www.indiebound.org

- American Booksellers Association, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 06:be:89:7c:f9:6a:67:ee:04:50:c0:89:e7:e6:6c:05 was issued on by DigiCert Inc.

With 105 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American Booksellers Association, Inc.

Organization: American Booksellers Association, Inc.
State / Province: New York
Locality: White Plains
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:be:89:7c:f9:6a:67:ee:04:50:c0:89:e7:e6:6c:05
Serial Number (int): 8964692969429368911247437031251799045
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 10:00:22:03:2e:1d:b7:93:2b:d1:7f:25:a6:63:32:4d:b3:62:0e:65
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 26:d8:58:04:e7:eb:27:f9:13:23:62:c1:99:78:0f:6b:d6:37:50:56
Fingerprint (sha256): 0d:e0:88:ab:b1:b8:c2:18:c7:4b:11:10:d7:e4:b2:93:12:62:f2:ad:ca:49:42:19:ac:a4:bc:e4:93:43:f3:b0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g4.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g4.crl

Check the revocation status for certificate www.indiebound.org

105

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.indiebound.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.indiebound.org
www.greenlightbookstore.com
www.posmanbooks.com
www.fourseasonsbooks.com
www.portbooknews.com
www.parkroadbooks.com
www.andersonsbookshop.com
www.watermarkbooks.com
www.mcnallyjackson.com
www.headhousebooks.com
www.barbarasbookstore.com
www.learnedowl.com
www.fof.net
www.lowrysbooks.com
www.bestsellersbookstore.com
www.thetraveler.com
www.dragonflybooks.com
www.exemplarbooks.com
www.signsoflifebooks.com
www.lagunabeachbooks.com
www.vintage-books.net
www.readmorebooks.com
www.mercerislandbooks.com
www.opendoor-bookstore.com
www.pageandpalette.com
www.overthemoonbookstore.com
www.northwindbook.com
www.thebookstoreplus.com
www.newcopperfields.com
www.waucomabookstore.com
www.undercoverbooksvi.com
www.foureyedfrog.com
www.mainstreetbookends.com
www.booksandbookswhb.com
www.browseaboutbooks.com
www.sundialbooks.net
www.grassrootsbookstore.com
www.horizonbooks.com
www.excelsiorbaybooks.net
www.cavalierhousebooks.com
www.pennbookcenter.com
www.riversendbookstore.com
www.morganhillbookstore.com
www.islandboundbookstore.com
www.justthebookstore.com
www.gallerybookshop.com
www.boundtobereadbooks.com
www.eastwest.com
www.broadwaybooks.net
shop.wildirisbooks.com
www.paulinasprings.com
www.lakeforestbookstore.com
www.seattlemystery.com
www.kidsinkbooks.com
www.mysterybooksonline.com
www.booksoup.com
www.avidreadertower.com
www.explorebooksellers.com
www.riverroadbooks.net
www.booknbrush.com
www.duckscottage.com
www.bunchofgrapes.com
www.booktowne.com
www.citylitbooks.com
www.ravenbookstore.com
www.branchesbooks.com
www.astoriabookshop.com
www.unabridgedbookstore.com
www.thebookies.com
www.apostrophebooks.net
www.bluefrogbooksandmore.com
www.bookbardenver.com
www.bankstreetbooks.com
www.sbgranadabooks.com
www.mendocinobookcompany.com
www.lucys-books.com
www.beachbooks37.com
www.klindtsbooks.com
www.anunlikelystory.com
www.booksq.com
www.nebookfair.com
www.mitzisbooks.com
www.hudsonbooksellers.com
shop.harvard.com
www.winchesterbookgallery.com
www.tpetbookstore.com
www.plainstrading.com
www.besthometownnews.com
www.bhny.com
www.iconoclastbooks.com
www.greatlakesbook.com
www.distantlandsbookstore.com
www.wellreadmoose.com
www.kingsbookstore.com
www.bookcellarinc.com
www.tecolotebookshop.com
www.mainstreetbooksminot.com
www.crowbooks.com
www.mysteryscape.com
www.theivybookshop.com
www.acappellabooks.com
www.mainecoastbookshop.com
www.littlecitybooks.com
www.imaginationsbookstore.com
www.hennesseyingalls.com

Other certificates including the domain name indiebound.org

(limited to 100 certificates)
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.org
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
indiebound.org

Certificate

The complete raw certificate details for www.indiebound.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48lubr/aXs5Mlq5L79/b
l2Qwu3spfeTWl5UCasTQqDXlDoeVWqgJt271w1EFj3UbSzzcgvcqmalBJShwCMr5
dvn7FoxzPxXuMr76NtCj1i8ZBI3nWcoFSvNlRr/lXyo60Lie2nP0Tk4n66oL/cjL
9AVZrDmxdgnowITtmkGsOYHxRVSAD16ixvsu3EteFraFHoE6tEEgr2EBctqgLkTL
grIzpVEAo+rsj++Z+CRRTRL2ex8GyqfmJy+6pnLY5QEqozWBx4L+jhgSx2008IxG
xr1mMVM7LZxbmZgqvam6k/XUIujunN1rXw8UXp9MHXRRQUyBnP/yG444zMaBIkfl
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8964692969429368911247437031251799045
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'White Plains'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Booksellers Association, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.indiebound.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28755424741553990846432707525052514059892608113316092762672675402089738860910044374888061916898522356530960364942019246591223682133335336670910982148479071171844317455644364848700032452160315978889194644543456010537158054500986772081917699901845241473493527604447248394379163619770905410427412447692286854295263816600585438814553718726193261452468821817876076353947297623053071422582606373256596039338537091325171168810046882738605000879253935388249179175692261776281038233798521581958370977301013490550856675205965068379520179081867092406098639623571399589688727113112077189542693906366691061021455878570634297992557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							100022032e1db7932bd17f25a663324db3620e65
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2562 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiebound.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenlightbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.posmanbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fourseasonsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portbooknews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkroadbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersonsbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watermarkbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcnallyjackson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.headhousebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarasbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learnedowl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fof.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lowrysbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestsellersbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetraveler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dragonflybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exemplarbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.signsoflifebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagunabeachbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vintage-books.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readmorebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercerislandbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opendoor-bookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pageandpalette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overthemoonbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northwindbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookstoreplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newcopperfields.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waucomabookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.undercoverbooksvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foureyedfrog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainstreetbookends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksandbookswhb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.browseaboutbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sundialbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grassrootsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horizonbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.excelsiorbaybooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cavalierhousebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennbookcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riversendbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morganhillbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.islandboundbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justthebookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gallerybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boundtobereadbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broadwaybooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.wildirisbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paulinasprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lakeforestbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seattlemystery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidsinkbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysterybooksonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksoup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avidreadertower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorebooksellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverroadbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booknbrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duckscottage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bunchofgrapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booktowne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citylitbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ravenbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branchesbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astoriabookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unabridgedbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apostrophebooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluefrogbooksandmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookbardenver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankstreetbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbgranadabooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendocinobookcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucys-books.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beachbooks37.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klindtsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anunlikelystory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nebookfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mitzisbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hudsonbooksellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.harvard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winchesterbookgallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tpetbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plainstrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besthometownnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iconoclastbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatlakesbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distantlandsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellreadmoose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookcellarinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecolotebookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainstreetbooksminot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crowbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysteryscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theivybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acappellabooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainecoastbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littlecitybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imaginationsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hennesseyingalls.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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