www.indiebound.org

- American Booksellers Association, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 01:52:f4:20:c3:77:62:db:e0:d0:72:05:75:21:81:92 was issued on by DigiCert Inc.

With 117 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American Booksellers Association, Inc.

Organization: American Booksellers Association, Inc.
State / Province: New York
Locality: White Plains
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:52:f4:20:c3:77:62:db:e0:d0:72:05:75:21:81:92
Serial Number (int): 1759947841923169138133829750158885266
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 10:00:22:03:2e:1d:b7:93:2b:d1:7f:25:a6:63:32:4d:b3:62:0e:65
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 54:b4:81:46:d0:7f:6d:58:2a:58:ca:5e:2a:81:92:23:7a:36:7f:c7
Fingerprint (sha256): 1f:00:c6:4c:2f:f4:64:45:0a:5b:9a:07:67:5c:44:f0:7f:9e:92:bb:a5:b0:4a:4f:54:be:06:60:c2:97:e6:9f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g5.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g5.crl

Check the revocation status for certificate www.indiebound.org

117

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.indiebound.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.indiebound.org
www.greenlightbookstore.com
www.posmanbooks.com
www.fourseasonsbooks.com
www.portbooknews.com
www.parkroadbooks.com
www.andersonsbookshop.com
www.watermarkbooks.com
www.mcnallyjackson.com
www.headhousebooks.com
www.barbarasbookstore.com
www.learnedowl.com
www.fof.net
www.lowrysbooks.com
www.bestsellersbookstore.com
www.thetraveler.com
www.dragonflybooks.com
www.exemplarbooks.com
www.signsoflifebooks.com
www.lagunabeachbooks.com
www.vintage-books.net
www.readmorebooks.com
www.mercerislandbooks.com
www.opendoor-bookstore.com
www.pageandpalette.com
www.overthemoonbookstore.com
www.northwindbook.com
www.thebookstoreplus.com
www.newcopperfields.com
www.waucomabookstore.com
www.undercoverbooksvi.com
www.foureyedfrog.com
www.mainstreetbookends.com
www.booksandbookswhb.com
www.browseaboutbooks.com
www.sundialbooks.net
www.grassrootsbookstore.com
www.horizonbooks.com
www.excelsiorbaybooks.net
www.cavalierhousebooks.com
www.pennbookcenter.com
www.riversendbookstore.com
www.morganhillbookstore.com
www.islandboundbookstore.com
www.justthebookstore.com
www.gallerybookshop.com
www.boundtobereadbooks.com
www.eastwest.com
www.broadwaybooks.net
shop.wildirisbooks.com
www.paulinasprings.com
www.lakeforestbookstore.com
www.seattlemystery.com
www.kidsinkbooks.com
www.mysterybooksonline.com
www.booksoup.com
www.avidreadertower.com
www.explorebooksellers.com
www.riverroadbooks.net
www.booknbrush.com
www.duckscottage.com
www.bunchofgrapes.com
www.booktowne.com
www.citylitbooks.com
www.ravenbookstore.com
www.branchesbooks.com
www.astoriabookshop.com
www.unabridgedbookstore.com
www.thebookies.com
www.apostrophebooks.net
www.bluefrogbooksandmore.com
www.bookbardenver.com
www.bankstreetbooks.com
www.sbgranadabooks.com
www.mendocinobookcompany.com
www.lucys-books.com
www.beachbooks37.com
www.klindtsbooks.com
www.anunlikelystory.com
www.booksq.com
www.nebookfair.com
www.mitzisbooks.com
www.hudsonbooksellers.com
shop.harvard.com
www.winchesterbookgallery.com
www.tpetbookstore.com
www.plainstrading.com
www.besthometownnews.com
www.bhny.com
www.iconoclastbooks.com
www.greatlakesbook.com
www.distantlandsbookstore.com
www.wellreadmoose.com
www.kingsbookstore.com
www.bookcellarinc.com
www.tecolotebookshop.com
www.mainstreetbooksminot.com
www.crowbooks.com
www.mysteryscape.com
www.theivybookshop.com
www.acappellabooks.com
www.mainecoastbookshop.com
www.littlecitybooks.com
www.imaginationsbookstore.com
www.hennesseyingalls.com
www.harborbookssgh.com
www.scrawlbooks.com
www.therippedbodicela.com
www.browsersolympia.com
www.MysteryLovesCompany.com
www.bookmanbookstore.com
www.AmericanClassroomLibraries.com
www.wildirisbooks.com
www.eastcitybookshop.com
www.leanasbooks.com
www.wellreadmoose-shop.com
www.thefirstchapterma.org

Other certificates including the domain name indiebound.org

(limited to 100 certificates)
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.org
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
indiebound.org

Certificate

The complete raw certificate details for www.indiebound.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48lubr/aXs5Mlq5L79/b
l2Qwu3spfeTWl5UCasTQqDXlDoeVWqgJt271w1EFj3UbSzzcgvcqmalBJShwCMr5
dvn7FoxzPxXuMr76NtCj1i8ZBI3nWcoFSvNlRr/lXyo60Lie2nP0Tk4n66oL/cjL
9AVZrDmxdgnowITtmkGsOYHxRVSAD16ixvsu3EteFraFHoE6tEEgr2EBctqgLkTL
grIzpVEAo+rsj++Z+CRRTRL2ex8GyqfmJy+6pnLY5QEqozWBx4L+jhgSx2008IxG
xr1mMVM7LZxbmZgqvam6k/XUIujunN1rXw8UXp9MHXRRQUyBnP/yG444zMaBIkfl
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1759947841923169138133829750158885266
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'White Plains'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Booksellers Association, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.indiebound.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28755424741553990846432707525052514059892608113316092762672675402089738860910044374888061916898522356530960364942019246591223682133335336670910982148479071171844317455644364848700032452160315978889194644543456010537158054500986772081917699901845241473493527604447248394379163619770905410427412447692286854295263816600585438814553718726193261452468821817876076353947297623053071422582606373256596039338537091325171168810046882738605000879253935388249179175692261776281038233798521581958370977301013490550856675205965068379520179081867092406098639623571399589688727113112077189542693906366691061021455878570634297992557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							100022032e1db7932bd17f25a663324db3620e65
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2875 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiebound.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenlightbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.posmanbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fourseasonsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portbooknews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkroadbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersonsbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watermarkbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcnallyjackson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.headhousebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarasbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learnedowl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fof.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lowrysbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestsellersbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetraveler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dragonflybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exemplarbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.signsoflifebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagunabeachbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vintage-books.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readmorebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercerislandbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opendoor-bookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pageandpalette.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overthemoonbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northwindbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookstoreplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newcopperfields.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waucomabookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.undercoverbooksvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foureyedfrog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainstreetbookends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksandbookswhb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.browseaboutbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sundialbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grassrootsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horizonbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.excelsiorbaybooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cavalierhousebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennbookcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riversendbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morganhillbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.islandboundbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justthebookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gallerybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boundtobereadbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broadwaybooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.wildirisbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paulinasprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lakeforestbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seattlemystery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidsinkbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysterybooksonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksoup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avidreadertower.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorebooksellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverroadbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booknbrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duckscottage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bunchofgrapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booktowne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citylitbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ravenbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branchesbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.astoriabookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unabridgedbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apostrophebooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluefrogbooksandmore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookbardenver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankstreetbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbgranadabooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendocinobookcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucys-books.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beachbooks37.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klindtsbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anunlikelystory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nebookfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mitzisbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hudsonbooksellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.harvard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winchesterbookgallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tpetbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plainstrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besthometownnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iconoclastbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatlakesbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distantlandsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellreadmoose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookcellarinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecolotebookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainstreetbooksminot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crowbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysteryscape.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theivybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acappellabooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainecoastbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littlecitybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imaginationsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hennesseyingalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harborbookssgh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scrawlbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.therippedbodicela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.browsersolympia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.MysteryLovesCompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookmanbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.AmericanClassroomLibraries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wildirisbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastcitybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leanasbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellreadmoose-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefirstchapterma.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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