www.indiebound.org

- American Booksellers Association, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 09:5c:66:b3:96:82:53:fe:dc:74:09:cc:44:7c:ee:7d was issued on by DigiCert Inc.

With 110 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American Booksellers Association, Inc.

Organization: American Booksellers Association, Inc.
State / Province: New York
Locality: White Plains
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:5c:66:b3:96:82:53:fe:dc:74:09:cc:44:7c:ee:7d
Serial Number (int): 12442826307250418009186808631587040893
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 71:13:f4:5a:42:de:a4:9e:54:7d:b2:48:53:63:55:7c:3e:4a:3b:8c
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 15:45:a8:4f:cc:68:fc:cf:41:53:3d:43:e3:ab:59:dd:6b:7a:91:36
Fingerprint (sha256): 02:50:fa:7e:a5:cb:5a:5c:02:1f:b8:d7:fb:cb:96:62:08:23:5f:9e:c0:52:10:26:4b:36:b2:15:af:5e:07:83

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g1.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g1.crl

Check the revocation status for certificate www.indiebound.org

110

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.indiebound.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.indiebound.org
www.laurelbookstore.com
www.countrybookshelf.com
www.shoponceuponatime.com
www.goldennotebook.com
www.northtownbooks.com
www.booksonfirst.com
www.macsbacks.com
www.thebooksellersatlaurelwood.com
www.shopgulliversbooks.com
www.copperfieldsbooks.com
www.shopcrazywisdom.com
www.haywardbookshop.com
www.thebookseller.biz
store.wordsbookstore.com
www.valleybookseller.com
www.acmit.com
www.thecountrybookshop.biz
www.bearpondbooks.com
www.wellsborobookstore.com
www.bookshopbenicia.com
www.islandbooksri.com
www.paragraphsbookstore.com
www.cincybookshelf.com
www.bookshopwestportal.com
www.gibsonsbookstore.com
www.between-the-covers.com
www.boulderbookstore.net
shop.turtletownnisswa.com
www.inklingsbookshop.com
www.murderbooks.com
www.bookbugkalamazoo.com
www.reiters.com
www.huemanbookstore.com
www.seattletechnicalbooks.com
WWW.mainstreetbooksminot.com
www.parnassusbooks.net
www.avidbookshop.com
www.newtownbookshop.com
www.banksquarebooks.com
www.mrsdalloways.com
www.rakestrawbooks.com
www.bestofbooksok.com
www.poorrichardsbooksky.com
www.abookforallseasons.com
www.nantucketbookpartners.com
www.TITCOMBSBOOKSHOP.COM
shop.myvermontbookstore.com
www.abcfairs.com
www.warwicks.com
www.eightcousins.com
www.northshire.com
www.winterriverbooks.com
www.bluebirdbookstore.com
www.battenkillbooks.com
www.elmstreetbooks.com
www.bookpeopleofmoscow.com
www.benningtonbookshop.com
www.pagesabookstore.com
www.literatibookstore.com
www.getyourfaceinabook.com
www.contentbookstore.com
shop.thebookstall.com
www.cottagebooks.com
www.nextpagebooks.com
www.cornellstorebooks.com
www.PEREGRINEBOOKCOMPANY.COM
www.thedockbookshop.com
www.readinutopia.com
www.readbetweenthelynes.com
www.readersbooks.com
www.snowboundBooks.com
www.buttonwoodbooksandtoys.com
www.browserbookstore.com
www.herringbonebooks.com
www.volumesbooks.com
www.bookmarksnc.org
www.letsplaybooks.com
www.roundaboutbookshop.com
www.sanddollarbook.com
shop.booksandbookskw.com
www.bookedon25th.com
www.midtownreader.com
www.duckriverbooks.com
www.absolutelyfiction.com
www.ThisHouseOfBooks.com
www.belmontbooks.com
www.eshaverbooks.com
www.thebookstall.com
www.printbookstore.com
www.page2books.com
www.passbooksonline.com
www.gramercybooksbexley.com
www.hypertextbookstore.com
www.page158books.com
www.shermans.com
shop.duckriverbooks.com
www.universitypressbooks.com
www.hillsandhamletsbookshop.com
www.midtownreader-shop.com
www.ptreyesbooks.com
www.wordafterwordbooks.com
shop.booksandbooks.com
www.brierbooks.com
www.highlandbooksonline.com
www.trailsendbookstore.com
www.thirdstreetbooks.com
shop.kramers.com
www.wellerbookworks.com
www.bookieschicago.com

Other certificates including the domain name indiebound.org

(limited to 100 certificates)
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.org
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
indiebound.org

Certificate

The complete raw certificate details for www.indiebound.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k0m5qGsGp+PnnPHt48k
39j09eHHvq1cv0leZqtchbI4yqmG2fKTH8bvyvDONkZi0+g7JNx+HAkTB/3YCN0t
jGSkoGVE7Sr+K0tzxZZRs0Cw+bDx5bXGbTbaW4fMxRLN/F2L4My7lUACdVoIq3/e
JBWssbNH7mYUBvJjJ7j60rqEm54ZN+gebGEf0I+bCG+ejwDifJlbQS5keHTgyWH3
Zi+88IFh1/zRU6I212VhID3sD5B6MTqJjpMQ+FhKbMJ6I6Oe7vLk/FA5Qs3XfxMo
wB7w3qYDK/peAbUZCSNfB/Z3qv9R7xAlTZhSGhGqdDEqMrJaVxODW8nIZll7PKpq
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12442826307250418009186808631587040893
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'White Plains'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Booksellers Association, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.indiebound.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27053042310522906609731864356361659137691981571103178547686415590677280763641149720772841332648837668397248868175267560735246812465487490701267537520605317877287008372835279723164241160073901842573413100862015584597357383374769461148206095434345083579221585679099351851146127619960341123127191301965429689310008731047459279223780317271013908538865781590760995225714796768653574921769071738958268958370820527477213379589302579839295921499908258021801822575183594016567569551188281269984540188861657783398451169046032083244665002477319057397889580589466039115305315416052358768758785335577228846492119408989771041237631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7113f45a42dea49e547db2485363557c3e4a3b8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2752 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiebound.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laurelbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countrybookshelf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoponceuponatime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldennotebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northtownbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksonfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macsbacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebooksellersatlaurelwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopgulliversbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copperfieldsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopcrazywisdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haywardbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookseller.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.wordsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valleybookseller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acmit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecountrybookshop.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bearpondbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellsborobookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookshopbenicia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.islandbooksri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paragraphsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cincybookshelf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookshopwestportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gibsonsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.between-the-covers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boulderbookstore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.turtletownnisswa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inklingsbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.murderbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookbugkalamazoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reiters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huemanbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seattletechnicalbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'WWW.mainstreetbooksminot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parnassusbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avidbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newtownbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banksquarebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrsdalloways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rakestrawbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestofbooksok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poorrichardsbooksky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abookforallseasons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nantucketbookpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.TITCOMBSBOOKSHOP.COM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.myvermontbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abcfairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warwicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eightcousins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northshire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winterriverbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluebirdbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.battenkillbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elmstreetbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookpeopleofmoscow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benningtonbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pagesabookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.literatibookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getyourfaceinabook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contentbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thebookstall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cottagebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nextpagebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornellstorebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.PEREGRINEBOOKCOMPANY.COM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedockbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readinutopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readbetweenthelynes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readersbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snowboundBooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buttonwoodbooksandtoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.browserbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herringbonebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volumesbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookmarksnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.letsplaybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roundaboutbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanddollarbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.booksandbookskw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookedon25th.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midtownreader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duckriverbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.absolutelyfiction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ThisHouseOfBooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belmontbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eshaverbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookstall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.printbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.page2books.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.passbooksonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gramercybooksbexley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hypertextbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.page158books.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shermans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.duckriverbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universitypressbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillsandhamletsbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midtownreader-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ptreyesbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordafterwordbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.booksandbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brierbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlandbooksonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trailsendbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thirdstreetbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.kramers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellerbookworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookieschicago.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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