www.indiebound.org

- American Booksellers Association, Inc. -

Issued by DigiCert Trusted Server CA G4

About this certificate

This digital certificate with serial number 0a:de:d4:5a:e5:8c:6f:47:55:f1:59:ed:68:be:5b:54 was issued on by DigiCert Inc.

With 105 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American Booksellers Association, Inc.

Organization: American Booksellers Association, Inc.
State / Province: New York
Locality: White Plains
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:de:d4:5a:e5:8c:6f:47:55:f1:59:ed:68:be:5b:54
Serial Number (int): 14449276932856333262917427449359653716
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 18:41:54:cf:03:81:64:be:eb:b1:2d:31:21:06:f3:91:be:c8:cc:ee
AuthorityKeyId: 36:d0:a8:9e:89:f2:82:bc:6b:e2:59:b6:a3:c6:f7:34:46:8c:b4:2f

Fingerprint (sha1): 4c:33:68:6e:a1:1a:10:99:e6:e2:e9:26:53:0c:26:b9:e3:32:bf:7b
Fingerprint (sha256): 02:44:b9:be:a8:20:8f:0d:53:24:81:20:c9:e0:32:e8:a5:1a:b9:46:8a:2b:a4:17:d6:4e:75:8f:c7:cd:76:5d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTrustedServerCAG4.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTrustedServerCAG4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTrustedServerCAG4.crl

Check the revocation status for certificate www.indiebound.org

105

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.indiebound.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.indiebound.org
bbpbooks.teachingforchange.org
boulderbookstore.indiebound.com
orders.gallerybooks.com
orders.gallerybookshop.com
store.subbooks.com
www.alabamabooksmith.com
www.alexanderbook.com
www.avidreaderbooks.com
www.barrettbookstore.com
www.baybooks.us
www.bookbinnorthbrook.com
www.bookcaseofwayzata.com
www.bookcellarvt.com
www.bookmarkshoppe.com
www.bookmouse.org
www.bookpassage.com
www.bookpeople.com
www.booksandbooks.com
www.booksmith.com
www.booktable.net
www.bookvault.org
www.bookwormofedwards.com
www.bookwormomaha.com
www.bracebooks.com
www.brilliant-books.net
www.brooklinebooksmith-shop.com
www.burlinghambooks.com
www.buxtonvillagebooks.com
www.carmichaelsbookstore.com
www.centuriesandsleuths.com
www.charisbooksandmore.com
www.clintonbookshop.com
www.commongoodbooks.com
www.concordbookshop.com
www.dramabookshop.com
www.elliottbaybook.com
www.flyleafbooks.com
www.foreverbooks.net
www.gardendistrictbookshop.com
www.goodbooksbadcoffee.com
www.greenapplebooks.com
www.hearthsidebooks.com
www.hugobookstores.com
www.jabberwockybookshop.com
www.katybooks.com
www.libertybaybooks.com
www.malaprops.com
www.mysteriesonmainstreet.com
www.mystgalaxy.com
www.nicolasbooks.com
www.novelplacesusa.com
www.octaviabooks.com
www.prairielightsbooks.com
www.pyramidbooks.net
www.queerbooks.com
www.rainydaybooks.com
www.rdbooks.org
www.rlb2e.com
www.roomofonesown.com
www.schulerbooks.com
www.secretgardenbooks.com
www.semcoop.com
www.squarebooks.com
www.storybookcove.com
www.sunriverbooks.com
www.toadbooks.com
www.ttmd.com
www.vermontbookshop.com
www.vivabooks.com
www.wellesleybooksmith-shop.com
www.wildrumpusbooks.com
www.womenandchildrenfirst.com
www.bookcellarinc.com
www.farleysbookshop.com
www.ccbmc.com
www.rjjulia.com
www.mostlybooksaz.com
www.prairiepages.net
www.sundancebookstore.com
www.riverlights.com
www.sbgranadabooks.com
www.readersnookvi.com
www.anovelbookshop.com
www.anopenbookmn.com
www.qabookco.com
www.read-it-again.com
azizibooks.biz
www.azizibooks.biz
www.mainpointbooks.com
www.bankofbooks.com
www.thetwig.com
www.dogearedbooks.net
www.phoenixbooks.biz
www.parkroadbooks.com
www.ancestrybooksmn.com
www.tfcbooks.org
store.wellesleybooks.com
www.klindtsbooks.com
www.apostrophebooks.net
www.watermarkbookcompany.com
www.boswellbooks.com
www.moravianbookshop.com
books.moravianbookshop.com
www.turnofthecorkscrew.com

Other certificates including the domain name indiebound.org

(limited to 100 certificates)
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.org
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
indiebound.org

Certificate

The complete raw certificate details for www.indiebound.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIP2TCCDcGgAwIBAgIQCt7UWuWMb0dV8VntaL5bVDANBgkqhkiG9w0BAQsFADBM
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSYwJAYDVQQDEx1E
aWdpQ2VydCBUcnVzdGVkIFNlcnZlciBDQSBHNDAeFw0xNDExMTEwMDAwMDBaFw0x
ODAyMDgxMjAwMDBaMIGFMQswCQYDVQQGEwJVUzERMA8GA1UECBMITmV3IFlvcmsx
FTATBgNVBAcTDFdoaXRlIFBsYWluczEvMC0GA1UEChMmQW1lcmljYW4gQm9va3Nl
bGxlcnMgQXNzb2NpYXRpb24sIEluYy4xGzAZBgNVBAMTEnd3dy5pbmRpZWJvdW5k
Lm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN3bbo++RBhtpTPt
KkW/vl4xIqT35kS4QvPR8BVWOvll1RcohhYy0XF55y+1InSk+06upoQhSIboiTYP
c3a0645xv3Qg8cEDb1loqTIiMrDz/PSk0W+vqyjlkxsnmN0fA6aeQsL6vf/s3VNc
6hNlIbO2fZ5gajzA1fqpjQZGxwKr+OCneCz3VxfXfSaXaTa6KPVNPaCoQt7nNjP1
jmBNH+AMwQcftaKYF+xqqEn1kWLdVfRVnTIh/wkYDGrproThb4Dn1nOgopoihm+h
SecRDtUHr8dEWzGFMqp9gP3UK5Bz4wPNayN6Jle0o5tSGe+2n5yAxpfek62kQPjG
DWN8CxECAwEAAaOCC3swggt3MB8GA1UdIwQYMBaAFDbQqJ6J8oK8a+JZtqPG9zRG
jLQvMB0GA1UdDgQWBBQYQVTPA4FkvuuxLTEhBvORvsjM7jCCCa0GA1UdEQSCCaQw
ggmgghJ3d3cuaW5kaWVib3VuZC5vcmeCHmJicGJvb2tzLnRlYWNoaW5nZm9yY2hh
bmdlLm9yZ4IfYm91bGRlcmJvb2tzdG9yZS5pbmRpZWJvdW5kLmNvbYIXb3JkZXJz
LmdhbGxlcnlib29rcy5jb22CGm9yZGVycy5nYWxsZXJ5Ym9va3Nob3AuY29tghJz
dG9yZS5zdWJib29rcy5jb22CGHd3dy5hbGFiYW1hYm9va3NtaXRoLmNvbYIVd3d3
LmFsZXhhbmRlcmJvb2suY29tghd3d3cuYXZpZHJlYWRlcmJvb2tzLmNvbYIYd3d3
LmJhcnJldHRib29rc3RvcmUuY29tgg93d3cuYmF5Ym9va3MudXOCGXd3dy5ib29r
Ymlubm9ydGhicm9vay5jb22CGXd3dy5ib29rY2FzZW9md2F5emF0YS5jb22CFHd3
dy5ib29rY2VsbGFydnQuY29tghZ3d3cuYm9va21hcmtzaG9wcGUuY29tghF3d3cu
Ym9va21vdXNlLm9yZ4ITd3d3LmJvb2twYXNzYWdlLmNvbYISd3d3LmJvb2twZW9w
bGUuY29tghV3d3cuYm9va3NhbmRib29rcy5jb22CEXd3dy5ib29rc21pdGguY29t
ghF3d3cuYm9va3RhYmxlLm5ldIIRd3d3LmJvb2t2YXVsdC5vcmeCGXd3dy5ib29r
d29ybW9mZWR3YXJkcy5jb22CFXd3dy5ib29rd29ybW9tYWhhLmNvbYISd3d3LmJy
YWNlYm9va3MuY29tghd3d3cuYnJpbGxpYW50LWJvb2tzLm5ldIIfd3d3LmJyb29r
bGluZWJvb2tzbWl0aC1zaG9wLmNvbYIXd3d3LmJ1cmxpbmdoYW1ib29rcy5jb22C
Gnd3dy5idXh0b252aWxsYWdlYm9va3MuY29tghx3d3cuY2FybWljaGFlbHNib29r
c3RvcmUuY29tght3d3cuY2VudHVyaWVzYW5kc2xldXRocy5jb22CGnd3dy5jaGFy
aXNib29rc2FuZG1vcmUuY29tghd3d3cuY2xpbnRvbmJvb2tzaG9wLmNvbYIXd3d3
LmNvbW1vbmdvb2Rib29rcy5jb22CF3d3dy5jb25jb3JkYm9va3Nob3AuY29tghV3
d3cuZHJhbWFib29rc2hvcC5jb22CFnd3dy5lbGxpb3R0YmF5Ym9vay5jb22CFHd3
dy5mbHlsZWFmYm9va3MuY29tghR3d3cuZm9yZXZlcmJvb2tzLm5ldIIed3d3Lmdh
cmRlbmRpc3RyaWN0Ym9va3Nob3AuY29tghp3d3cuZ29vZGJvb2tzYmFkY29mZmVl
LmNvbYIXd3d3LmdyZWVuYXBwbGVib29rcy5jb22CF3d3dy5oZWFydGhzaWRlYm9v
a3MuY29tghZ3d3cuaHVnb2Jvb2tzdG9yZXMuY29tght3d3cuamFiYmVyd29ja3li
b29rc2hvcC5jb22CEXd3dy5rYXR5Ym9va3MuY29tghd3d3cubGliZXJ0eWJheWJv
b2tzLmNvbYIRd3d3Lm1hbGFwcm9wcy5jb22CHXd3dy5teXN0ZXJpZXNvbm1haW5z
dHJlZXQuY29tghJ3d3cubXlzdGdhbGF4eS5jb22CFHd3dy5uaWNvbGFzYm9va3Mu
Y29tghZ3d3cubm92ZWxwbGFjZXN1c2EuY29tghR3d3cub2N0YXZpYWJvb2tzLmNv
bYIad3d3LnByYWlyaWVsaWdodHNib29rcy5jb22CFHd3dy5weXJhbWlkYm9va3Mu
bmV0ghJ3d3cucXVlZXJib29rcy5jb22CFXd3dy5yYWlueWRheWJvb2tzLmNvbYIP
d3d3LnJkYm9va3Mub3Jngg13d3cucmxiMmUuY29tghV3d3cucm9vbW9mb25lc293
bi5jb22CFHd3dy5zY2h1bGVyYm9va3MuY29tghl3d3cuc2VjcmV0Z2FyZGVuYm9v
a3MuY29tgg93d3cuc2VtY29vcC5jb22CE3d3dy5zcXVhcmVib29rcy5jb22CFXd3
dy5zdG9yeWJvb2tjb3ZlLmNvbYIVd3d3LnN1bnJpdmVyYm9va3MuY29tghF3d3cu
dG9hZGJvb2tzLmNvbYIMd3d3LnR0bWQuY29tghd3d3cudmVybW9udGJvb2tzaG9w
LmNvbYIRd3d3LnZpdmFib29rcy5jb22CH3d3dy53ZWxsZXNsZXlib29rc21pdGgt
c2hvcC5jb22CF3d3dy53aWxkcnVtcHVzYm9va3MuY29tgh13d3cud29tZW5hbmRj
aGlsZHJlbmZpcnN0LmNvbYIVd3d3LmJvb2tjZWxsYXJpbmMuY29tghd3d3cuZmFy
bGV5c2Jvb2tzaG9wLmNvbYINd3d3LmNjYm1jLmNvbYIPd3d3LnJqanVsaWEuY29t
ghV3d3cubW9zdGx5Ym9va3Nhei5jb22CFHd3dy5wcmFpcmllcGFnZXMubmV0ghl3
d3cuc3VuZGFuY2Vib29rc3RvcmUuY29tghN3d3cucml2ZXJsaWdodHMuY29tghZ3
d3cuc2JncmFuYWRhYm9va3MuY29tghV3d3cucmVhZGVyc25vb2t2aS5jb22CFnd3
dy5hbm92ZWxib29rc2hvcC5jb22CFHd3dy5hbm9wZW5ib29rbW4uY29tghB3d3cu
cWFib29rY28uY29tghV3d3cucmVhZC1pdC1hZ2Fpbi5jb22CDmF6aXppYm9va3Mu
Yml6ghJ3d3cuYXppemlib29rcy5iaXqCFnd3dy5tYWlucG9pbnRib29rcy5jb22C
E3d3dy5iYW5rb2Zib29rcy5jb22CD3d3dy50aGV0d2lnLmNvbYIVd3d3LmRvZ2Vh
cmVkYm9va3MubmV0ghR3d3cucGhvZW5peGJvb2tzLmJpeoIVd3d3LnBhcmtyb2Fk
Ym9va3MuY29tghd3d3cuYW5jZXN0cnlib29rc21uLmNvbYIQd3d3LnRmY2Jvb2tz
Lm9yZ4IYc3RvcmUud2VsbGVzbGV5Ym9va3MuY29tghR3d3cua2xpbmR0c2Jvb2tz
LmNvbYIXd3d3LmFwb3N0cm9waGVib29rcy5uZXSCHHd3dy53YXRlcm1hcmtib29r
Y29tcGFueS5jb22CFHd3dy5ib3N3ZWxsYm9va3MuY29tghh3d3cubW9yYXZpYW5i
b29rc2hvcC5jb22CGmJvb2tzLm1vcmF2aWFuYm9va3Nob3AuY29tghp3d3cudHVy
bm9mdGhlY29ya3NjcmV3LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMIGFBgNVHR8EfjB8MDygOqA4hjZodHRwOi8vY3Js
My5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkU2VydmVyQ0FHNC5jcmwwPKA6
oDiGNmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRydXN0ZWRTZXJ2
ZXJDQUc0LmNybDBCBgNVHSAEOzA5MDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIB
FhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMHsGCCsGAQUFBwEBBG8wbTAk
BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEUGCCsGAQUFBzAC
hjlodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkU2Vy
dmVyQ0FHNC5jcnQwDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQsFAAOCAgEAqyCB
mx9cRoLJfvp+VGBfAiQndhHSubLfdIlVG7OmGU3z/TdaDC20H3up2ODGXZ2zO7Jq
PbmsJha9c0c38elSUVPMpiqaDa2iNA0nLLUdy7/aMucSvg87f/BmVFgMbCH1yfkl
CgHtlxQesWIVxBxwa7oi1ldbdENB3ZnbA7F2jwd2sg6dt+RY7wTjxQQ+2BzqyLVQ
F5cW48W/zfwCFWMzr0TI0emSJD/dErYoVs6OzBaWaQ85xn3h1FthtoU7FNdKclTA
CwNMG6PAP4zPUrHryjgvFeSNG3ycH9C8fSqDa44mBPZtRbFurcLCKSS7lc8eboLE
6H6dwKOLVjeln/YEcyuu+NTo5DNMrCq45z8FoTw/WyZCo/slaFxOOXzYeEm4b0AU
G6XjGHPOoTjdgcgzY/2CfC2kR5O8nfLBtHVeFfhJkqbU1TK0mzGgaNMLNTowMuQl
QLmQYLnlXLbmFsPSlc+ZBsptpHqhnfWPPlMTaY/czQDuZgvGfgubskuRjtEePdGM
5yaXOQ6dybvsf64TueI6gf0jLOfV75/4rRjoiDijSZZW+MQ0Xy15lrG/+qydTKB7
NzmS+T6X5pA//7KWBQTTE3np+2SgDL2re4bAEqXdvw+jBXoAx2DrPVEK9ANArTr7
hGmsI6Tgt6qV7dsQpzQZ3VqGziEVIyILK8H+F/o=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dtuj75EGG2lM+0qRb++
XjEipPfmRLhC89HwFVY6+WXVFyiGFjLRcXnnL7UidKT7Tq6mhCFIhuiJNg9zdrTr
jnG/dCDxwQNvWWipMiIysPP89KTRb6+rKOWTGyeY3R8Dpp5Cwvq9/+zdU1zqE2Uh
s7Z9nmBqPMDV+qmNBkbHAqv44Kd4LPdXF9d9JpdpNroo9U09oKhC3uc2M/WOYE0f
4AzBBx+1opgX7GqoSfWRYt1V9FWdMiH/CRgMaumuhOFvgOfWc6CimiKGb6FJ5xEO
1Qevx0RbMYUyqn2A/dQrkHPjA81rI3omV7Sjm1IZ77afnIDGl96TraRA+MYNY3wL
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14449276932856333262917427449359653716
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Trusted Server CA G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'White Plains'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Booksellers Association, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.indiebound.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28006871290833767150073620198206941297172142937048912288422664422483796302219745236214453039172677020325124179466021200030126362544227477687492821742956317497086209411960104399379222061809442496149481137314992696360395217855852169619796991664315650127970675117611213254161587978445568986194547603770926768745988430484028648463094602548440143005273044201451574294317654942713809445768674467302115198008908540152987688376278220061793130016942420427647284487718829224605197737311106234890969710517019087886053587790055349571940695485761715554916028372130421247006871360319918880358638719687473936145854113327440113437457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 36d0a89e89f282bc6be259b6a3c6f734468cb42f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							184154cf038164beebb12d312106f391bec8ccee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2468 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiebound.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbpbooks.teachingforchange.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boulderbookstore.indiebound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.gallerybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.gallerybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.subbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alabamabooksmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alexanderbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avidreaderbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barrettbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baybooks.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookbinnorthbrook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookcaseofwayzata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookcellarvt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookmarkshoppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookmouse.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookpassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookpeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksandbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booktable.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookvault.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookwormofedwards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookwormomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bracebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brilliant-books.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklinebooksmith-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burlinghambooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buxtonvillagebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carmichaelsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centuriesandsleuths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charisbooksandmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clintonbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commongoodbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.concordbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dramabookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elliottbaybook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyleafbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foreverbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gardendistrictbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodbooksbadcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenapplebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hearthsidebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hugobookstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jabberwockybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertybaybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malaprops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysteriesonmainstreet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mystgalaxy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicolasbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novelplacesusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.octaviabooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prairielightsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pyramidbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.queerbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rainydaybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rdbooks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rlb2e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roomofonesown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schulerbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secretgardenbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.semcoop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.squarebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storybookcove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunriverbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toadbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ttmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vermontbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vivabooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellesleybooksmith-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wildrumpusbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.womenandchildrenfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookcellarinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farleysbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ccbmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rjjulia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mostlybooksaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prairiepages.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sundancebookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverlights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbgranadabooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readersnookvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anovelbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anopenbookmn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qabookco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.read-it-again.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azizibooks.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azizibooks.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainpointbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankofbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetwig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dogearedbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phoenixbooks.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkroadbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ancestrybooksmn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tfcbooks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.wellesleybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klindtsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apostrophebooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watermarkbookcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boswellbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moravianbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.moravianbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turnofthecorkscrew.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTrustedServerCAG4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTrustedServerCAG4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTrustedServerCAG4.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00ab20819b1f5c4682c97efa7e54605f0224277611d2b9b2df7489551bb3a6194df3fd375a0c2db41f7ba9d8e0c65d9db33bb26a3db9ac2616bd734737f1e9525153cca62a9a0dada2340d272cb51dcbbfda32e712be0f3b7ff06654580c6c21f5c9f9250a01ed97141eb16215c41c706bba22d6575b744341dd99db03b1768f0776b20e9db7e458ef04e3c5043ed81ceac8b550179716e3c5bfcdfc02156333af44c8d1e992243fdd12b62856ce8ecc1696690f39c67de1d45b61b6853b14d74a7254c00b034c1ba3c03f8ccf52b1ebca382f15e48d1b7c9c1fd0bc7d2a836b8e2604f66d45b16eadc2c22924bb95cf1e6e82c4e87e9dc0a38b5637a59ff604732baef8d4e8e4334cac2ab8e73f05a13c3f5b2642a3fb25685c4e397cd87849b86f40141ba5e31873cea138dd81c83363fd827c2da44793bc9df2c1b4755e15f84992a6d4d532b49b31a068d30b353a3032e42540b99060b9e55cb6e616c3d295cf9906ca6da47aa19df58f3e5313698fdccd00ee660bc67e0b9bb24b918ed11e3dd18ce72697390e9dc9bbec7fae13b9e23a81fd232ce7d5ef9ff8ad18e88838a3499656f8c4345f2d7996b1bffaac9d4ca07b373992f93e97e6903fffb2960504d31379e9fb64a00cbdab7b86c012a5ddbf0fa3057a00c760eb3d510af40340ad3afb8469ac23a4e0b7aa95eddb10a73419dd5a86ce211523220b2bc1fe17fa