DV SSL/TLS Certificate for www.theatergroepfusie.nl

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the www.theatergroepfusie.nl DV SSL/TLS Certificate

This certificate with serial number 05:0f:0a:9c:74:09:99:62:64:d9:48:1c:c7:ec:ac:fa:00:b8 for www.theatergroepfusie.nl was issued on by Let's Encrypt.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.theatergroepfusie.nl provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:0f:0a:9c:74:09:99:62:64:d9:48:1c:c7:ec:ac:fa:00:b8
Serial Number (int): 440679769794403128420609129696415954108600
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: fa:bf:bb:a8:e1:f9:32:73:3d:22:e7:06:69:ce:b1:05:f2:2b:c2:76
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 7c:a1:36:bb:91:ed:d6:ad:c0:bc:c6:4f:b4:48:bc:90:38:7d:b1:3c
Fingerprint (SHA-256): 9a:d8:b1:ce:75:f3:09:b1:8d:61:34:56:6a:08:dc:ac:c9:76:52:7a:da:2c:13:41:0e:45:83:c8:5c:ce:56:f3

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/57.crl

Check the revocation status for certificate www.theatergroepfusie.nl
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.theatergroepfusie.nl

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

www.theatergroepfusie.nl

X.509 Certificate

The complete raw X.509 certificate details for www.theatergroepfusie.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF17mBBoQhh7z63qeJly
P1k6ipWQkslskQoZc8wmIcb9lvCN+RMxF55k7KDcPWeoaa7INYho/oCk4SvAlsOU
eT3+ABF3rPEordIUKig3nnfJzxGFw1sonMQclfN94cZqMO8qjCSPCgRE9LgyUAEj
CLVuNvemcOUg7iEmvrvzhySwrWqPoCpgjQ8PhCK5LVN1qtpcW15KVqEh9XqfsSHy
I22J5zyTIH3je5/5/xKnFYCF1Oqb30JT362o0H/TuBRpVy4MXV44q93gaxh3lwEX
ZII2WflVwBL+DVfyTXHBdGGxZ3gM+5XQb9PUCmMul4Lyvk0+vpj9V5ckFqZpUFAv
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 440679769794403128420609129696415954108600
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-02 21:27:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-31 21:27:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.theatergroepfusie.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19739273656091569334471640108311215102350129554142954571288415130282110789876909210329857981334727592977806766267345648859626381567451930369464056156393298912602059265987436235616474393782184409530534823786257170239152017555262585601604774189189575408657457675598565773369571906948234055663956174582492723345746338792965355819108405968541502288600381419354070370522530016237667347380911735245412780483257608824795342936860377843397058478001677083635137424891653435941358110201621326294496060437068878319596623797867243002753746284702797028763886188632953517846027414441925035907534579200061902829321838764755703050139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fabfbba8e1f932733d22e70669ceb105f22bc276
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theatergroepfusie.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/57.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe00000019732c0b2400000040300483046022100d2c316296b0e0b1ecbf3ed5f45b887b13b059dd4db28f868fe38d7bfb8f52aa80221008bff832922e65448ef34a408fd1e90396faa5b720f54b8fc078c4083f4ef18ba007600dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a0000019732c0ba5e0000040300473045022100861d90ca34a12fad8de6d82ded6911ea60ba0f591a25f18a42137bccde6454d0022079049cfb85e9795a9c636cff59f7257cbef6b8fda638dd06ed0d590168911cf5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b8d35b0e739a7418d4214c3a74003da5d511c295297a9f32c2805184b28f045be98755088c71e906c6288433d5ed9219046b9a18dd768dce86401ea0f6d88874e3ea393faa0a1d61d898e150b8841ddb5d0231f91e280bf29b6938f14868bffa4a9cbd92bab04d15ea96d4d81ae352c0c8d240dcc3fcb1c07b58abfeceabc81ab7924b712b470f1ff3fe587672b0a182183f29f81ec10d6c91b95d627be0fc5b9e0463c672ffdafbca45bcdbbe763e6e4cbe02e55310381065ce9fe088197d002f8d800e8e2c552e2fad7e5c49ab4ec76619e1cf9779bd759666435a6396fd63f2612eafe4e367c9ee07314df0b809e84175c748aa0a2beda29f815001a7df49