: 02210
State / Province: Massachusetts
Locality: Boston
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): e0:0d:f4:4d:9b:fd:d3:fc:3a:c7:5a:03:f6:4c:2f:53
Serial Number (int): 297819525971770948722374947638392663891
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f0:47:2d:62:9a:7c:7b:d7:fa:bf:a3:31:13:a8:84:20:cd:f3:b3:cc
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): eb:26:65:94:f0:9c:db:04:25:2f:45:60:75:3d:a2:16:a1:01:e9:9e
Fingerprint (sha256): a2:64:cb:71:c7:76:ca:92:89:fd:f7:1e:21:25:00:d1:cc:c7:7d:55:16:b3:11:35:6b:b5:71:d0:54:6c:05:07

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate www.igpinfo.com

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.igpinfo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.igpinfo.com
anderppx01a1.jhancock.com
anderppx01a1.prd.manulifeusa.com
anderppx01m2.jhancock.com
azwapnigp001.mfcgd.com
azwapnigp002.mfcgd.com
azwapnigp003.mfcgd.com
azwapnigpdev001.mfcgd.com
azwappigp001.mfcgd.com
azwappigp002.mfcgd.com
azwappigp003.mfcgd.com
b04erpd02.dev.manulifeusa.com
b04erppx01a1.jhancock.com
b04erppx01a1.prd.manulifeusa.com
b04erppx01m2.jhancock.com
dev-igpinfo.jhancock.com
igpinfo.jhancock.com
jherpmx1.mod.manulifeusa.com
jherpmx2.mod.manulifeusa.com
jherppx1.mod.manulifeusa.com
jherppx1.prd.manulifeusa.com
jherppx2.mod.manulifeusa.com
mod-igpinfo.jhancock.com
stage.anderpmx01m2.jhancock.com
stage.b04erpmx01m2.jhancock.com

Other certificates including the domain name igpinfo.com

(limited to 100 certificates)
johnhancock.com
www.igpinfo.com
johnhancock.com
jhaconnect.jhannuities.com
www.igpinfo.com
johnhancock.com
www.igpinfo.com
johnhancock.com
www.igpinfo.com
igpinfo.jhancock.com
www.igpinfo.com
jhaconnect.jhannuities.com
johnhancock.com
www.igpinfo.com
johnhancock.com
johnhancock.com
www-aem-prod.manulife.ca
www.igpinfo.com
johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
jhaconnect.jhannuities.com
jhaconnect.jhannuities.com
johnhancock.com
www.igpinfo.com
johnhancock.com
johnhancock.com
johnhancock.com
johnhancock.com
www.igpinfo.com
www.igpinfo.com
www-aem-prod.manulife.ca
johnhancock.com
www.igpinfo.com
www.igpinfo.com
www.igpinfo.com
johnhancock.com
johnhancock.com
johnhancock.com

Certificate

The complete raw certificate details for www.igpinfo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJ2jCCCMKgAwIBAgIRAOAN9E2b/dP8OsdaA/ZML1MwDQYJKoZIhvcNAQELBQAw
gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE
AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl
cnZlciBDQTAeFw0yMDA3MTcwMDAwMDBaFw0yMjA3MTcyMzU5NTlaMIG+MQswCQYD
VQQGEwJVUzEOMAwGA1UEERMFMDIyMTAxFjAUBgNVBAgTDU1hc3NhY2h1c2V0dHMx
DzANBgNVBAcTBkJvc3RvbjEcMBoGA1UECRMTNjAxIENvbmdyZXNzIFN0cmVldDEb
MBkGA1UEChMSTWFudWxpZmUgRmluYW5jaWFsMSEwHwYDVQQLExhKb2huIEhhbmNv
Y2sgVVMgRGl2aXNpb24xGDAWBgNVBAMTD3d3dy5pZ3BpbmZvLmNvbTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAJLqOIafALrPPQG+0W3lfLCqKN9jnPfG
1PwYH4J6Yarhl8qcKxH07N/18FBIgkfQ83uRYVfWR85evP3kysLsaP4R5IClikKq
tHG4Z+D5R3U+QgqP/3UMk3SgT7FuCEXHf+BEwVimTmx2/O374Kua97t6EovSnPlT
kMdkyWxryL/quy4f7Fh9baVg+S4dLiU0h46oRU2NV0HerHzQqniYP8PzRiiErWhr
/U+lAqymmWclAyKj0arS4Tv1s3ZCrgmj6PbzDf/t9/YKqvosqHZiKU51yhaOSVQ7
P3tGsSrArnuBmjXbQ89NHICwbm8gjvO+gT/KD3+P64rIVEXYsuZLCrcCAwEAAaOC
BfgwggX0MB8GA1UdIwQYMBaAFBfZ1iUnZ/kxwklD2TA2RIxsqU/rMB0GA1UdDgQW
BBTwRy1imnx71/q/ozETqIQgzfOzzDAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/
BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSgYDVR0gBEMwQTA1
BgwrBgEEAbIxAQIBAwQwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNv
bS9DUFMwCAYGZ4EMAQICMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9jcmwuc2Vj
dGlnby5jb20vU2VjdGlnb1JTQU9yZ2FuaXphdGlvblZhbGlkYXRpb25TZWN1cmVT
ZXJ2ZXJDQS5jcmwwgYoGCCsGAQUFBwEBBH4wfDBVBggrBgEFBQcwAoZJaHR0cDov
L2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBT3JnYW5pemF0aW9uVmFsaWRhdGlv
blNlY3VyZVNlcnZlckNBLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2Vj
dGlnby5jb20wggGABgorBgEEAdZ5AgQCBIIBcASCAWwBagB3AEalVet1+pEgMLWi
iWn0830RLEF0vv1JuIWr8vxw/m1HAAABc1pVB70AAAQDAEgwRgIhAI+Gw4JEg3BP
eHlxISni7VwPQIDJ8Fy5plhW6HPN0V2YAiEA8CbkLI3AWBQqCSwPz2zBQDGhBdOV
DgnL6C+1Ox65q2EAdwDfpV6raIJPH2yt7rhfTj5a6s2iEqRqXo47EsAgRFwqcwAA
AXNaVQflAAAEAwBIMEYCIQDpOszEt4MD+tO41TQI+xPGoDSxmFD7Ep5M0YSKBEpW
MAIhAJVJwO+GxVoqbmQEU+GD1zhhv6mg0VGuVlbvyngwcNVbAHYAb1N2rDHwMRnY
mQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFzWlUHtgAABAMARzBFAiEApknTFhrv
wIX02zXQ4+iyOkLeIt1flPIxs/jmB3sGfqsCIEEhUxI2j9CDX8nK1edM68gRiScV
/ClCIcZeMMHYGRkGMIICugYDVR0RBIICsTCCAq2CD3d3dy5pZ3BpbmZvLmNvbYIZ
YW5kZXJwcHgwMWExLmpoYW5jb2NrLmNvbYIgYW5kZXJwcHgwMWExLnByZC5tYW51
bGlmZXVzYS5jb22CGWFuZGVycHB4MDFtMi5qaGFuY29jay5jb22CFmF6d2Fwbmln
cDAwMS5tZmNnZC5jb22CFmF6d2FwbmlncDAwMi5tZmNnZC5jb22CFmF6d2Fwbmln
cDAwMy5tZmNnZC5jb22CGWF6d2FwbmlncGRldjAwMS5tZmNnZC5jb22CFmF6d2Fw
cGlncDAwMS5tZmNnZC5jb22CFmF6d2FwcGlncDAwMi5tZmNnZC5jb22CFmF6d2Fw
cGlncDAwMy5tZmNnZC5jb22CHWIwNGVycGQwMi5kZXYubWFudWxpZmV1c2EuY29t
ghliMDRlcnBweDAxYTEuamhhbmNvY2suY29tgiBiMDRlcnBweDAxYTEucHJkLm1h
bnVsaWZldXNhLmNvbYIZYjA0ZXJwcHgwMW0yLmpoYW5jb2NrLmNvbYIYZGV2LWln
cGluZm8uamhhbmNvY2suY29tghRpZ3BpbmZvLmpoYW5jb2NrLmNvbYIcamhlcnBt
eDEubW9kLm1hbnVsaWZldXNhLmNvbYIcamhlcnBteDIubW9kLm1hbnVsaWZldXNh
LmNvbYIcamhlcnBweDEubW9kLm1hbnVsaWZldXNhLmNvbYIcamhlcnBweDEucHJk
Lm1hbnVsaWZldXNhLmNvbYIcamhlcnBweDIubW9kLm1hbnVsaWZldXNhLmNvbYIY
bW9kLWlncGluZm8uamhhbmNvY2suY29tgh9zdGFnZS5hbmRlcnBteDAxbTIuamhh
bmNvY2suY29tgh9zdGFnZS5iMDRlcnBteDAxbTIuamhhbmNvY2suY29tMA0GCSqG
SIb3DQEBCwUAA4IBAQBcxHydc+PHdRmhmAiypVavTqBmcpYQYs7v4LqrMKzjUPkb
rmhX1R0U6R8MPsu1Y4qgz/v6ZAMrn56zi57L+5LYIemaBLNomvj6PLeAm2RHLDcC
Ae+vq7WLzRHd7uaTvDDia5liH1agymuxR2Y711zBfLqgun123yUaG9af7hxQwEZt
yXZyNI4rApaRn4v3W1n37zWUFM9gDmZhvjz/MmUkUuGhS184NpgrlGCcgnORF1iA
TYuIWuIbH4c2pL2H0JSyLtpfpmjCeWnA5JjxWWHqZOYMJbLxKO7psW8UshYlV/Ln
yBBvFKZ4HRoxEXI9HN83ZG2BGIKK3QrDuMBatG4M
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuo4hp8Aus89Ab7RbeV8
sKoo32Oc98bU/BgfgnphquGXypwrEfTs3/XwUEiCR9Dze5FhV9ZHzl68/eTKwuxo
/hHkgKWKQqq0cbhn4PlHdT5CCo//dQyTdKBPsW4IRcd/4ETBWKZObHb87fvgq5r3
u3oSi9Kc+VOQx2TJbGvIv+q7Lh/sWH1tpWD5Lh0uJTSHjqhFTY1XQd6sfNCqeJg/
w/NGKIStaGv9T6UCrKaZZyUDIqPRqtLhO/WzdkKuCaPo9vMN/+339gqq+iyodmIp
TnXKFo5JVDs/e0axKsCue4GaNdtDz00cgLBubyCO876BP8oPf4/rishURdiy5ksK
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297819525971770948722374947638392663891
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '02210'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Boston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '601 Congress Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manulife Financial'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'John Hancock US Division'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.igpinfo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18546291108264558003742758641668251175748325071815093640895625261230647501196763717757150838131910647571639269986130041945885485234599787542513255222153117764219329693945761971440836630552742538342322475843025368686907668950883896028676975401103764325701569640962784705443858377200118294548204210689216093710985894454156877327617836510443490363825589726507876089764164514395621811624691381837091333935736231909699577669277659727770032726758085662414416391907772778395964347845979430840503206939923257101924608360576172734791530752955465873570028426648423720213819499242261584399553850428613703213446666653447993625271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0472d629a7c7bd7fabfa33113a88420cdf3b3cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (689 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igpinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anderppx01a1.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anderppx01a1.prd.manulifeusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anderppx01m2.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azwapnigp001.mfcgd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azwapnigp002.mfcgd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azwapnigp003.mfcgd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azwapnigpdev001.mfcgd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azwappigp001.mfcgd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azwappigp002.mfcgd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azwappigp003.mfcgd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b04erpd02.dev.manulifeusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b04erppx01a1.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b04erppx01a1.prd.manulifeusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b04erppx01m2.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-igpinfo.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'igpinfo.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jherpmx1.mod.manulifeusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jherpmx2.mod.manulifeusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jherppx1.mod.manulifeusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jherppx1.prd.manulifeusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jherppx2.mod.manulifeusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mod-igpinfo.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.anderpmx01m2.jhancock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.b04erpmx01m2.jhancock.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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