www.indiebound.org

- American Booksellers Association, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0c:d4:e6:1b:c7:89:84:ad:93:c2:54:72:b1:01:3c:c0 was issued on by DigiCert Inc.

With 109 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American Booksellers Association, Inc.

Organization: American Booksellers Association, Inc.
State / Province: New York
Locality: White Plains
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:d4:e6:1b:c7:89:84:ad:93:c2:54:72:b1:01:3c:c0
Serial Number (int): 17056170038551368047473274577357978816
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 71:13:f4:5a:42:de:a4:9e:54:7d:b2:48:53:63:55:7c:3e:4a:3b:8c
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 3d:2d:3c:67:b3:ed:97:f5:88:4f:16:70:a5:b1:4e:53:dc:5d:94:8f
Fingerprint (sha256): 0d:c0:2f:53:7d:bc:ff:fe:8c:71:0f:ca:2e:58:16:5f:4e:c6:ba:ea:5d:b5:65:9c:b8:89:36:40:a1:3c:73:24

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g1.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g1.crl

Check the revocation status for certificate www.indiebound.org

109

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.indiebound.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.indiebound.org
www.laurelbookstore.com
www.countrybookshelf.com
www.shoponceuponatime.com
www.goldennotebook.com
www.northtownbooks.com
www.booksonfirst.com
www.macsbacks.com
www.thebooksellersatlaurelwood.com
www.shopgulliversbooks.com
www.copperfieldsbooks.com
www.shopcrazywisdom.com
www.haywardbookshop.com
www.thebookseller.biz
store.wordsbookstore.com
www.valleybookseller.com
www.acmit.com
www.thecountrybookshop.biz
www.bearpondbooks.com
www.wellsborobookstore.com
www.bookshopbenicia.com
www.islandbooksri.com
www.paragraphsbookstore.com
www.cincybookshelf.com
www.bookshopwestportal.com
www.gibsonsbookstore.com
www.between-the-covers.com
www.boulderbookstore.net
shop.turtletownnisswa.com
www.inklingsbookshop.com
www.murderbooks.com
www.bookbugkalamazoo.com
www.reiters.com
www.huemanbookstore.com
www.seattletechnicalbooks.com
WWW.mainstreetbooksminot.com
www.parnassusbooks.net
www.avidbookshop.com
www.newtownbookshop.com
www.thebooknookvt.com
www.banksquarebooks.com
www.theoldcuriositybookshop.com
www.pageafterpagebook.com
www.mrsdalloways.com
www.rakestrawbooks.com
www.bestofbooksok.com
www.poorrichardsbooksky.com
www.morrisbookshop.com
www.abookforallseasons.com
www.nantucketbookpartners.com
www.TITCOMBSBOOKSHOP.COM
www.duckstorebooks.com
shop.myvermontbookstore.com
www.abcfairs.com
www.warwicks.com
www.eightcousins.com
www.northshire.com
www.winterriverbooks.com
www.bluebirdbookstore.com
store.mjudsonbooks.com
www.battenkillbooks.com
www.elmstreetbooks.com
www.bookpeopleofmoscow.com
www.benningtonbookshop.com
www.pagesabookstore.com
www.literatibookstore.com
www.getyourfaceinabook.com
www.contentbookstore.com
shop.thebookstall.com
www.cottagebooks.com
www.nextpagebooks.com
www.cornellstorebooks.com
www.PEREGRINEBOOKCOMPANY.COM
www.thedockbookshop.com
www.readinutopia.com
www.readbetweenthelynes.com
www.readersbooks.com
www.snowboundBooks.com
www.buttonwoodbooksandtoys.com
www.browserbookstore.com
www.herringbonebooks.com
www.volumesbooks.com
www.bookmarksnc.org
www.letsplaybooks.com
www.roundaboutbookshop.com
www.sanddollarbook.com
shop.booksandbookskw.com
www.bookedon25th.com
www.midtownreader.com
www.duckriverbooks.com
www.absolutelyfiction.com
www.ThisHouseOfBooks.com
www.belmontbooks.com
www.eshaverbooks.com
www.thebookstall.com
www.printbookstore.com
www.page2books.com
www.passbooksonline.com
www.gramercybooksbexley.com
www.hypertextbookstore.com
www.page158books.com
www.shermans.com
shop.duckriverbooks.com
www.universitypressbooks.com
www.hillsandhamletsbookshop.com
www.midtownreader-shop.com
www.ptreyesbooks.com
www.wordafterwordbooks.com
shop.booksandbooks.com

Other certificates including the domain name indiebound.org

(limited to 100 certificates)
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.org
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
indiebound.org

Certificate

The complete raw certificate details for www.indiebound.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k0m5qGsGp+PnnPHt48k
39j09eHHvq1cv0leZqtchbI4yqmG2fKTH8bvyvDONkZi0+g7JNx+HAkTB/3YCN0t
jGSkoGVE7Sr+K0tzxZZRs0Cw+bDx5bXGbTbaW4fMxRLN/F2L4My7lUACdVoIq3/e
JBWssbNH7mYUBvJjJ7j60rqEm54ZN+gebGEf0I+bCG+ejwDifJlbQS5keHTgyWH3
Zi+88IFh1/zRU6I212VhID3sD5B6MTqJjpMQ+FhKbMJ6I6Oe7vLk/FA5Qs3XfxMo
wB7w3qYDK/peAbUZCSNfB/Z3qv9R7xAlTZhSGhGqdDEqMrJaVxODW8nIZll7PKpq
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17056170038551368047473274577357978816
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'White Plains'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Booksellers Association, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.indiebound.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27053042310522906609731864356361659137691981571103178547686415590677280763641149720772841332648837668397248868175267560735246812465487490701267537520605317877287008372835279723164241160073901842573413100862015584597357383374769461148206095434345083579221585679099351851146127619960341123127191301965429689310008731047459279223780317271013908538865781590760995225714796768653574921769071738958268958370820527477213379589302579839295921499908258021801822575183594016567569551188281269984540188861657783398451169046032083244665002477319057397889580589466039115305315416052358768758785335577228846492119408989771041237631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7113f45a42dea49e547db2485363557c3e4a3b8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2737 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiebound.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laurelbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countrybookshelf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoponceuponatime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldennotebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northtownbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksonfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macsbacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebooksellersatlaurelwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopgulliversbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copperfieldsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopcrazywisdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haywardbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookseller.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.wordsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valleybookseller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acmit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecountrybookshop.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bearpondbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellsborobookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookshopbenicia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.islandbooksri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paragraphsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cincybookshelf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookshopwestportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gibsonsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.between-the-covers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boulderbookstore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.turtletownnisswa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inklingsbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.murderbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookbugkalamazoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reiters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huemanbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seattletechnicalbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'WWW.mainstreetbooksminot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parnassusbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avidbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newtownbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebooknookvt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banksquarebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theoldcuriositybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pageafterpagebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrsdalloways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rakestrawbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestofbooksok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poorrichardsbooksky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morrisbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abookforallseasons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nantucketbookpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.TITCOMBSBOOKSHOP.COM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duckstorebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.myvermontbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abcfairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warwicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eightcousins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northshire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winterriverbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluebirdbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mjudsonbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.battenkillbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elmstreetbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookpeopleofmoscow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benningtonbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pagesabookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.literatibookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getyourfaceinabook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contentbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thebookstall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cottagebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nextpagebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornellstorebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.PEREGRINEBOOKCOMPANY.COM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedockbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readinutopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readbetweenthelynes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readersbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snowboundBooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buttonwoodbooksandtoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.browserbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herringbonebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volumesbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookmarksnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.letsplaybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roundaboutbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanddollarbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.booksandbookskw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookedon25th.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midtownreader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duckriverbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.absolutelyfiction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ThisHouseOfBooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belmontbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eshaverbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookstall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.printbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.page2books.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.passbooksonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gramercybooksbexley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hypertextbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.page158books.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shermans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.duckriverbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universitypressbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillsandhamletsbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midtownreader-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ptreyesbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordafterwordbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.booksandbooks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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