www.indiebound.com

- American Booksellers Association, Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 01:f1:ed:fb:ec:74:ae:a3:8c:b1:4c:e7:29:61:c6:8c was issued on by DigiCert Inc.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American Booksellers Association, Inc.

Organization: American Booksellers Association, Inc.
State / Province: New York
Locality: White Plains
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:f1:ed:fb:ec:74:ae:a3:8c:b1:4c:e7:29:61:c6:8c
Serial Number (int): 2585398429216188279256873481850177164
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: f8:4b:8f:b4:95:30:67:f1:b4:d6:b8:39:b8:91:fe:e8:61:ad:54:bd
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 30:d5:79:b7:57:c3:fd:30:1d:0f:6c:14:da:61:c0:41:68:3b:20:fd
Fingerprint (sha256): 3e:ab:5c:3c:6c:4c:26:9f:1f:c6:c5:11:94:1c:ff:82:20:b6:51:8f:02:53:32:81:99:bb:1d:91:ac:a1:d7:2c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g1.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g1.crl

Check the revocation status for certificate www.indiebound.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.indiebound.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.indiebound.com
www.indiebound.org
www.vromansbookstore.com
www.literarybookpost.com
www.steamboatbooks.com
www.orcabooks.com
www.mrsnelsons.com
www.hickorystickbookshop.com
www.thebookloft.com
www.villagebooks.com
www.left-bank.com
www.booksco.com
www.kingsenglish.com
www.mcleanandeakin.com
www.doylestownbookshop.com
www.keplers.com
www.oldfirehousebooks.com
www.regulatorbookshop.com
www.tatteredcover.com
www.citylightsnc.com
www.booksinc.net
www.collectedworksbookstore.com
www.factandfictionbooks.com
www.auntiesbooks.com
www.chapter1bookstore.com
www.villagesquarebooks.com
www.pegasusbookstore.com
www.fountainbookstore.com
www.skylightbooks.com
www.griffinbaybook.com
www.quailridgebooks.com
www.russosbooks.com
www.waterstreetbooks.com
www.dieselbookstore.com
www.bluewillowbookshop.com
www.viewpointbooks.com
www.thirdplacebooks.com
www.antigonebooks.com
www.liftbridgebooks.com
www.oblongbooks.com
www.orindabooks.com
www.ebookwoman.com
www.portersquarebooks.com
www.redberybooks.com
www.bookshopsantacruz.com
www.ggpbooks.com
www.broadsidebooks.com
www.mariasbookshop.com
www.inkwoodbooks.com
www.ottobookstore.com
www.redballoonbookshop.com
www.foxbookshop.com
www.thereadingbug.com
www.changinghands.com
www.penguinbookshop.com
www.saturnbooksellers.com
www.longfellowbooks.com
www.eagleharborbooks.com
www.prince-books.com
www.norwichbookstore.com
www.brazosbookstore.com
www.riverwalkbooks.com
www.politics-prose.com
www.hicklebees.com
www.watchungbooksellers.com
www.annieblooms.com
www.bkwrks.com
www.townebc.com
www.wordbookstores.com
www.sundogbooks.com
www.bookculture.com
www.bookendsandbeginnings.com
www.pagesbkshop.com
www.moonpalacebooks.com
www.roscoebooks.com
www.scuppernongbooks.com
www.booksonbroad.com
www.whistlestopbooks.com
www.odysseybks.com
www.ninthstreetbookshop.com
www.esowonbookstore.com
www.edgewaterbooks.com
www.writersblockbookstore.com
www.napabookmine.com
www.bookwormtricities.com
www.plottwistbookstore.com
www.konastories.com
www.barringtonbooksretold.com
www.shopatozbooks.com
www.cellardoorbookstore.com
www.allthingsbook.org
www.interabangbooks.com

Other certificates including the domain name indiebound.com

(limited to 100 certificates)
www.indiebound.org
www.indiebound.com
indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.com
indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
*.d7.indiebound.com
www.indiebound.org
*.d7.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
*.indiebound.com
indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.com
indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
images.indiebound.com
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
indiebound.com
www.indiebound.org
indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.org
indiebound.com
www.indiebound.com
*.d7.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.org
*.d7.indiebound.com
www.indiebound.org
www.indiebound.com
www.indiebound.org
*.d7.indiebound.com
www.indiebound.com
www.indiebound.com
indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.org
*.indiebound.com
www.indiebound.org
www.indiebound.org
www.indiebound.com
www.indiebound.org
www.indiebound.com
indiebound.com
www.indiebound.com
www.indiebound.com
www.indiebound.com

Certificate

The complete raw certificate details for www.indiebound.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDtMNbcxhd+mt9JQpkcB
6FQRxsqmtxc2pcFERTy0uqcvXB6LcXaFHFKX/4x6NG2Gzyyl+sw9Oxvjsb21kqmX
ink5dBk3WZ3hqwgvWBSLM+rzWrfDBG83qRuhHR5lojvkFNGOMDJjRqTs5wrz2GNY
wHPl3XP1E3eIboci5DOh64SuTmN3fB4O0bGiMn7YM7wZ5IwiDQE+2JO0iUHd1r/O
LUyMwcPi1UFsboTHnWSG5b3xHY9yK6t+1fc0v46gIYJGYSo/O9ehym2zB1WXV1uL
armUv+n3Ugws3a1txW3q7iIgDH/3ddDAxcrKvlpFq019om24DFq/TaxNvRIZcFXA
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2585398429216188279256873481850177164
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'White Plains'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Booksellers Association, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.indiebound.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22752135676933979527193729020610044261918083198380688796982545801160649581606696303426070553768926085545710267310391677608429185090468982662777240385617935815840695262186826137316049200298779189316228888862262523108856260679033184493798308968330451217280892169026727838104504957008277991602765202632761408699769823925207494809917463157396834040012154420866362870168543714794793730119354487051368260231150532092941272691479855778344308722134546241085798742633636170255227797307932970500789229910135833628811775333897146022698921674026833604588198860777560631599294514361895177952890880239542878191595650966164897906937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f84b8fb4953067f1b4d6b839b891fee861ad54bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2204 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiebound.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiebound.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vromansbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.literarybookpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steamboatbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orcabooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrsnelsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hickorystickbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thebookloft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villagebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.left-bank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingsenglish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcleanandeakin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.doylestownbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keplers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oldfirehousebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regulatorbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tatteredcover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citylightsnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksinc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collectedworksbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factandfictionbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auntiesbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chapter1bookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.villagesquarebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pegasusbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fountainbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skylightbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.griffinbaybook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quailridgebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.russosbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waterstreetbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dieselbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluewillowbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viewpointbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thirdplacebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antigonebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liftbridgebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oblongbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orindabooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebookwoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portersquarebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redberybooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookshopsantacruz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ggpbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broadsidebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mariasbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inkwoodbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ottobookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redballoonbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thereadingbug.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.changinghands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.penguinbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saturnbooksellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.longfellowbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eagleharborbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prince-books.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norwichbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brazosbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverwalkbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.politics-prose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hicklebees.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.watchungbooksellers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.annieblooms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bkwrks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.townebc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wordbookstores.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sundogbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookendsandbeginnings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pagesbkshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moonpalacebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roscoebooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scuppernongbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksonbroad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whistlestopbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.odysseybks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ninthstreetbookshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.esowonbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edgewaterbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.writersblockbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.napabookmine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bookwormtricities.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plottwistbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konastories.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barringtonbooksretold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopatozbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cellardoorbookstore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allthingsbook.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.interabangbooks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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