Havokry

Is that a typo? The Eset cert. in my Win root CA store has an expiration date of 5/2/2032.
As far as thumbprint verification goes, Eset when installed creates a unique cert. for each installation.
I suspect what NordVPN is objecting to is the cert. is self-signed. Use certmgr.msc and verify that the Eset cert. stored in the Win root CA store thumbprint matches what you posted.
I suspect NordVPN presented this warning: https://support.nordvpn.com/Connectivity/1047409912/Nordvpn-com-is-telling-me-Invalid-security-certificate.htm ? Eset SSL/TLS protocol scanning feature uses its Win root CA store certificate to intercept HTTPS traffic, unencrypt it, and examine it for malware activity. Bottom line - You have to set NordVPN to trust Eset's certificate.

Ekrn and drivers are loaded prior to gui itself so when the splash screen shows up, ESET is already protecting your computer.

the software is opened automatically
you can go to advance settings in the app (F5) -> user interface -> and close the V near the show screen on startup.
 

The purpose of startup scans is to detect possible malware running in memory or registered in the system to start automatically as early as possible after update that adds detection or to detect fileless malware automatically without the need to run an on-demand scan manually. This ensures any any recognized malware is detected and cleaned as soon as possible after adding detection.

To prevent these pop-ups, please disable this setting in the HIPS setup: