www.indiebound.org

- Book Sense, Inc -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 01:43:c8:de:70:71:c8:79:f4:bc:5c:fc:c2:2d:65:25 was issued on by DigiCert Inc.

With 102 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Book Sense, Inc

Organization: Book Sense, Inc
State / Province: New York
Locality: White Plains
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:43:c8:de:70:71:c8:79:f4:bc:5c:fc:c2:2d:65:25
Serial Number (int): 1681185990679434265377865654703318309
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 06:f7:8b:8e:c6:aa:64:be:41:ca:53:14:3c:df:3f:5d:ee:19:7b:2a
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): f5:30:69:1c:f3:99:ec:86:ee:bb:30:31:df:3a:88:bd:2c:89:27:58
Fingerprint (sha256): 1a:f6:e4:19:5d:c6:01:5b:dc:09:90:88:18:fa:f9:87:3c:51:01:d1:f7:44:3b:9f:04:b6:3d:12:d1:b0:95:4a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate www.indiebound.org

102

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.indiebound.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.indiebound.org
orders.gallerybookshop.com
store.subbooks.com
www.alexanderbook.com
www.avidreaderbooks.com
www.barrettbookstore.com
www.bookbinnorthbrook.com
www.bookmarkshoppe.com
www.bookpassage.com
www.bookpeople.com
www.booksmith.com
www.booktable.net
www.bookvault.org
www.bookwormofedwards.com
www.bookwormomaha.com
www.brilliant-books.net
www.brooklinebooksmith-shop.com
www.burlinghambooks.com
www.buxtonvillagebooks.com
www.carmichaelsbookstore.com
www.centuriesandsleuths.com
www.charisbooksandmore.com
www.clintonbookshop.com
www.commongoodbooks.com
www.concordbookshop.com
www.dramabookshop.com
www.elliottbaybook.com
www.flyleafbooks.com
www.foreverbooks.net
www.gardendistrictbookshop.com
www.goodbooksbadcoffee.com
www.greenapplebooks.com
www.hearthsidebooks.com
www.hugobookstores.com
www.jabberwockybookshop.com
www.katybooks.com
www.libertybaybooks.com
www.malaprops.com
www.mystgalaxy.com
www.nicolasbooks.com
www.octaviabooks.com
www.prairielightsbooks.com
www.pyramidbooks.net
www.rainydaybooks.com
www.rdbooks.org
www.roomofonesown.com
www.schulerbooks.com
www.secretgardenbooks.com
www.squarebooks.com
www.storybookcove.com
www.sunriverbooks.com
www.toadbooks.com
www.ttmd.com
www.vermontbookshop.com
www.wildrumpusbooks.com
www.womenandchildrenfirst.com
www.farleysbookshop.com
www.rjjulia.com
www.mostlybooksaz.com
www.prairiepages.net
www.sundancebookstore.com
www.anovelbookshop.com
www.qabookco.com
www.read-it-again.com
www.mainpointbooks.com
www.bankofbooks.com
www.thetwig.com
www.phoenixbooks.biz
www.parkroadbooks.com
store.wellesleybooks.com
www.klindtsbooks.com
www.watermarkbookcompany.com
www.boswellbooks.com
books.moravianbookshop.com
www.communitybookstore.net
www.villagelightsbooks.com
www.bookhampton.com
www.questbookstore.com
www.citystacks.com
www.eastendbooksptown.com
www.glbtbooks.com
www.ebbooksellers.com
www.ddgbooks.com
www.readersloft.com
www.wordsworthbookstore.com
bookstore.marilynmartyouze.com
shop.scatteredbooks.com
www.THATBOOKSTORE.COM
www.inkwoodnj.com
www.adleintl.com
www.innisfreebookshop.com
www.snailonthewall.com
www.loozianabooks.com
www.bronxriverbooks.com
www.booknofurther.com
www.thebookbungalow.com
www.aaronsbooks.com
www.booksandcranniesva.com
www.kizzysbooksandmore.com
www.boondogglebooks.com
www.copperfishbooks.com
www.wonderlandbookshopnc.com

Other certificates including the domain name indiebound.org

(limited to 100 certificates)
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.org
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
indiebound.org

Certificate

The complete raw certificate details for www.indiebound.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzRXXVCiGf9M7coGLyRN
N3eVIk3gNnRAc2W8gLVcwnrfgvrsWU9pu3uCWDKWVgH0+iobcabmA3epNaUiILSQ
wwm1Z0w5tlrAHLrOnoiRk0f1B4VJ8Q62vwqaayPTg++o7sVL+JOfR9b5OzSB2rRO
0l5s0DB+i5mU7xQBoELh9kDFBPqNGMjQ9surVx/RgQq+ThkSkmhYLm82Rp74t/lS
J6lhbSyUIaBI7bYbR6iA2HPRMnB0MHXy31l9tVCwyygWtDY3kVyMy+P8l8LQTQZe
zIRVBF9cNnh6ESeEN6z0NI5U8uKTmxJ2xIbpNQoHkYt967r2mFMAwhjovfoMJ5sX
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1681185990679434265377865654703318309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'White Plains'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Book Sense, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.indiebound.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21107607370365247163448303214490386483019118143908674399716169677914641198974499968071803887474833720035065518626896544498824719797805779394837559583990937258431498150953410591877368190866825018832951549899937655394703668144569599869667242799688348062359256628959418008704453718238144880930901384748849583529432550704198498139374175710796236162010530079752181598481033833847855212500481514471827605737623766923070414397118839641732359141976049365185046735316563085611695273737087161188083730054970962120052681179900834427916044884390684916072996041442053154111118116690650091827749896800322295548850027777174720419839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06f78b8ec6aa64be41ca53143cdf3f5dee197b2a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2435 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiebound.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orders.gallerybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.subbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alexanderbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avidreaderbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barrettbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookbinnorthbrook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookmarkshoppe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookpassage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookpeople.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksmith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booktable.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookvault.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookwormofedwards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookwormomaha.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brilliant-books.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklinebooksmith-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burlinghambooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buxtonvillagebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carmichaelsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centuriesandsleuths.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charisbooksandmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clintonbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commongoodbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.concordbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dramabookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elliottbaybook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flyleafbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foreverbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gardendistrictbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodbooksbadcoffee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenapplebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hearthsidebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hugobookstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jabberwockybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertybaybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.malaprops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mystgalaxy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicolasbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.octaviabooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prairielightsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pyramidbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rainydaybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rdbooks.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roomofonesown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schulerbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secretgardenbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.squarebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storybookcove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunriverbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toadbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ttmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vermontbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wildrumpusbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.womenandchildrenfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farleysbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rjjulia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mostlybooksaz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prairiepages.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sundancebookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anovelbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qabookco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.read-it-again.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainpointbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankofbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetwig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phoenixbooks.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkroadbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.wellesleybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klindtsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watermarkbookcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boswellbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'books.moravianbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.communitybookstore.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villagelightsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookhampton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.questbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citystacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastendbooksptown.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glbtbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebbooksellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ddgbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readersloft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordsworthbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookstore.marilynmartyouze.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.scatteredbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.THATBOOKSTORE.COM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inkwoodnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adleintl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innisfreebookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.snailonthewall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loozianabooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bronxriverbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booknofurther.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookbungalow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aaronsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksandcranniesva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kizzysbooksandmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boondogglebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.copperfishbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wonderlandbookshopnc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016659fec9090000040300473045022100ece9ca93c28ddb9a4505d6434430dfc956b0e6799144fe97db331e1167988b2702202b0e5a247eef2a4bca9ea322f0849caa93d31652d64b3407abc60cfa634ea8880075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016659fec9ca00000403004630440220286481da07d913198698fe4389010a459d6e7b9ea3288779e5abc2a68f08be7202201be0bfa4a7f221a44cbc78cda0fcc92111d14a4a524593728aa18b946927c73d007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016659fec9050000040300473045022100923aad1363ea51a4f117971299870b08bb505c8bf64f651ccfb55a4b495ea75e022031db81c215c471f1aa3720794bf979f221d3f8dd71869c60b7bd4fff75488f31
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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