中文

SSL/TLS check

letsencrypt.org

Valid 82 days leftExpires 2027-02-01

GradeA+

Findings

  • Certificate is valid and trusted, expires in 82 days.

  • The certificate chain is complete.

  • TLS 1.3 is supported.

  • Revocation check (OCSP/CRL): not revoked.

  • HSTS enabled: max-age=31536000

Certificate

Subject
letsencrypt.org
Names (SAN)
cp.letsencrypt.org, cp.root-x1.letsencrypt.org, cps.letsencrypt.org, cps.root-x1.letsencrypt.org, lencr.org, letsencrypt.com, letsencrypt.org, www.lencr.org, www.letsencrypt.com, www.letsencrypt.org
Issuer
YE2 · Let's Encrypt
Valid from
2026-11-03 13:44 UTC
Expires
2027-02-01 13:44 UTC
Validity period
90 days
Public key
ECDSA P-256
Signature
ecdsa-with-SHA384
Validation level
DV
Embedded SCTs
2
Extended key usage
serverAuth
OCSP
—
CRL
http://ye2.c.lencr.org/51.crl
Serial number
05688C92AD512A3678DB6355831A0BFBBD32
SHA-256 fingerprint
BF:23:01:9B:28:2D:3C:79:EA:F5:F0:68:84:79:EC:45:61:D3:90:A8:27:B6:1B:44:CE:6D:5D:CB:5B:7D:10:F3
SPKI SHA-256
flTwIAI56dThORiU1wbXUPovi3YFBsUIB40XypdFiq4=

Connection

IP address
52.52.192.191
TLS version
TLSv1.3
Cipher suite
TLS_AES_128_GCM_SHA256
ALPN
h2
Hostname matches
Yes
Trusted
Yes
Chain complete
Yes
Root
ISRG Root X2
HSTS
max-age=31536000
CAA
0 issue "amazon.com"; 0 issue "letsencrypt.org"; 0 issue "pki.goog"; 0 issue "sectigo.com"; 0 issue "ssl.com"; 0 issue "www.digicert.com"; 0 issuewild "amazon.com"; 0 issuewild "letsencrypt.org"; 0 issuewild "pki.goog"; 0 issuewild "sectigo.com"; 0 issuewild "ssl.com"; 0 issuewild "www.digicert.com"
Revocation
Not revoked
Checked
2026-11-10 17:04 UTC · 115 ms

Protocols

TLS 1.3 Supported
TLS 1.2 Supported
TLS 1.1 Not supported
TLS 1.0 Not supported

Certificate chain

  1. letsencrypt.org Issuer: YE2 · Expires 2027-02-01
    Subject
    CN=letsencrypt.org
    Issuer
    CN=YE2,O=Let's Encrypt,C=US
    Valid from
    2026-11-03 13:44 UTC
    Expires
    2027-02-01 13:44 UTC
    Public key
    ECDSA P-256
    Signature
    ecdsa-with-SHA384
    SHA-256 fingerprint
    BF:23:01:9B:28:2D:3C:79:EA:F5:F0:68:84:79:EC:45:61:D3:90:A8:27:B6:1B:44:CE:6D:5D:CB:5B:7D:10:F3
    -----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
  2. YE2 Issuer: Root YE · Expires 2028-09-02
    Subject
    CN=YE2,O=Let's Encrypt,C=US
    Issuer
    CN=Root YE,O=ISRG,C=US
    Valid from
    2025-09-03 00:00 UTC
    Expires
    2028-09-02 23:59 UTC
    Public key
    ECDSA P-384
    Signature
    ecdsa-with-SHA384
    SHA-256 fingerprint
    97:65:8D:E8:C6:8D:FA:98:AC:E1:E5:02:8A:63:D5:4A:1A:AE:91:1B:3E:21:47:10:76:C6:85:0C:D0:8C:BA:B4
    -----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
  3. Root YE Issuer: ISRG Root X2 · Expires 2032-09-02
    Subject
    CN=Root YE,O=ISRG,C=US
    Issuer
    CN=ISRG Root X2,O=Internet Security Research Group,C=US
    Valid from
    2026-05-13 00:00 UTC
    Expires
    2032-09-02 23:59 UTC
    Public key
    ECDSA P-384
    Signature
    ecdsa-with-SHA384
    SHA-256 fingerprint
    0F:C0:90:1C:CA:2B:AE:9E:9F:DB:B0:2D:50:D0:2F:10:94:F7:B3:66:72:08:69:91:B9:E8:97:62:6D:C4:85:F0
    -----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
  4. ISRG Root X2 Issuer: ISRG Root X1 · Expires 2032-09-02
    Subject
    CN=ISRG Root X2,O=Internet Security Research Group,C=US
    Issuer
    CN=ISRG Root X1,O=Internet Security Research Group,C=US
    Valid from
    2026-05-13 00:00 UTC
    Expires
    2032-09-02 23:59 UTC
    Public key
    ECDSA P-384
    Signature
    sha256WithRSAEncryption
    SHA-256 fingerprint
    EE:5F:7A:BD:69:81:BB:02:55:63:2C:D8:F4:92:83:45:1B:4B:18:84:4D:12:04:0B:44:EE:00:F0:7B:8F:E2:C6
    -----BEGIN CERTIFICATE-----
MIIEcDCCAligAwIBAgIQbI8dxyfHEX97r4U6yYD5zTANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFy
Y2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMTAeFw0yNjA1MTMwMDAwMDBa
Fw0zMjA5MDIyMzU5NTlaME8xCzAJBgNVBAYTAlVTMSkwJwYDVQQKEyBJbnRlcm5l
dCBTZWN1cml0eSBSZXNlYXJjaCBHcm91cDEVMBMGA1UEAxMMSVNSRyBSb290IFgy
MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEzZvVn4CDCuwJSvMWSj5cz3es3mcFDR0H
ttwW+1qLFNvicWDEukWVEYmO6gbf9yoWHKS5xcUy4APgHoIYOIvXRdgKam7mAHf7
AlF9ItgKbppbd9/w+kHsOdx1ymgHDB/qo4H1MIHyMA4GA1UdDwEB/wQEAwIBBjAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDwYDVR0TAQH/BAUwAwEB/zAd
BgNVHQ4EFgQUfEKWrt5LSDv6kviejM9ti6lyN5UwHwYDVR0jBBgwFoAUebRZ5nu2
5eQBc4AIiMgaWPbpm24wMgYIKwYBBQUHAQEEJjAkMCIGCCsGAQUFBzAChhZodHRw
Oi8veDEuaS5sZW5jci5vcmcvMBMGA1UdIAQMMAowCAYGZ4EMAQIBMCcGA1UdHwQg
MB4wHKAaoBiGFmh0dHA6Ly94MS5jLmxlbmNyLm9yZy8wDQYJKoZIhvcNAQELBQAD
ggIBAD2/e9frmMxNpCV03qUHegg+MV2wz9644YoXdqtH8RyWYcBO7xfjjGEXdU1e
/o0OkEFiynUCOSIk/vLLo7ttz6CPAeNlWfC0XNkoGeWgK6jjXvozBaGuGH5n0Ufo
shMeWTuURqNN5G00sSXDTBrpp2+mgvdZQjb8K11TYMA25QA+YHNfbIEL0BniAhKS
2gsnJjSzrdZLI+EZ7SEyqdR2rkjd1KutLDU+n3TFyxjniZVGur4YlhMP3mY/dV95
IruAkkjOZier6hGBdEgZXXvaCz9u9iVEadsIE75pAGL8oHV5vxdARDiotRpul1IN
/UZwzAbrfUFcw1HkAcYD/mlZfnQ2ieCF2MS7j3Vhv7JPDKp45fmykmzYNSrumRW0
upFFKDBOoF7hsOb7oLyHS+Uft6jOUfOrogj8YUx38hKb2K20r42OgsSdDdxdeYWc
MS3Sb6mwJeSZEYxJ2gaXnDSPaKhhrNkYwljyVQyr4Nq+MEJytXNTnHqaAcrNwZlV
pcJL1KBnMrMjP7eanvUwL3FYj3cF17jtboLt7gLoi4+2rWZFvn+w54jmd/FIuhhZ
cEaU/wvU6BUNMtcVquVGHp7itQeDth5j+XL3j4WJ2SABwzUl6OeYdgpIt/ITZa+p
TT0mQ/r5XyA4MEAiabn7XJjvCERlF2dcn2wqJw+CreTkkQ2R
-----END CERTIFICATE-----

Full chain (PEM) →

In your terminal

Run the same check from the command line:

CLI & API docs → · JSON · Re-check now

Monitor this domain In development

ssl.sh Monitor is in development and not open yet. Until then, add /days to this address in curl to print the days left. How it works →

Related tools

Check another domain