www.indiebound.org

- American Booksellers Association, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 02:fe:6f:40:3f:57:db:18:4f:09:dc:b1:33:b3:d3:be was issued on by DigiCert Inc.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American Booksellers Association, Inc.

Organization: American Booksellers Association, Inc.
State / Province: New York
Locality: White Plains
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:fe:6f:40:3f:57:db:18:4f:09:dc:b1:33:b3:d3:be
Serial Number (int): 3979555831309851023517168466501292990
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 18:41:54:cf:03:81:64:be:eb:b1:2d:31:21:06:f3:91:be:c8:cc:ee
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 49:33:8b:80:35:3f:02:b6:ea:88:26:60:02:79:7e:77:99:f5:71:39
Fingerprint (sha256): 15:95:68:05:fe:61:55:a7:f6:bd:c1:51:e3:97:7c:fd:8a:37:5d:f3:c5:44:06:c7:25:ef:63:46:a9:33:8b:3a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate www.indiebound.org

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.indiebound.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.indiebound.org
orders.gallerybookshop.com
store.subbooks.com
www.alexanderbook.com
www.avidreaderbooks.com
www.barrettbookstore.com
www.bookbinnorthbrook.com
www.bookmarkshoppe.com
www.bookpassage.com
www.bookpeople.com
www.booksmith.com
www.booktable.net
www.bookvault.org
www.bookwormofedwards.com
www.bookwormomaha.com
www.brilliant-books.net
www.brooklinebooksmith-shop.com
www.burlinghambooks.com
www.buxtonvillagebooks.com
www.carmichaelsbookstore.com
www.centuriesandsleuths.com
www.charisbooksandmore.com
www.clintonbookshop.com
www.commongoodbooks.com
www.concordbookshop.com
www.dramabookshop.com
www.elliottbaybook.com
www.flyleafbooks.com
www.foreverbooks.net
www.gardendistrictbookshop.com
www.goodbooksbadcoffee.com
www.greenapplebooks.com
www.hearthsidebooks.com
www.hugobookstores.com
www.jabberwockybookshop.com
www.katybooks.com
www.libertybaybooks.com
www.malaprops.com
www.mystgalaxy.com
www.nicolasbooks.com
www.octaviabooks.com
www.prairielightsbooks.com
www.pyramidbooks.net
www.rainydaybooks.com
www.rdbooks.org
www.roomofonesown.com
www.schulerbooks.com
www.secretgardenbooks.com
www.squarebooks.com
www.storybookcove.com
www.sunriverbooks.com
www.toadbooks.com
www.ttmd.com
www.vermontbookshop.com
www.wildrumpusbooks.com
www.womenandchildrenfirst.com
www.farleysbookshop.com
www.rjjulia.com
www.mostlybooksaz.com
www.prairiepages.net
www.sundancebookstore.com
www.anovelbookshop.com
www.qabookco.com
www.read-it-again.com
www.mainpointbooks.com
www.bankofbooks.com
www.thetwig.com
www.phoenixbooks.biz
www.parkroadbooks.com
store.wellesleybooks.com
www.klindtsbooks.com
www.watermarkbookcompany.com
www.boswellbooks.com
books.moravianbookshop.com
www.communitybookstore.net
www.villagelightsbooks.com
www.bookhampton.com
www.questbookstore.com
www.citystacks.com
www.eastendbooksptown.com
www.glbtbooks.com
www.ebbooksellers.com
www.ddgbooks.com
www.readersloft.com
www.wordsworthbookstore.com
bookstore.marilynmartyouze.com
shop.scatteredbooks.com
www.THATBOOKSTORE.COM
www.inkwoodnj.com
www.adleintl.com
www.innisfreebookshop.com
www.snailonthewall.com
www.loozianabooks.com
www.bronxriverbooks.com
www.booknofurther.com
www.thebookbungalow.com
www.aaronsbooks.com
www.booksandcranniesva.com

Other certificates including the domain name indiebound.org

(limited to 100 certificates)
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.org
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
indiebound.org

Certificate

The complete raw certificate details for www.indiebound.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIP9DCCDtygAwIBAgIQAv5vQD9X2xhPCdyxM7PTvjANBgkqhkiG9w0BAQsFADBw
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS8wLQYDVQQDEyZEaWdpQ2VydCBTSEEyIEhpZ2ggQXNz
dXJhbmNlIFNlcnZlciBDQTAeFw0xODA3MjYwMDAwMDBaFw0yMDAzMTExMjAwMDBa
MIGFMQswCQYDVQQGEwJVUzERMA8GA1UECBMITmV3IFlvcmsxFTATBgNVBAcTDFdo
aXRlIFBsYWluczEvMC0GA1UEChMmQW1lcmljYW4gQm9va3NlbGxlcnMgQXNzb2Np
YXRpb24sIEluYy4xGzAZBgNVBAMTEnd3dy5pbmRpZWJvdW5kLm9yZzCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAN3bbo++RBhtpTPtKkW/vl4xIqT35kS4
QvPR8BVWOvll1RcohhYy0XF55y+1InSk+06upoQhSIboiTYPc3a0645xv3Qg8cED
b1loqTIiMrDz/PSk0W+vqyjlkxsnmN0fA6aeQsL6vf/s3VNc6hNlIbO2fZ5gajzA
1fqpjQZGxwKr+OCneCz3VxfXfSaXaTa6KPVNPaCoQt7nNjP1jmBNH+AMwQcftaKY
F+xqqEn1kWLdVfRVnTIh/wkYDGrproThb4Dn1nOgopoihm+hSecRDtUHr8dEWzGF
Mqp9gP3UK5Bz4wPNayN6Jle0o5tSGe+2n5yAxpfek62kQPjGDWN8CxECAwEAAaOC
DHIwggxuMB8GA1UdIwQYMBaAFFFo/5CvAgd1PMzZZWRiohK4WXI7MB0GA1UdDgQW
BBQYQVTPA4FkvuuxLTEhBvORvsjM7jCCCSAGA1UdEQSCCRcwggkTghJ3d3cuaW5k
aWVib3VuZC5vcmeCGm9yZGVycy5nYWxsZXJ5Ym9va3Nob3AuY29tghJzdG9yZS5z
dWJib29rcy5jb22CFXd3dy5hbGV4YW5kZXJib29rLmNvbYIXd3d3LmF2aWRyZWFk
ZXJib29rcy5jb22CGHd3dy5iYXJyZXR0Ym9va3N0b3JlLmNvbYIZd3d3LmJvb2ti
aW5ub3J0aGJyb29rLmNvbYIWd3d3LmJvb2ttYXJrc2hvcHBlLmNvbYITd3d3LmJv
b2twYXNzYWdlLmNvbYISd3d3LmJvb2twZW9wbGUuY29tghF3d3cuYm9va3NtaXRo
LmNvbYIRd3d3LmJvb2t0YWJsZS5uZXSCEXd3dy5ib29rdmF1bHQub3Jnghl3d3cu
Ym9va3dvcm1vZmVkd2FyZHMuY29tghV3d3cuYm9va3dvcm1vbWFoYS5jb22CF3d3
dy5icmlsbGlhbnQtYm9va3MubmV0gh93d3cuYnJvb2tsaW5lYm9va3NtaXRoLXNo
b3AuY29tghd3d3cuYnVybGluZ2hhbWJvb2tzLmNvbYIad3d3LmJ1eHRvbnZpbGxh
Z2Vib29rcy5jb22CHHd3dy5jYXJtaWNoYWVsc2Jvb2tzdG9yZS5jb22CG3d3dy5j
ZW50dXJpZXNhbmRzbGV1dGhzLmNvbYIad3d3LmNoYXJpc2Jvb2tzYW5kbW9yZS5j
b22CF3d3dy5jbGludG9uYm9va3Nob3AuY29tghd3d3cuY29tbW9uZ29vZGJvb2tz
LmNvbYIXd3d3LmNvbmNvcmRib29rc2hvcC5jb22CFXd3dy5kcmFtYWJvb2tzaG9w
LmNvbYIWd3d3LmVsbGlvdHRiYXlib29rLmNvbYIUd3d3LmZseWxlYWZib29rcy5j
b22CFHd3dy5mb3JldmVyYm9va3MubmV0gh53d3cuZ2FyZGVuZGlzdHJpY3Rib29r
c2hvcC5jb22CGnd3dy5nb29kYm9va3NiYWRjb2ZmZWUuY29tghd3d3cuZ3JlZW5h
cHBsZWJvb2tzLmNvbYIXd3d3LmhlYXJ0aHNpZGVib29rcy5jb22CFnd3dy5odWdv
Ym9va3N0b3Jlcy5jb22CG3d3dy5qYWJiZXJ3b2NreWJvb2tzaG9wLmNvbYIRd3d3
LmthdHlib29rcy5jb22CF3d3dy5saWJlcnR5YmF5Ym9va3MuY29tghF3d3cubWFs
YXByb3BzLmNvbYISd3d3Lm15c3RnYWxheHkuY29tghR3d3cubmljb2xhc2Jvb2tz
LmNvbYIUd3d3Lm9jdGF2aWFib29rcy5jb22CGnd3dy5wcmFpcmllbGlnaHRzYm9v
a3MuY29tghR3d3cucHlyYW1pZGJvb2tzLm5ldIIVd3d3LnJhaW55ZGF5Ym9va3Mu
Y29tgg93d3cucmRib29rcy5vcmeCFXd3dy5yb29tb2ZvbmVzb3duLmNvbYIUd3d3
LnNjaHVsZXJib29rcy5jb22CGXd3dy5zZWNyZXRnYXJkZW5ib29rcy5jb22CE3d3
dy5zcXVhcmVib29rcy5jb22CFXd3dy5zdG9yeWJvb2tjb3ZlLmNvbYIVd3d3LnN1
bnJpdmVyYm9va3MuY29tghF3d3cudG9hZGJvb2tzLmNvbYIMd3d3LnR0bWQuY29t
ghd3d3cudmVybW9udGJvb2tzaG9wLmNvbYIXd3d3LndpbGRydW1wdXNib29rcy5j
b22CHXd3dy53b21lbmFuZGNoaWxkcmVuZmlyc3QuY29tghd3d3cuZmFybGV5c2Jv
b2tzaG9wLmNvbYIPd3d3LnJqanVsaWEuY29tghV3d3cubW9zdGx5Ym9va3Nhei5j
b22CFHd3dy5wcmFpcmllcGFnZXMubmV0ghl3d3cuc3VuZGFuY2Vib29rc3RvcmUu
Y29tghZ3d3cuYW5vdmVsYm9va3Nob3AuY29tghB3d3cucWFib29rY28uY29tghV3
d3cucmVhZC1pdC1hZ2Fpbi5jb22CFnd3dy5tYWlucG9pbnRib29rcy5jb22CE3d3
dy5iYW5rb2Zib29rcy5jb22CD3d3dy50aGV0d2lnLmNvbYIUd3d3LnBob2VuaXhi
b29rcy5iaXqCFXd3dy5wYXJrcm9hZGJvb2tzLmNvbYIYc3RvcmUud2VsbGVzbGV5
Ym9va3MuY29tghR3d3cua2xpbmR0c2Jvb2tzLmNvbYIcd3d3LndhdGVybWFya2Jv
b2tjb21wYW55LmNvbYIUd3d3LmJvc3dlbGxib29rcy5jb22CGmJvb2tzLm1vcmF2
aWFuYm9va3Nob3AuY29tghp3d3cuY29tbXVuaXR5Ym9va3N0b3JlLm5ldIIad3d3
LnZpbGxhZ2VsaWdodHNib29rcy5jb22CE3d3dy5ib29raGFtcHRvbi5jb22CFnd3
dy5xdWVzdGJvb2tzdG9yZS5jb22CEnd3dy5jaXR5c3RhY2tzLmNvbYIZd3d3LmVh
c3RlbmRib29rc3B0b3duLmNvbYIRd3d3LmdsYnRib29rcy5jb22CFXd3dy5lYmJv
b2tzZWxsZXJzLmNvbYIQd3d3LmRkZ2Jvb2tzLmNvbYITd3d3LnJlYWRlcnNsb2Z0
LmNvbYIbd3d3LndvcmRzd29ydGhib29rc3RvcmUuY29tgh5ib29rc3RvcmUubWFy
aWx5bm1hcnR5b3V6ZS5jb22CF3Nob3Auc2NhdHRlcmVkYm9va3MuY29tghV3d3cu
VEhBVEJPT0tTVE9SRS5DT02CEXd3dy5pbmt3b29kbmouY29tghB3d3cuYWRsZWlu
dGwuY29tghl3d3cuaW5uaXNmcmVlYm9va3Nob3AuY29tghZ3d3cuc25haWxvbnRo
ZXdhbGwuY29tghV3d3cubG9vemlhbmFib29rcy5jb22CF3d3dy5icm9ueHJpdmVy
Ym9va3MuY29tghV3d3cuYm9va25vZnVydGhlci5jb22CF3d3dy50aGVib29rYnVu
Z2Fsb3cuY29tghN3d3cuYWFyb25zYm9va3MuY29tghp3d3cuYm9va3NhbmRjcmFu
bmllc3ZhLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMHUGA1UdHwRuMGwwNKAyoDCGLmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0
LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmwwNKAyoDCGLmh0dHA6Ly9jcmw0LmRp
Z2ljZXJ0LmNvbS9zaGEyLWhhLXNlcnZlci1nNi5jcmwwTAYDVR0gBEUwQzA3Bglg
hkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29t
L0NQUzAIBgZngQwBAgIwgYMGCCsGAQUFBwEBBHcwdTAkBggrBgEFBQcwAYYYaHR0
cDovL29jc3AuZGlnaWNlcnQuY29tME0GCCsGAQUFBzAChkFodHRwOi8vY2FjZXJ0
cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEySGlnaEFzc3VyYW5jZVNlcnZlckNB
LmNydDAMBgNVHRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdwDu
S723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWTW/3t6AAAEAwBIMEYC
IQCq8XEKOolme96qOIWD/TWz0YF7pmPyxyCvqjNmACHeNAIhAJkxCYvRPmHB/UYv
20U+0S4GwSwkMtCDZTeLsv71geeRAHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVg
wbTq/16ggw8AAAFk1v979gAABAMARzBFAiEA+03QreWsKwokoQOK1nXbdH1CE2t3
OSS27oto7WmDZd8CIDk5JuYGrq2oOCIbRmU6zf67FfARtsWaV6o1pai4ouWzAHUA
u9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFk1v97/AAABAMARjBE
AiAR7SOJHZ7iy/JJuS9T5UINY+KfIcTByezLqgLqQ+VR7wIgOZKjyYb0hVsQIxy0
WxloS1VXu8VGnzf5qQ0AkGB/h04wDQYJKoZIhvcNAQELBQADggEBAABJDPiQuDXi
7nod/2YJMkNyhWZlbaV1mRbnwpuhkEXZy9D97+rPZ8y9A1QFihddyUvih7DKX1vI
Hx3JPYpIO7x1lGyXnEuMojGVEeL4T5BpexPRohV0zFbeloTY+RnExaH0q9nei/O0
XZQajTMmDCmdOLRhfXsOE+DYvFhqZp8U8cNEqgtd+RctyDQPbJIFSeYH92m1N+dn
8PEeb6EoVQ35m4sUPjiv7cBfgcp2a09yB4OFxQ+5hyc/8xuErTscbWMjgSE1CtXc
xkghlZb2Gil7KJDftXY2Hz+S7HH4lmTm7bf2Y4uJwGxZQhfAz15L98DHOhdW6k12
jzjs3OQVdkE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dtuj75EGG2lM+0qRb++
XjEipPfmRLhC89HwFVY6+WXVFyiGFjLRcXnnL7UidKT7Tq6mhCFIhuiJNg9zdrTr
jnG/dCDxwQNvWWipMiIysPP89KTRb6+rKOWTGyeY3R8Dpp5Cwvq9/+zdU1zqE2Uh
s7Z9nmBqPMDV+qmNBkbHAqv44Kd4LPdXF9d9JpdpNroo9U09oKhC3uc2M/WOYE0f
4AzBBx+1opgX7GqoSfWRYt1V9FWdMiH/CRgMaumuhOFvgOfWc6CimiKGb6FJ5xEO
1Qevx0RbMYUyqn2A/dQrkHPjA81rI3omV7Sjm1IZ77afnIDGl96TraRA+MYNY3wL
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3979555831309851023517168466501292990
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'White Plains'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Booksellers Association, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.indiebound.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28006871290833767150073620198206941297172142937048912288422664422483796302219745236214453039172677020325124179466021200030126362544227477687492821742956317497086209411960104399379222061809442496149481137314992696360395217855852169619796991664315650127970675117611213254161587978445568986194547603770926768745988430484028648463094602548440143005273044201451574294317654942713809445768674467302115198008908540152987688376278220061793130016942420427647284487718829224605197737311106234890969710517019087886053587790055349571940695485761715554916028372130421247006871360319918880358638719687473936145854113327440113437457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							184154cf038164beebb12d312106f391bec8ccee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2327 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiebound.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.gallerybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.subbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alexanderbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avidreaderbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barrettbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookbinnorthbrook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookmarkshoppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookpassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookpeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booktable.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookvault.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookwormofedwards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookwormomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brilliant-books.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklinebooksmith-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burlinghambooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buxtonvillagebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carmichaelsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centuriesandsleuths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charisbooksandmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clintonbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commongoodbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.concordbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dramabookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elliottbaybook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyleafbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foreverbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gardendistrictbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodbooksbadcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenapplebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hearthsidebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hugobookstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jabberwockybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertybaybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malaprops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mystgalaxy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicolasbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.octaviabooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prairielightsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pyramidbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rainydaybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rdbooks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roomofonesown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schulerbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secretgardenbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.squarebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storybookcove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunriverbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toadbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ttmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vermontbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wildrumpusbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.womenandchildrenfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farleysbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rjjulia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mostlybooksaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prairiepages.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sundancebookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anovelbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qabookco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.read-it-again.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainpointbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankofbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetwig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phoenixbooks.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkroadbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.wellesleybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klindtsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watermarkbookcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boswellbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.moravianbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communitybookstore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villagelightsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookhampton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.questbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citystacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastendbooksptown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glbtbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebbooksellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ddgbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readersloft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordsworthbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookstore.marilynmartyouze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.scatteredbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.THATBOOKSTORE.COM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inkwoodnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adleintl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innisfreebookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snailonthewall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loozianabooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bronxriverbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booknofurther.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookbungalow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aaronsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksandcranniesva.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0000490cf890b835e2ee7a1dff66093243728566656da5759916e7c29ba19045d9cbd0fdefeacf67ccbd0354058a175dc94be287b0ca5f5bc81f1dc93d8a483bbc75946c979c4b8ca2319511e2f84f90697b13d1a21574cc56de9684d8f919c4c5a1f4abd9de8bf3b45d941a8d33260c299d38b4617d7b0e13e0d8bc586a669f14f1c344aa0b5df9172dc8340f6c920549e607f769b537e767f0f11e6fa128550df99b8b143e38afedc05f81ca766b4f72078385c50fb987273ff31b84ad3b1c6d63238121350ad5dcc648219596f61a297b2890dfb576361f3f92ec71f89664e6edb7f6638b89c06c594217c0cf5e4bf7c0c73a1756ea4d768f38ecdce4157641