www.indiebound.com

- American Booksellers Association, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 02:a7:17:e3:ee:9c:81:6b:5d:1e:3c:bb:76:5b:23:4a was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American Booksellers Association, Inc.

Organization: American Booksellers Association, Inc.
State / Province: New York
Locality: White Plains
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:a7:17:e3:ee:9c:81:6b:5d:1e:3c:bb:76:5b:23:4a
Serial Number (int): 3526054121005558617324373378374247242
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: f8:4b:8f:b4:95:30:67:f1:b4:d6:b8:39:b8:91:fe:e8:61:ad:54:bd
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 27:8b:43:01:09:3f:02:7c:77:6b:5c:f9:79:9a:7b:07:b1:76:b3:34
Fingerprint (sha256): 14:dc:80:5d:d3:d6:4a:19:66:91:98:32:a9:50:36:db:81:4e:c1:0b:d1:41:e3:40:3e:75:29:7b:f8:00:b8:e1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g1.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g1.crl

Check the revocation status for certificate www.indiebound.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.indiebound.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.indiebound.com
www.indiebound.org
www.vromansbookstore.com
www.literarybookpost.com
www.steamboatbooks.com
www.orcabooks.com
www.mrsnelsons.com
www.hickorystickbookshop.com
www.thebookloft.com
www.villagebooks.com
www.left-bank.com
www.booksco.com
www.kingsenglish.com
www.mcleanandeakin.com
www.stmarksbookshop.com
www.doylestownbookshop.com
www.keplers.com
www.harleysvillebooks.com
www.oldfirehousebooks.com
www.regulatorbookshop.com
www.tatteredcover.com
www.citylightsnc.com
www.booksinc.net
www.collectedworksbookstore.com
www.factandfictionbooks.com
www.auntiesbooks.com
www.chapter1bookstore.com
www.villagesquarebooks.com
www.pegasusbookstore.com
www.fountainbookstore.com
www.skylightbooks.com
www.griffinbaybook.com
www.velveteenrabbitbookshop.com
www.quailridgebooks.com
www.russosbooks.com
www.waterstreetbooks.com
www.dieselbookstore.com
www.bluewillowbookshop.com
www.viewpointbooks.com
www.thirdplacebooks.com
www.antigonebooks.com
www.liftbridgebooks.com
www.oblongbooks.com
www.orindabooks.com
www.ebookwoman.com
www.portersquarebooks.com
www.redberybooks.com
www.bookshopsantacruz.com
www.ggpbooks.com
www.broadsidebooks.com
www.mariasbookshop.com
www.inkwoodbooks.com
www.ottobookstore.com
www.redballoonbookshop.com
www.foxbookshop.com
www.thereadingbug.com
www.changinghands.com
www.penguinbookshop.com
www.saturnbooksellers.com
www.longfellowbooks.com
www.eagleharborbooks.com
www.prince-books.com
www.norwichbookstore.com
www.brazosbookstore.com
www.riverwalkbooks.com
www.politics-prose.com
www.hicklebees.com
www.watchungbooksellers.com
www.annieblooms.com
www.bkwrks.com
www.townebc.com
www.chestercountybooks.com
www.wordbookstores.com
www.sundogbooks.com
www.bookculture.com
www.bookendsandbeginnings.com
www.pagesbkshop.com
www.moonpalacebooks.com
www.roscoebooks.com
www.scuppernongbooks.com
www.booksonbroad.com
www.whistlestopbooks.com
www.odysseybks.com
www.ninthstreetbookshop.com
www.esowonbookstore.com
www.edgewaterbooks.com
www.onthedotbooks.com
www.writersblockbookstore.com
www.napabookmine.com
www.bookwormtricities.com
www.plottwistbookstore.com
www.konastories.com
www.barringtonbooksretold.com
www.shopatozbooks.com
www.cellardoorbookstore.com

Other certificates including the domain name indiebound.com

(limited to 100 certificates)
www.indiebound.org
www.indiebound.com
indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.com
indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
*.d7.indiebound.com
www.indiebound.org
*.d7.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
*.indiebound.com
indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.com
indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
images.indiebound.com
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.com
www.indiebound.com
*.d7.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
*.d7.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
*.d7.indiebound.com
www.indiebound.com
www.indiebound.com
indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.org
*.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com

Certificate

The complete raw certificate details for www.indiebound.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDtMNbcxhd+mt9JQpkcB
6FQRxsqmtxc2pcFERTy0uqcvXB6LcXaFHFKX/4x6NG2Gzyyl+sw9Oxvjsb21kqmX
ink5dBk3WZ3hqwgvWBSLM+rzWrfDBG83qRuhHR5lojvkFNGOMDJjRqTs5wrz2GNY
wHPl3XP1E3eIboci5DOh64SuTmN3fB4O0bGiMn7YM7wZ5IwiDQE+2JO0iUHd1r/O
LUyMwcPi1UFsboTHnWSG5b3xHY9yK6t+1fc0v46gIYJGYSo/O9ehym2zB1WXV1uL
armUv+n3Ugws3a1txW3q7iIgDH/3ddDAxcrKvlpFq019om24DFq/TaxNvRIZcFXA
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3526054121005558617324373378374247242
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'White Plains'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Booksellers Association, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.indiebound.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22752135676933979527193729020610044261918083198380688796982545801160649581606696303426070553768926085545710267310391677608429185090468982662777240385617935815840695262186826137316049200298779189316228888862262523108856260679033184493798308968330451217280892169026727838104504957008277991602765202632761408699769823925207494809917463157396834040012154420866362870168543714794793730119354487051368260231150532092941272691479855778344308722134546241085798742633636170255227797307932970500789229910135833628811775333897146022698921674026833604588198860777560631599294514361895177952890880239542878191595650966164897906937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f84b8fb4953067f1b4d6b839b891fee861ad54bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2292 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiebound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiebound.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vromansbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.literarybookpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steamboatbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orcabooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrsnelsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hickorystickbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookloft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villagebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.left-bank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingsenglish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcleanandeakin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmarksbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doylestownbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keplers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harleysvillebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oldfirehousebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regulatorbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tatteredcover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citylightsnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collectedworksbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factandfictionbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auntiesbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chapter1bookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villagesquarebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pegasusbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fountainbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skylightbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.griffinbaybook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velveteenrabbitbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quailridgebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.russosbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waterstreetbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dieselbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluewillowbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viewpointbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thirdplacebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antigonebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liftbridgebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oblongbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orindabooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebookwoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portersquarebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redberybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookshopsantacruz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ggpbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broadsidebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mariasbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inkwoodbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ottobookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redballoonbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thereadingbug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.changinghands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.penguinbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saturnbooksellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.longfellowbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eagleharborbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prince-books.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norwichbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brazosbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverwalkbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.politics-prose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hicklebees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watchungbooksellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annieblooms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bkwrks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townebc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chestercountybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordbookstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sundogbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookendsandbeginnings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pagesbkshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moonpalacebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roscoebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scuppernongbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksonbroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whistlestopbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odysseybks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ninthstreetbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esowonbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edgewaterbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onthedotbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.writersblockbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napabookmine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookwormtricities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plottwistbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konastories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barringtonbooksretold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopatozbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cellardoorbookstore.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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