www.indiebound.org

- American Booksellers Association, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0a:7d:d6:3f:5c:76:64:4e:e7:08:97:6e:05:a8:c5:5d was issued on by DigiCert Inc.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American Booksellers Association, Inc.

Organization: American Booksellers Association, Inc.
State / Province: New York
Locality: White Plains
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:7d:d6:3f:5c:76:64:4e:e7:08:97:6e:05:a8:c5:5d
Serial Number (int): 13945662520811179881148695549533799773
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 71:13:f4:5a:42:de:a4:9e:54:7d:b2:48:53:63:55:7c:3e:4a:3b:8c
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 4d:f2:90:4b:66:ce:dd:e5:0d:77:66:01:4b:95:c6:13:70:5b:c4:77
Fingerprint (sha256): 18:6c:17:a2:c0:89:b3:fb:6c:68:94:05:a2:60:71:1c:e7:54:e7:bf:59:77:d0:b8:25:db:ee:13:c0:c8:1b:ff

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl

Check the revocation status for certificate www.indiebound.org

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.indiebound.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.indiebound.org
www.laurelbookstore.com
www.countrybookshelf.com
www.shoponceuponatime.com
www.goldennotebook.com
www.northtownbooks.com
www.booksonfirst.com
www.macsbacks.com
www.thebooksellersatlaurelwood.com
www.shopgulliversbooks.com
www.copperfieldsbooks.com
www.shopcrazywisdom.com
www.haywardbookshop.com
www.thebookseller.biz
store.wordsbookstore.com
www.valleybookseller.com
www.acmit.com
www.thecountrybookshop.biz
www.bearpondbooks.com
www.wellsborobookstore.com
www.bookshopbenicia.com
www.islandbooksri.com
www.paragraphsbookstore.com
www.cincybookshelf.com
www.bookshopwestportal.com
www.gibsonsbookstore.com
www.between-the-covers.com
www.boulderbookstore.net
shop.turtletownnisswa.com
www.inklingsbookshop.com
www.murderbooks.com
www.bookbugkalamazoo.com
www.reiters.com
www.huemanbookstore.com
www.seattletechnicalbooks.com
www.mainstreetbooksminot.com
www.parnassusbooks.net
www.avidbookshop.com
www.newtownbookshop.com
www.thebooknookvt.com
www.banksquarebooks.com
www.theoldcuriositybookshop.com
www.pageafterpagebook.com
www.mrsdalloways.com
www.rakestrawbooks.com
www.bestofbooksok.com
www.poorrichardsbooksky.com
www.morrisbookshop.com
www.abookforallseasons.com
www.nantucketbookpartners.com
www.titcombsbookshop.com
www.duckstorebooks.com
shop.myvermontbookstore.com
www.abcfairs.com
www.warwicks.com
www.eightcousins.com
www.northshire.com
www.winterriverbooks.com
www.bluebirdbookstore.com
store.mjudsonbooks.com
www.battenkillbooks.com
www.elmstreetbooks.com
www.bookpeopleofmoscow.com
www.benningtonbookshop.com
www.pagesabookstore.com
www.literatibookstore.com
www.getyourfaceinabook.com
www.contentbookstore.com
shop.thebookstall.com
www.cottagebooks.com
www.nextpagebooks.com
www.cornellstorebooks.com
www.peregrinebookcompany.com
www.thedockbookshop.com
www.readinutopia.com
www.readbetweenthelynes.com
www.readersbooks.com
www.snowboundbooks.com
www.buttonwoodbooksandtoys.com
www.browserbookstore.com
www.herringbonebooks.com
www.volumesbooks.com
www.bookmarksnc.org
www.letsplaybooks.com
www.roundaboutbookshop.com
www.sanddollarbook.com
shop.booksandbookskw.com
www.bookedon25th.com
www.midtownreader.com
www.duckriverbooks.com
www.absolutelyfiction.com
www.thishouseofbooks.com
www.belmontbooks.com
www.eshaverbooks.com
www.thebookstall.com
www.printbookstore.com
www.page2books.com
www.passbooksonline.com

Other certificates including the domain name indiebound.org

(limited to 100 certificates)
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.org
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
indiebound.org

Certificate

The complete raw certificate details for www.indiebound.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k0m5qGsGp+PnnPHt48k
39j09eHHvq1cv0leZqtchbI4yqmG2fKTH8bvyvDONkZi0+g7JNx+HAkTB/3YCN0t
jGSkoGVE7Sr+K0tzxZZRs0Cw+bDx5bXGbTbaW4fMxRLN/F2L4My7lUACdVoIq3/e
JBWssbNH7mYUBvJjJ7j60rqEm54ZN+gebGEf0I+bCG+ejwDifJlbQS5keHTgyWH3
Zi+88IFh1/zRU6I212VhID3sD5B6MTqJjpMQ+FhKbMJ6I6Oe7vLk/FA5Qs3XfxMo
wB7w3qYDK/peAbUZCSNfB/Z3qv9R7xAlTZhSGhGqdDEqMrJaVxODW8nIZll7PKpq
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13945662520811179881148695549533799773
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'White Plains'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Booksellers Association, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.indiebound.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27053042310522906609731864356361659137691981571103178547686415590677280763641149720772841332648837668397248868175267560735246812465487490701267537520605317877287008372835279723164241160073901842573413100862015584597357383374769461148206095434345083579221585679099351851146127619960341123127191301965429689310008731047459279223780317271013908538865781590760995225714796768653574921769071738958268958370820527477213379589302579839295921499908258021801822575183594016567569551188281269984540188861657783398451169046032083244665002477319057397889580589466039115305315416052358768758785335577228846492119408989771041237631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7113f45a42dea49e547db2485363557c3e4a3b8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2450 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiebound.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laurelbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countrybookshelf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoponceuponatime.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldennotebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northtownbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksonfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.macsbacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebooksellersatlaurelwood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopgulliversbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copperfieldsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopcrazywisdom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haywardbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookseller.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.wordsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valleybookseller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acmit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecountrybookshop.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bearpondbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellsborobookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookshopbenicia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.islandbooksri.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paragraphsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cincybookshelf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookshopwestportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gibsonsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.between-the-covers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boulderbookstore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.turtletownnisswa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inklingsbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.murderbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookbugkalamazoo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reiters.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huemanbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seattletechnicalbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainstreetbooksminot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parnassusbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avidbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newtownbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebooknookvt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banksquarebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theoldcuriositybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pageafterpagebook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrsdalloways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rakestrawbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestofbooksok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poorrichardsbooksky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morrisbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abookforallseasons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nantucketbookpartners.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.titcombsbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duckstorebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.myvermontbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abcfairs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warwicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eightcousins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northshire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winterriverbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluebirdbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.mjudsonbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.battenkillbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elmstreetbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookpeopleofmoscow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benningtonbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pagesabookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.literatibookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getyourfaceinabook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contentbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.thebookstall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cottagebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nextpagebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornellstorebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peregrinebookcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thedockbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readinutopia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readbetweenthelynes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readersbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snowboundbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buttonwoodbooksandtoys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.browserbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herringbonebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volumesbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookmarksnc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.letsplaybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roundaboutbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanddollarbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.booksandbookskw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookedon25th.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midtownreader.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duckriverbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.absolutelyfiction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thishouseofbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belmontbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eshaverbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookstall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.printbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.page2books.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.passbooksonline.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004edbd961ea8e1c0fcac2219dffe9a00efb37e869567a153c71099661f2378ef26bf7eb50e72c3f37f26021119d383bbbff648236dec99a96527372fbaf2e58796224fa55a088d55c68edf610d8aa72512330311e07c81b4cf75bd897bc8348ff93773f6caf9d2a9a49e9b3dda83cd1e2c0e428b374f0ecffb7c15da584795f544441726ece520d8c02528a56969f25e7ee22c612d9e56fed9cb7250ca311e8dad650ae29af46088279347f451b1bee28ae66621395025c6ee810fa61ba348df02f21b134554594ab6b46a16aeb357d71e2c40c9cb724931e0e03dd833f89f89a4a5e064d9d09dc9bfa5cd2a690cfadb2a193c5f44b0d7de7fc60e2ee99c56f7e