DV SSL/TLS Certificate for intouchhealth.co.nz

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the intouchhealth.co.nz DV SSL/TLS Certificate

This certificate with serial number 06:d9:47:8f:ce:ba:51:b4:a5:89:46:50:e5:6d:48:5a:b4:08 for intouchhealth.co.nz was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for intouchhealth.co.nz provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:d9:47:8f:ce:ba:51:b4:a5:89:46:50:e5:6d:48:5a:b4:08
Serial Number (int): 596610111091494729212685811112923740419080
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: fc:61:be:d2:c9:d6:32:f7:3b:29:a8:c8:0a:8c:73:0f:6d:18:c7:20
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 78:50:cf:ce:3c:1c:71:56:66:38:41:9b:f7:e2:39:60:4c:17:11:d9
Fingerprint (SHA-256): d5:ad:a9:2d:93:1c:92:23:4e:10:ef:38:e5:24:20:64:73:6a:9d:ac:f7:75:64:bc:62:5c:55:1a:86:79:2e:1b

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/9.crl

Check the revocation status for certificate intouchhealth.co.nz
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for intouchhealth.co.nz

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for intouchhealth.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33SpMicwALQAqdbhlKSY
9OBhqmtQJwCWvFR8iAzN6lFvT3FHi6oDRDAoZYjFdkvkH3LAr5pr5QVvuWuAyPlA
Sx7o98dDnGBLqH17LAMjMUzGkXua5edBMH37P3sY8KQYjkHeG9rfq82sSEFH3ALA
uTA514QbU2kXBhAD8YGt6+y3udZdo/JeenZFsbxNGj+uoN9ijZ+J0E8rPlY7H2P6
WiAAt2tu7X4ug5HB2AS88lc3Dor1G070Q49t4zqyeYv0vzJjcdjYK4YvS8bFrjWq
d0x8kfWAKjFY1C0qZQvWE8TL1NOI/4CkpYCT7D6XbHw0gcyneo0TMhj0PnI+tTVu
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 596610111091494729212685811112923740419080
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-08 07:10:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-06 07:10:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intouchhealth.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28208669651919826638658310123760296823872787294104783462832056773381527558485078319625189281989490037581951195700355028392798028405812921062114285706390912408399743195095956098877546221823990051901914218049671870061566268974605602473432960143977392624041597003260287142758573330914363979551849969129517730307498647384706282631375546717450554595440017321149620516319653069302542892858876422627373059930984912444198873563492315787248581928668113627722212653313091098963537856808230868642408393162331831144592036755303273427613587443284953861387104807300332512913236137985029646184289461568581232891636762221972953591301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc61bed2c9d632f73b29a8c80a8c730f6d18c720
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intouchhealth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intouchhealth.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/9.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db000000196aef129670000040300473045022100a9cf10c835d10e8e30e79cc56a6f7b8b3a7c5c4b8c9cfe5f26a682ac0bb8bc050220060ce338c5698a927bd459d033a0faa13980e715ff0f736a86aa56238f1a52b1007700dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a00000196aef1296b0000040300483046022100addabf232ef87d2d9ec26fc6632ad16cd40253027343c2bb453692c4ff0d367b022100a1256f990e6f9bb26b0b7c0a59fad0b2f2a0ea68247aac88bb4064e8e48be8b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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