www.indiebound.org

- American Booksellers Association, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 03:33:21:01:e9:a9:cd:b5:8d:f3:75:57:91:56:1f:42 was issued on by DigiCert Inc.

With 115 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American Booksellers Association, Inc.

Organization: American Booksellers Association, Inc.
State / Province: New York
Locality: White Plains
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:33:21:01:e9:a9:cd:b5:8d:f3:75:57:91:56:1f:42
Serial Number (int): 4253160598200394033261391506214100802
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 10:00:22:03:2e:1d:b7:93:2b:d1:7f:25:a6:63:32:4d:b3:62:0e:65
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 0e:2e:ff:93:8e:e7:78:88:fe:24:84:6b:82:1b:4c:9b:14:72:25:47
Fingerprint (sha256): 03:b0:77:a5:88:6b:83:c9:28:51:aa:89:07:83:4a:e3:99:6f:08:61:b7:da:bf:13:42:b4:21:3b:69:e5:b7:9c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g5.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g5.crl

Check the revocation status for certificate www.indiebound.org

115

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.indiebound.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.indiebound.org
www.greenlightbookstore.com
www.posmanbooks.com
www.fourseasonsbooks.com
www.portbooknews.com
www.parkroadbooks.com
www.andersonsbookshop.com
www.watermarkbooks.com
www.mcnallyjackson.com
www.headhousebooks.com
www.barbarasbookstore.com
www.learnedowl.com
www.fof.net
www.lowrysbooks.com
www.bestsellersbookstore.com
www.thetraveler.com
www.dragonflybooks.com
www.exemplarbooks.com
www.signsoflifebooks.com
www.lagunabeachbooks.com
www.vintage-books.net
www.readmorebooks.com
www.mercerislandbooks.com
www.opendoor-bookstore.com
www.pageandpalette.com
www.overthemoonbookstore.com
www.northwindbook.com
www.thebookstoreplus.com
www.newcopperfields.com
www.waucomabookstore.com
www.undercoverbooksvi.com
www.foureyedfrog.com
www.mainstreetbookends.com
www.booksandbookswhb.com
www.browseaboutbooks.com
www.sundialbooks.net
www.grassrootsbookstore.com
www.horizonbooks.com
www.excelsiorbaybooks.net
www.cavalierhousebooks.com
www.pennbookcenter.com
www.riversendbookstore.com
www.morganhillbookstore.com
www.islandboundbookstore.com
www.justthebookstore.com
www.gallerybookshop.com
www.boundtobereadbooks.com
www.eastwest.com
www.broadwaybooks.net
shop.wildirisbooks.com
www.paulinasprings.com
www.lakeforestbookstore.com
www.seattlemystery.com
www.kidsinkbooks.com
www.mysterybooksonline.com
www.booksoup.com
www.avidreadertower.com
www.explorebooksellers.com
www.riverroadbooks.net
www.booknbrush.com
www.duckscottage.com
www.bunchofgrapes.com
www.booktowne.com
www.citylitbooks.com
www.ravenbookstore.com
www.branchesbooks.com
www.astoriabookshop.com
www.unabridgedbookstore.com
www.thebookies.com
www.apostrophebooks.net
www.bluefrogbooksandmore.com
www.bookbardenver.com
www.bankstreetbooks.com
www.sbgranadabooks.com
www.mendocinobookcompany.com
www.lucys-books.com
www.beachbooks37.com
www.klindtsbooks.com
www.anunlikelystory.com
www.booksq.com
www.nebookfair.com
www.mitzisbooks.com
www.hudsonbooksellers.com
shop.harvard.com
www.winchesterbookgallery.com
www.tpetbookstore.com
www.plainstrading.com
www.besthometownnews.com
www.bhny.com
www.iconoclastbooks.com
www.greatlakesbook.com
www.distantlandsbookstore.com
www.wellreadmoose.com
www.kingsbookstore.com
www.bookcellarinc.com
www.tecolotebookshop.com
www.mainstreetbooksminot.com
www.crowbooks.com
www.mysteryscape.com
www.theivybookshop.com
www.acappellabooks.com
www.mainecoastbookshop.com
www.littlecitybooks.com
www.imaginationsbookstore.com
www.hennesseyingalls.com
www.harborbookssgh.com
www.scrawlbooks.com
www.therippedbodicela.com
www.browsersolympia.com
www.mysterylovescompany.com
www.bookmanbookstore.com
www.americanclassroomlibraries.com
www.wildirisbooks.com
www.eastcitybookshop.com
www.leanasbooks.com

Other certificates including the domain name indiebound.org

(limited to 100 certificates)
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.org
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
indiebound.org

Certificate

The complete raw certificate details for www.indiebound.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48lubr/aXs5Mlq5L79/b
l2Qwu3spfeTWl5UCasTQqDXlDoeVWqgJt271w1EFj3UbSzzcgvcqmalBJShwCMr5
dvn7FoxzPxXuMr76NtCj1i8ZBI3nWcoFSvNlRr/lXyo60Lie2nP0Tk4n66oL/cjL
9AVZrDmxdgnowITtmkGsOYHxRVSAD16ixvsu3EteFraFHoE6tEEgr2EBctqgLkTL
grIzpVEAo+rsj++Z+CRRTRL2ex8GyqfmJy+6pnLY5QEqozWBx4L+jhgSx2008IxG
xr1mMVM7LZxbmZgqvam6k/XUIujunN1rXw8UXp9MHXRRQUyBnP/yG444zMaBIkfl
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4253160598200394033261391506214100802
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'White Plains'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Booksellers Association, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.indiebound.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28755424741553990846432707525052514059892608113316092762672675402089738860910044374888061916898522356530960364942019246591223682133335336670910982148479071171844317455644364848700032452160315978889194644543456010537158054500986772081917699901845241473493527604447248394379163619770905410427412447692286854295263816600585438814553718726193261452468821817876076353947297623053071422582606373256596039338537091325171168810046882738605000879253935388249179175692261776281038233798521581958370977301013490550856675205965068379520179081867092406098639623571399589688727113112077189542693906366691061021455878570634297992557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							100022032e1db7932bd17f25a663324db3620e65
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2820 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiebound.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenlightbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.posmanbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fourseasonsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portbooknews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkroadbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersonsbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watermarkbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcnallyjackson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.headhousebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarasbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learnedowl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fof.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lowrysbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestsellersbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetraveler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dragonflybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exemplarbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.signsoflifebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagunabeachbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vintage-books.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readmorebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercerislandbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opendoor-bookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pageandpalette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overthemoonbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northwindbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookstoreplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newcopperfields.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waucomabookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.undercoverbooksvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foureyedfrog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainstreetbookends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksandbookswhb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.browseaboutbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sundialbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grassrootsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horizonbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.excelsiorbaybooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cavalierhousebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennbookcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riversendbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morganhillbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.islandboundbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justthebookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gallerybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boundtobereadbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broadwaybooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.wildirisbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paulinasprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lakeforestbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seattlemystery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidsinkbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysterybooksonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksoup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avidreadertower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorebooksellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverroadbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booknbrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duckscottage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bunchofgrapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booktowne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citylitbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ravenbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branchesbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astoriabookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unabridgedbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apostrophebooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluefrogbooksandmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookbardenver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankstreetbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbgranadabooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendocinobookcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucys-books.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beachbooks37.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klindtsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anunlikelystory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nebookfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mitzisbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hudsonbooksellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.harvard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winchesterbookgallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tpetbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plainstrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besthometownnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iconoclastbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatlakesbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distantlandsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellreadmoose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookcellarinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecolotebookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainstreetbooksminot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crowbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysteryscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theivybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acappellabooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainecoastbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littlecitybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imaginationsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hennesseyingalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harborbookssgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scrawlbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.therippedbodicela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.browsersolympia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysterylovescompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookmanbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.americanclassroomlibraries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wildirisbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastcitybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leanasbooks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							01df007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015aaa9c6ea5000004030047304502204b25946f6c831fe37eb6a1c4293121d2ce9445426a60d3d47e3b5ac057c1c0ac0221009823ac4fc9b3a0bf22387ecea09ced78cf7842f98e3e0352a5558ec377ff4a6a0076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000015aaa9c6ff3000004030047304502200e4f382757e4d9b18bd1181335267a8fa99987692b90afa04214df65ab9c6108022100b41ffb5d94b2f0234e9d417b2d94cc0a9940c3d93cda2b16b77a9a47dda00c2a007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015aaa9c71980000040300473045022100e8fe25efdae47a320b200b6b7edfb349a154a691fac876cd8a10648b634db48a02205fdb74f59204e52456a410e16a15656e6c3efc5a7aa5482479242ca474db5ba7007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000015aaa9c6f580000040300463044022022f95e995e77e713525be33480d28fe087b7651d03db78d51b11f8714f0295970220655c12ef4fd69669dca3c1668acccb7fa362e5e2ed78d949867ccb3dee6e5b4a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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