careers.nkt.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 77:47:ac:26:68:ed:48:38:8e:6d:ac:c2:66:78:59:8e was issued on by Sectigo Limited.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=careers.nkt.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 77:47:ac:26:68:ed:48:38:8e:6d:ac:c2:66:78:59:8e
Serial Number (int): 158550276192956262760872490975389833614
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f4:8a:ce:e4:0e:d1:d5:6f:50:3a:90:78:b6:2c:43:35:74:e4:a9:07
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 9f:b2:88:0b:b6:e6:35:ae:f1:42:b2:3f:1f:63:98:a4:56:e5:67:ae
Fingerprint (sha256): 62:2e:fc:23:45:65:1e:e0:db:8e:6c:b8:c8:c6:cf:52:4c:f6:7f:99:61:05:40:c6:00:df:5a:06:8f:0e:d1:40

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate careers.nkt.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careers.nkt.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

careers.nkt.com
internal.careers.nkt.com
jobs.nkt.com

Other certificates including the domain name nkt.com

(limited to 100 certificates)
accessories.nkt.com
www.sapnpi.nkt.com
leapfrog-ssl-4.gcs-web.com
helpdesk.matisa.ch
leapfrog-ssl-4.gcs-web.com
careers.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
accessories.nkt.com
itservicedesk.poundland.co.uk
accessories.nkt.com
leapfrog-ssl-4.gcs-web.com
telecom.nkt.com
support.sodra.com
railway.nkt.com
accessories.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
servicedesk.bergtoys.com
www.careers.nkt.com
helpdesk.matisa.ch
www.test-git.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
accessories.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
*.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
servicedesk.bergtoys.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
www.nkt.com
telecom.nkt.com
leapfrog-ssl-4.gcs-web.com
itservicedesk.poundland.co.uk
leapfrog-ssl-4.gcs-web.com
helpdesk.acrotec.ch
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
*.se.nkt.com
leapfrog-ssl-4.gcs-web.com
itservicedesk.poundland.co.uk
www.git.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
www.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
maximo-test.nkt.com
itdesk.nyanheroes.com
www.careers.nkt.com
helpdesk.acrotec.ch
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
support.autogroup.gr
leapfrog-ssl-4.gcs-web.com
careers.nkt.com
leapfrog-ssl-4.gcs-web.com
helpdesk.matisa.ch
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
*.hvc.nkt.com
servicedesk.ecm.software
*.nkt.com
servicedesk.bergtoys.com
helpdesk.acrotec.ch
careers.nkt.com
www.nkt.com
itdesk.nyanheroes.com
helpdesk.matisa.ch
leapfrog-ssl-4.gcs-web.com
itdesk.nyanheroes.com
*.hvc.nkt.com
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
helpdesk.acrotec.ch
leapfrog-ssl-4.gcs-web.com
helpdesk.acrotec.ch
leapfrog-ssl-4.gcs-web.com
leapfrog-ssl-4.gcs-web.com
www.sip.nktcables.com
www.nkt.com

Certificate

The complete raw certificate details for careers.nkt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158550276192956262760872490975389833614
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'careers.nkt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782554929553429950282068193386717005192915313637949098219846710624994597991069873722317960154167962805620205554344468119280682209712610342194750866808852624301282270039706073661877244081071583305314393403243749468295053834997998892905909576291042629878399657029513757615476379342636752671527945341324382014123643517031206274225174323361713452140080152589372265914268417368542896395163835081514251688707012902653346486199571147325497114273680375975198599026637365170009628128582971666512158458898380507578814064263821783633242399675694508356425875338853576093586896387613383699882335389186465418502382617959784555023420400847092502600334817088725311371256874655064889628452795584890794410103646990750311582855309640009146121365780449528901193136624157653927663604646653462263131375650913331166425968751662021248306195914944109475874580867978560289309149887968175729900156341120884700728114914421590159187729236566787277329983968726311238792479827341619958800293262515959021644132078672496626404745760458090397487368970276512336657403609322753149677960459838155294748546017472305208836723272538539077467120142139972899900639052034357407979140843337383163125927191517450798972214111195592820606850133552097201632389790664992459645837907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f48acee40ed1d56f503a9078b62c433574e4a907
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.nkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internal.careers.nkt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.nkt.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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