www.indiebound.org

- American Booksellers Association, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 04:8a:2a:ed:9e:ff:ab:43:39:95:a6:c0:42:6f:7c:0c was issued on by DigiCert Inc.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American Booksellers Association, Inc.

Organization: American Booksellers Association, Inc.
State / Province: New York
Locality: White Plains
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8a:2a:ed:9e:ff:ab:43:39:95:a6:c0:42:6f:7c:0c
Serial Number (int): 6034319637103055355682333111331290124
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 10:00:22:03:2e:1d:b7:93:2b:d1:7f:25:a6:63:32:4d:b3:62:0e:65
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): ae:42:8d:b2:f5:85:e4:d1:46:20:c8:fe:12:83:dd:2e:71:e4:24:98
Fingerprint (sha256): 07:62:15:e8:b0:d4:aa:a8:a6:26:b5:48:34:fb:12:d5:5d:74:75:80:60:7a:32:a4:7b:e6:24:a7:05:8d:ef:85

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate www.indiebound.org

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.indiebound.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.indiebound.org
www.greenlightbookstore.com
www.portbooknews.com
www.parkroadbooks.com
www.andersonsbookshop.com
www.watermarkbooks.com
www.mcnallyjackson.com
www.headhousebooks.com
www.barbarasbookstore.com
www.learnedowl.com
www.lowrysbooks.com
www.bestsellersbookstore.com
www.dragonflybooks.com
www.lagunabeachbooks.com
www.readmorebooks.com
www.mercerislandbooks.com
www.opendoor-bookstore.com
www.overthemoonbookstore.com
www.northwindbook.com
www.thebookstoreplus.com
www.waucomabookstore.com
www.foureyedfrog.com
www.mainstreetbookends.com
www.browseaboutbooks.com
www.sundialbooks.net
www.horizonbooks.com
www.excelsiorbaybooks.net
www.cavalierhousebooks.com
www.pennbookcenter.com
www.riversendbookstore.com
www.morganhillbookstore.com
www.islandboundbookstore.com
www.justthebookstore.com
www.gallerybookshop.com
www.eastwest.com
www.broadwaybooks.net
shop.wildirisbooks.com
www.paulinasprings.com
www.lakeforestbookstore.com
www.kidsinkbooks.com
www.booksoup.com
www.explorebooksellers.com
www.riverroadbooks.net
www.booknbrush.com
www.duckscottage.com
www.bunchofgrapes.com
www.booktowne.com
www.citylitbooks.com
www.ravenbookstore.com
www.unabridgedbookstore.com
www.bookbardenver.com
www.bankstreetbooks.com
www.mendocinobookcompany.com
www.anunlikelystory.com
www.booksq.com
www.nebookfair.com
www.hudsonbooksellers.com
shop.harvard.com
www.winchesterbookgallery.com
www.plainstrading.com
www.besthometownnews.com
www.bhny.com
www.iconoclastbooks.com
www.distantlandsbookstore.com
www.kingsbookstore.com
www.bookcellarinc.com
www.tecolotebookshop.com
www.mainstreetbooksminot.com
www.crowbooks.com
www.theivybookshop.com
www.littlecitybooks.com
www.imaginationsbookstore.com
www.hennesseyingalls.com
www.scrawlbooks.com
www.therippedbodicela.com
www.browsersolympia.com
www.MysteryLovesCompany.com
www.wildirisbooks.com
www.eastcitybookshop.com
www.leanasbooks.com
www.wellreadmoose-shop.com
www.thefirstchapterma.org
www.tridentbookscafe.com
www.anotherchapterbooks.com
www.shortstoriesnj.com
www.novelmemphis.com
www.inkspellbooks.com
www.chautauquabookstore.com
www.townecenterbooks.com
www.flyingpigbooks.com
www.covertocoverchildrensbooks.com
www.wakefieldbooks.com
www.blissbooksandbindery.com
www.nextchapterbooksvt.com
www.thebookcatapult.com
www.maggiemaesbooks.com
www.beautybrainsbooks.com

Other certificates including the domain name indiebound.org

(limited to 100 certificates)
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.org
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
indiebound.org

Certificate

The complete raw certificate details for www.indiebound.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48lubr/aXs5Mlq5L79/b
l2Qwu3spfeTWl5UCasTQqDXlDoeVWqgJt271w1EFj3UbSzzcgvcqmalBJShwCMr5
dvn7FoxzPxXuMr76NtCj1i8ZBI3nWcoFSvNlRr/lXyo60Lie2nP0Tk4n66oL/cjL
9AVZrDmxdgnowITtmkGsOYHxRVSAD16ixvsu3EteFraFHoE6tEEgr2EBctqgLkTL
grIzpVEAo+rsj++Z+CRRTRL2ex8GyqfmJy+6pnLY5QEqozWBx4L+jhgSx2008IxG
xr1mMVM7LZxbmZgqvam6k/XUIujunN1rXw8UXp9MHXRRQUyBnP/yG444zMaBIkfl
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6034319637103055355682333111331290124
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'White Plains'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Booksellers Association, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.indiebound.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28755424741553990846432707525052514059892608113316092762672675402089738860910044374888061916898522356530960364942019246591223682133335336670910982148479071171844317455644364848700032452160315978889194644543456010537158054500986772081917699901845241473493527604447248394379163619770905410427412447692286854295263816600585438814553718726193261452468821817876076353947297623053071422582606373256596039338537091325171168810046882738605000879253935388249179175692261776281038233798521581958370977301013490550856675205965068379520179081867092406098639623571399589688727113112077189542693906366691061021455878570634297992557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							100022032e1db7932bd17f25a663324db3620e65
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2421 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiebound.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenlightbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portbooknews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkroadbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersonsbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watermarkbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcnallyjackson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.headhousebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarasbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learnedowl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lowrysbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestsellersbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dragonflybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagunabeachbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readmorebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercerislandbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opendoor-bookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overthemoonbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northwindbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookstoreplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waucomabookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foureyedfrog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainstreetbookends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.browseaboutbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sundialbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horizonbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.excelsiorbaybooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cavalierhousebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennbookcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riversendbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morganhillbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.islandboundbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justthebookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gallerybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broadwaybooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.wildirisbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paulinasprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lakeforestbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidsinkbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksoup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorebooksellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverroadbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booknbrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duckscottage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bunchofgrapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booktowne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citylitbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ravenbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unabridgedbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookbardenver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankstreetbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendocinobookcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anunlikelystory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nebookfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hudsonbooksellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.harvard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winchesterbookgallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plainstrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besthometownnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iconoclastbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distantlandsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookcellarinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecolotebookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainstreetbooksminot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crowbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theivybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littlecitybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imaginationsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hennesseyingalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scrawlbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.therippedbodicela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.browsersolympia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.MysteryLovesCompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wildirisbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastcitybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leanasbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellreadmoose-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefirstchapterma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tridentbookscafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anotherchapterbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shortstoriesnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.novelmemphis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inkspellbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chautauquabookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townecenterbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyingpigbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.covertocoverchildrensbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wakefieldbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blissbooksandbindery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nextchapterbooksvt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookcatapult.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maggiemaesbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beautybrainsbooks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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