www.indiebound.org

- American Booksellers Association, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 02:82:ee:93:d0:be:45:03:01:9c:a0:8d:92:3e:9d:37 was issued on by DigiCert Inc.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American Booksellers Association, Inc.

Organization: American Booksellers Association, Inc.
State / Province: New York
Locality: White Plains
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:82:ee:93:d0:be:45:03:01:9c:a0:8d:92:3e:9d:37
Serial Number (int): 3338293507807821879245352625032305975
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 10:00:22:03:2e:1d:b7:93:2b:d1:7f:25:a6:63:32:4d:b3:62:0e:65
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): fd:47:fb:43:2d:c2:dd:f3:3a:2b:1e:9b:f3:64:17:79:63:d6:fb:b6
Fingerprint (sha256): 28:c4:3c:59:29:e1:8a:7d:84:a2:48:b8:f7:d4:cb:68:f1:d5:b4:cd:10:48:12:9a:64:b4:00:a7:5b:97:b8:f4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g1.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g1.crl

Check the revocation status for certificate www.indiebound.org

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.indiebound.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.indiebound.org
www.greenlightbookstore.com
www.portbooknews.com
www.parkroadbooks.com
www.andersonsbookshop.com
www.watermarkbooks.com
www.mcnallyjackson.com
www.headhousebooks.com
www.barbarasbookstore.com
www.learnedowl.com
www.lowrysbooks.com
www.bestsellersbookstore.com
www.dragonflybooks.com
www.lagunabeachbooks.com
www.readmorebooks.com
www.mercerislandbooks.com
www.opendoor-bookstore.com
www.overthemoonbookstore.com
www.northwindbook.com
www.thebookstoreplus.com
www.waucomabookstore.com
www.foureyedfrog.com
www.mainstreetbookends.com
www.browseaboutbooks.com
www.horizonbooks.com
www.excelsiorbaybooks.net
www.cavalierhousebooks.com
www.pennbookcenter.com
www.riversendbookstore.com
www.morganhillbookstore.com
www.islandboundbookstore.com
www.justthebookstore.com
www.gallerybookshop.com
www.eastwest.com
www.broadwaybooks.net
shop.wildirisbooks.com
www.paulinasprings.com
www.lakeforestbookstore.com
www.kidsinkbooks.com
www.booksoup.com
www.explorebooksellers.com
www.riverroadbooks.net
www.booknbrush.com
www.duckscottage.com
www.bunchofgrapes.com
www.booktowne.com
www.citylitbooks.com
www.ravenbookstore.com
www.unabridgedbookstore.com
www.bookbardenver.com
www.bankstreetbooks.com
www.mendocinobookcompany.com
www.anunlikelystory.com
www.booksq.com
www.nebookfair.com
www.hudsonbooksellers.com
shop.harvard.com
www.winchesterbookgallery.com
www.plainstrading.com
www.besthometownnews.com
www.bhny.com
www.iconoclastbooks.com
www.distantlandsbookstore.com
www.kingsbookstore.com
www.bookcellarinc.com
www.tecolotebookshop.com
www.mainstreetbooksminot.com
www.crowbooks.com
www.theivybookshop.com
www.littlecitybooks.com
www.imaginationsbookstore.com
www.hennesseyingalls.com
www.scrawlbooks.com
www.therippedbodicela.com
www.browsersolympia.com
www.MysteryLovesCompany.com
www.wildirisbooks.com
www.eastcitybookshop.com
www.leanasbooks.com
www.wellreadmoose-shop.com
www.thefirstchapterma.org
www.tridentbookscafe.com
www.anotherchapterbooks.com
www.shortstoriesnj.com
www.sundialbooks.net

Other certificates including the domain name indiebound.org

(limited to 100 certificates)
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.com
indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.org
indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
dev.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
indiebound.org

Certificate

The complete raw certificate details for www.indiebound.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48lubr/aXs5Mlq5L79/b
l2Qwu3spfeTWl5UCasTQqDXlDoeVWqgJt271w1EFj3UbSzzcgvcqmalBJShwCMr5
dvn7FoxzPxXuMr76NtCj1i8ZBI3nWcoFSvNlRr/lXyo60Lie2nP0Tk4n66oL/cjL
9AVZrDmxdgnowITtmkGsOYHxRVSAD16ixvsu3EteFraFHoE6tEEgr2EBctqgLkTL
grIzpVEAo+rsj++Z+CRRTRL2ex8GyqfmJy+6pnLY5QEqozWBx4L+jhgSx2008IxG
xr1mMVM7LZxbmZgqvam6k/XUIujunN1rXw8UXp9MHXRRQUyBnP/yG444zMaBIkfl
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3338293507807821879245352625032305975
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'White Plains'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Booksellers Association, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.indiebound.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28755424741553990846432707525052514059892608113316092762672675402089738860910044374888061916898522356530960364942019246591223682133335336670910982148479071171844317455644364848700032452160315978889194644543456010537158054500986772081917699901845241473493527604447248394379163619770905410427412447692286854295263816600585438814553718726193261452468821817876076353947297623053071422582606373256596039338537091325171168810046882738605000879253935388249179175692261776281038233798521581958370977301013490550856675205965068379520179081867092406098639623571399589688727113112077189542693906366691061021455878570634297992557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							100022032e1db7932bd17f25a663324db3620e65
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiebound.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenlightbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portbooknews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkroadbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andersonsbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watermarkbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcnallyjackson.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.headhousebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbarasbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learnedowl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lowrysbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bestsellersbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dragonflybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagunabeachbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readmorebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercerislandbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opendoor-bookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.overthemoonbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northwindbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookstoreplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waucomabookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foureyedfrog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainstreetbookends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.browseaboutbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horizonbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.excelsiorbaybooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cavalierhousebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pennbookcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riversendbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morganhillbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.islandboundbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.justthebookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gallerybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broadwaybooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.wildirisbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paulinasprings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lakeforestbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kidsinkbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksoup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.explorebooksellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverroadbooks.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booknbrush.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duckscottage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bunchofgrapes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booktowne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citylitbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ravenbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unabridgedbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookbardenver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankstreetbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mendocinobookcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anunlikelystory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nebookfair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hudsonbooksellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.harvard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.winchesterbookgallery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plainstrading.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.besthometownnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iconoclastbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distantlandsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookcellarinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecolotebookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainstreetbooksminot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crowbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theivybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.littlecitybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.imaginationsbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hennesseyingalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scrawlbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.therippedbodicela.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.browsersolympia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.MysteryLovesCompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wildirisbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastcitybookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leanasbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellreadmoose-shop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefirstchapterma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tridentbookscafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.anotherchapterbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shortstoriesnj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sundialbooks.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							01e1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015f2553c0ed0000040300473045022100fa5eb9cb910635afc59ef393b82e34b728a37a613d97aa633f21609c2631942a0220393fc65f925a5fa0b0006e46929fbb1e1b4b42c97c17964b427d38c5b328d9c40077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000015f2553c1eb0000040300483046022100fff6c123c0d1c99a2ab4aef5866edbeeccf02c0f883134493957c6800c1e530a022100e25c878755750878bc371e5ed4d9d57ea02b65558c48ff1e913a8ab0e6b9ac76007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015f2553c3ca00000403004730450220164f289f7bdd88d1f8707af6728c8c98f59352d8cf1dae2e9f5208d116d0ceba022100a1e9d679d6a735ad190abc5fd188fc6831416f3b5d7f5e9a9be48b5bc3073d5f007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000015f2553c19f000004030047304502202c17649f7b4f0c2850c95abf4bf6c4494863b34a9eadca208015227cba31ff31022100abd642e55b7bc0228504e09ad426e006d473c7f90471b60aa1eade760d089b2d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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