careers.nkt.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 83:8c:9b:91:dc:f4:ac:f5:93:54:b6:bb:67:1e:97:63 was issued on by Sectigo Limited.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=careers.nkt.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 83:8c:9b:91:dc:f4:ac:f5:93:54:b6:bb:67:1e:97:63
Serial Number (int): 174858944337973482633423204684159424355
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 86:1f:1b:8c:a1:44:5d:b4:5a:0e:69:07:bb:82:fd:dd:4d:a4:77:87
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 2a:ff:47:eb:57:79:5c:6e:15:83:20:22:cc:5b:7c:76:a4:9c:52:fa
Fingerprint (sha256): 0c:f5:64:1a:ad:8a:d0:09:21:50:6f:96:f3:6c:42:83:98:16:2e:e8:d0:78:88:3e:b4:fa:23:ed:ad:b3:2d:23

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate careers.nkt.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careers.nkt.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

careers.nkt.com
internal.careers.nkt.com
jobs.nkt.com

Other certificates including the domain name nkt.com

(limited to 100 certificates)
accessories.nkt.com
www.sapnpi.nkt.com
leapfrog-ssl-4.gcs-web.com
helpdesk.matisa.ch
leapfrog-ssl-4.gcs-web.com
careers.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
accessories.nkt.com
itservicedesk.poundland.co.uk
accessories.nkt.com
leapfrog-ssl-4.gcs-web.com
telecom.nkt.com
support.sodra.com
railway.nkt.com
accessories.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
servicedesk.bergtoys.com
www.careers.nkt.com
helpdesk.matisa.ch
www.test-git.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
accessories.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
*.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
servicedesk.bergtoys.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
www.nkt.com
telecom.nkt.com
leapfrog-ssl-4.gcs-web.com
itservicedesk.poundland.co.uk
leapfrog-ssl-4.gcs-web.com
helpdesk.acrotec.ch
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
*.se.nkt.com
leapfrog-ssl-4.gcs-web.com
itservicedesk.poundland.co.uk
www.git.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
www.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
maximo-test.nkt.com
itdesk.nyanheroes.com
www.careers.nkt.com
helpdesk.acrotec.ch
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
support.autogroup.gr
leapfrog-ssl-4.gcs-web.com
careers.nkt.com
leapfrog-ssl-4.gcs-web.com
helpdesk.matisa.ch
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
*.hvc.nkt.com
servicedesk.ecm.software
*.nkt.com
servicedesk.bergtoys.com
helpdesk.acrotec.ch
careers.nkt.com
www.nkt.com
itdesk.nyanheroes.com
helpdesk.matisa.ch
leapfrog-ssl-4.gcs-web.com
itdesk.nyanheroes.com
*.hvc.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
helpdesk.acrotec.ch
leapfrog-ssl-4.gcs-web.com
helpdesk.acrotec.ch
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
www.sip.nktcables.com
www.nkt.com

Certificate

The complete raw certificate details for careers.nkt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 174858944337973482633423204684159424355
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'careers.nkt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 856996545253379143448672621341339267828135793262595461104511558346757639670317425774979594379634305419880618372273730503738614767531590766242283657569622946695375843651478398526310952052880214130992506342312551435757343507108121535125125805156647354062499001170571152378358301493497095906911305546975463992458236350464873807646208581518447056748329246382761780765211389378853363186450772457417469853896415304703394510829387020441543901076136444554954598131306225147664543843149003989244325151670849040033128133946506148579935291051692961999173624993173926982391991330672377792697741563481925406198384203959905275580750136008916224117201534343839255158337264678582784707661280910405036842170187167742127408533412934170682222620537477249684339816246034317514740309485890947166663176882229089057481099849514461078020246359602435918554754238481924295726205568669563200619625092644946576101437087222981079057414956402358533952021836086084826227163178301253027152759753145829226065679857682443432933795431875984342915935528660166924542172765519612815339411299718343215979464346182002361627394640554252792702834699699351557084895550506568665492880251078925613761447683149664681499943525663959645851229904633875525614203652379247014047713559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							861f1b8ca1445db45a0e6907bb82fddd4da47787
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.nkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.careers.nkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.nkt.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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