THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.2

nbk.com · 91.102.237.77:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
jurisdictionC=KW businessCategory=Private Organization serialNumber=1719 C=KW L=Kuwait City O=National Bank of Kuwait K.S.C. CN=nbk.com
Issuer
C=US O=DigiCert Inc CN=DigiCert EV RSA CA G2
Valid from
2026-09-28T00:00:00+00:00
Expires
2027-04-14T23:59:59+00:00
Days remaining
176
Serial (hex)
031545EC036FD97BE073BB9D62A9F78F
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:nbk.com, DNS:www.nbk.com, DNS:www.glb.nbk.com

SHA-256 fingerprint

BA:AE:67:89:8A:E6:79:24:5F:C0:97:D5:CD:DF:B8:33:A1:8D:A0:5B:02:4D:46:B3:6B:66:1C:E8:6B:1F:60:B3
Certificate extensions & PEM
authorityKeyIdentifier
6A:4E:50:BF:98:68:9D:5B:7B:20:75:D4:59:01:79:48:66:92:32:06
subjectKeyIdentifier
02:08:15:20:5A:5F:61:31:26:FA:25:09:09:65:68:F1:E4:9E:99:78
subjectAltName
DNS:nbk.com, DNS:www.nbk.com, DNS:www.glb.nbk.com
certificatePolicies
Policy: 2.16.840.1.114412.2.1 Policy: 2.23.140.1.1 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertEVRSACAG2.crl Full Name: URI:http://crl4.digicert.com/DigiCertEVRSACAG2.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertEVRSACAG2.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 4C:63:DC:98:E5:9C:1D:AB:88:F6:1E:8A:3D:DE:AE:8F: AB:44:A3:37:7B:5F:9B:94:C3:FB:A1:9C:FC:C1:BE:26 Timestamp : Sep 28 05:05:45.275 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:DF:B3:A6:88:5B:18:87:22:58:EC:41: 9F:56:65:3F:93:BF:CB:9D:6D:85:19:56:6C:BA:12:EA: 21:57:18:6C:B8:02:20:57:CF:22:AD:09:A7:45:A1:1F: 4D:18:2F:10:51:D3:A1:C2:81:75:79:11:F2:48:DA:06: 29:F3:B9:73:55:AD:A1 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 44:C2:BD:0C:E9:14:0E:64:A5:C9:4A:01:93:0A:5A:A1: BB:35:97:0E:00:EE:11:16:89:68:2A:1C:44:D7:B5:66 Timestamp : Sep 28 05:05:45.313 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:8F:34:CE:5A:CE:E4:E1:80:50:A4:BF: A0:54:C7:D1:A1:CB:DE:AC:49:D5:87:E7:3B:E7:09:54: 43:AC:F6:42:1F:02:20:78:BA:60:14:1E:FB:68:A0:F9: D3:FC:AC:9C:DA:9B:AE:F8:D6:22:0C:C3:25:7D:FB:37: 2E:3E:F7:10:6F:03:F8 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 1C:9F:68:2C:E9:FA:F0:45:69:50:F8:1B:96:8A:87:DD: DB:32:10:D8:4C:E6:C8:B2:E3:82:52:4A:C4:CF:59:9F Timestamp : Sep 28 05:05:45.370 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:B4:7B:20:26:C8:FB:61:1B:D8:6D:DB: 94:A5:27:F7:EE:9C:5C:C8:1D:AF:C6:2E:38:86:5E:69: 2F:6F:A8:F3:A7:02:21:00:F0:D4:8C:20:A9:D1:A0:6A: 68:0D:DB:62:AC:9E:BC:43:52:4D:35:CE:1C:A3:0C:62: 11:EC:FC:E5:4E:23:C2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: ECDHE-RSA-AES256-GCM-SHA384 · Checked 2026-10-20T05:05:24+00:00

Server-presented chain · 1 additional certificate

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert EV RSA CA G2
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2020-07-02T12:42:50+00:00
Expires
2030-07-02T12:42:50+00:00
Days remaining
1351
Serial (hex)
01678F1FEF882255D8B0A70E6B7BB220
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

95:88:EF:74:19:9E:45:AC:EF:CC:CF:C0:C4:70:10:E9:F2:A3:7A:1D:D4:4C:61:A4:E1:C6:B3:34:DA:5A:F6:14
Certificate extensions & PEM
subjectKeyIdentifier
6A:4E:50:BF:98:68:9D:5B:7B:20:75:D4:59:01:79:48:66:92:32:06
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.digicert.com/CPS User Notice: Explicit Text: Any use of this Certificate constitutes acceptance of the Relying Party Agreement located at https://www.digicert.com/rpa-ua
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIQAWePH++IIlXYsKcOa3uyIDANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH
MjAeFw0yMDA3MDIxMjQyNTBaFw0zMDA3MDIxMjQyNTBaMEQxCzAJBgNVBAYTAlVT
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxHjAcBgNVBAMTFURpZ2lDZXJ0IEVWIFJT
QSBDQSBHMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK0eZsx/neTr
f4MXJz0R2fJTIDfN8AwUAu7hy4gI0vp7O8LAAHx2h3bbf8wl+pGMSxaJK9ffDDCD
63FqqFBqE9eTmo3RkgQhlu55a04LsXRLcK6crkBOO0djdonybmhrfGrtBqYvbRat
xenkv0Sg4frhRl4wYh4dnW0LOVRGhbt1G5Q19zm9CqMlq7LlUdAE+6d3a5++ppfG
cnWLmbEVEcLHPAnbl+/iKauQpQlU1Mi+wEBnjE5tK8Q778naXnF+DsedQJ7NEi+b
QoonTHEz9ryeEcUHuQTv7nApa/zCqes5lXn1pMs4LZJ3SVgbkTLj+RbBov/uiwTX
tkBEWawvZH8CAwEAAaOCAgswggIHMB0GA1UdDgQWBBRqTlC/mGidW3sgddRZAXlI
ZpIyBjAfBgNVHSMEGDAWgBROIlQgGJXm427mD/r6uRLtBhePOTAOBgNVHQ8BAf8E
BAMCAYYwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBIGA1UdEwEB/wQI
MAYBAf8CAQAwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2Nz
cC5kaWdpY2VydC5jb20wewYDVR0fBHQwcjA3oDWgM4YxaHR0cDovL2NybDMuZGln
aWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdEcyLmNybDA3oDWgM4YxaHR0cDov
L2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdEcyLmNybDCBzgYD
VR0gBIHGMIHDMIHABgRVHSAAMIG3MCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5k
aWdpY2VydC5jb20vQ1BTMIGKBggrBgEFBQcCAjB+DHxBbnkgdXNlIG9mIHRoaXMg
Q2VydGlmaWNhdGUgY29uc3RpdHV0ZXMgYWNjZXB0YW5jZSBvZiB0aGUgUmVseWlu
ZyBQYXJ0eSBBZ3JlZW1lbnQgbG9jYXRlZCBhdCBodHRwczovL3d3dy5kaWdpY2Vy
dC5jb20vcnBhLXVhMA0GCSqGSIb3DQEBCwUAA4IBAQBSMgrCdY2+O9spnYNvwHiG
+9lCJbyELR0UsoLwpzGpSdkHD7pVDDFJm3//B8Es+17T1o5Hat+HRDsvRr7d3MEy
o9iXkkxLhKEgApA2Ft2eZfPrTolc95PwSWnn3FZ8BhdGO4brTA4+zkPSKoMXi/X+
WLBNN29Z/nbCS7H/qLGt7gViEvTIdU8x+H4l/XigZMUDaVmJ+B5d7cwSK7yOoQdf
oIBGmA5Mp4LhMzo52rf//kXPfE3wYIZVHqVuxxlnTkFYmffCX9/Lon7SWaGdg6Rc
k4RHhHLWtmz2lTZ5CEo2ljDsGzCFGJP7oT4q6Q8oFC38irvdKIJ95cUxYzj4tnOI
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →