www.careers.nkt.com

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number c1:2c:a4:0e:fc:7a:f2:70 was issued on by Starfield Technologies, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.careers.nkt.com,OU=Domain Control Validated

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): c1:2c:a4:0e:fc:7a:f2:70
Serial Number (int): 13919680932567773808
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 45:c6:e9:74:5d:5d:48:a6:6a:93:df:39:15:c3:45:3f:34:4c:63:94
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): ca:f9:9d:94:bc:63:d8:51:7b:a6:8f:9a:ed:a5:3d:6f:b0:8e:42:1e
Fingerprint (sha256): 32:7f:eb:f8:45:c0:78:de:8b:82:b4:55:70:bd:4a:09:f9:1d:ea:c8:4e:92:cc:f9:ee:4a:c4:74:24:eb:94:14

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-180.crl

Check the revocation status for certificate www.careers.nkt.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.careers.nkt.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.careers.nkt.com
careers.nkt.com

Other certificates including the domain name nkt.com

(limited to 100 certificates)
accessories.nkt.com
www.sapnpi.nkt.com
leapfrog-ssl-4.gcs-web.com
helpdesk.matisa.ch
leapfrog-ssl-4.gcs-web.com
careers.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
accessories.nkt.com
itservicedesk.poundland.co.uk
accessories.nkt.com
leapfrog-ssl-4.gcs-web.com
telecom.nkt.com
support.sodra.com
railway.nkt.com
accessories.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
servicedesk.bergtoys.com
www.careers.nkt.com
helpdesk.matisa.ch
www.test-git.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
accessories.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
*.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
servicedesk.bergtoys.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
www.nkt.com
telecom.nkt.com
leapfrog-ssl-4.gcs-web.com
itservicedesk.poundland.co.uk
leapfrog-ssl-4.gcs-web.com
helpdesk.acrotec.ch
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
*.se.nkt.com
leapfrog-ssl-4.gcs-web.com
itservicedesk.poundland.co.uk
www.git.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
www.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
maximo-test.nkt.com
itdesk.nyanheroes.com
www.careers.nkt.com
helpdesk.acrotec.ch
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
support.autogroup.gr
leapfrog-ssl-4.gcs-web.com
careers.nkt.com
leapfrog-ssl-4.gcs-web.com
helpdesk.matisa.ch
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
*.hvc.nkt.com
servicedesk.ecm.software
*.nkt.com
servicedesk.bergtoys.com
helpdesk.acrotec.ch
careers.nkt.com
www.nkt.com
itdesk.nyanheroes.com
helpdesk.matisa.ch
leapfrog-ssl-4.gcs-web.com
itdesk.nyanheroes.com
*.hvc.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
helpdesk.acrotec.ch
leapfrog-ssl-4.gcs-web.com
helpdesk.acrotec.ch
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
www.sip.nktcables.com
www.nkt.com

Certificate

The complete raw certificate details for www.careers.nkt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13919680932567773808
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 11:26:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-28 11:26:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.careers.nkt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 715887365915464775950920925947601140004167479696957590635604726672885687877526286134125234681532361707153348193466993836942936280712409186119092375310994836869640685975660103328647423560224373051995740751051664736158259899158898391799078665067233458091918640652486216211194144036507131768004929711985567820794288578236792676558871182457747586885855009126893708588716881781089336579874717386557049803934430098023183957009111360382141899928728529262958913560413805050111106713284311808412406338008708371921955087254401472461310847060624206320742028325759204068158879430604884153804518677523396044817571217888184284750293255466931392269880917466226357751475896709452777269410656294935326928167650924752944985974374866956071376758780758421134483670205276276726629208870221352342568235486457070653901561590418619033610237092112890574974659640028631459375657846337726987186741867315380769138625921673663236481696582463636681978897127402134551056765723177506827232284686725221283906785340923703431596612853732358914520905859435564051776247696337009026161427193464414147133615196646692734211826502357044830735827220873015559155664373177600776574801150318885118066724495210424298406353030477382150235451477334530295548219591659995628611025949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-180.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careers.nkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.nkt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45c6e9745d5d48a66a93df3915c3453f344c6394
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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