Skip to content
Gridlode
Rank #396Updated November 10, 2026

letsencrypt.org

Let's Encrypt

letsencrypt.org is registered with Cloudflare, Inc. since July 8, 2014 (12.3 years). The registration expires on July 8, 2027. The site runs on Netlify, Content Security Policy, HSTS and 1 other technologies. Its email security grade is B. Its SSL certificate is issued by Let's Encrypt and is valid for 83 more days.

Domain age
12.3 yrs
Technologies
4
Email security
B
SSL days left
83

Registration

RegistrarCloudflare, Inc.
IANA ID1910
RegisteredJuly 8, 2014
ExpiresJuly 8, 2027
UpdatedAugust 12, 2026
Statusclient delete prohibited, client transfer prohibited, client update prohibited
Name serversowen.ns.cloudflare.com, vera.ns.cloudflare.com
DNSSECNot signed

DNS records

TypeValueTTL
A63.176.8.2181
A35.157.26.1351
MXaspmx.l.google.com 13600
MXaspmx2.googlemail.com 103600
MXaspmx3.googlemail.com 103600
MXalt1.aspmx.l.google.com 53600
MXalt2.aspmx.l.google.com 53600
NSowen.ns.cloudflare.com80600
NSvera.ns.cloudflare.com80600
CAAissue 0 amazon.com300
CAAissue 0 letsencrypt.org300
CAAissue 0 pki.goog300
CAAissue 0 sectigo.com300
CAAissue 0 ssl.com300
CAAissue 0 www.digicert.com300
CAAissuewild 0 amazon.com300
CAAissuewild 0 letsencrypt.org300
CAAissuewild 0 pki.goog300
CAAissuewild 0 sectigo.com300
CAAissuewild 0 ssl.com300
CAAissuewild 0 www.digicert.com300
TXTanthropic-domain-verification-eer9ky=uy5e3EOy8j15k1u9UesevyP1N300
TXTpardot1011011=d160caff32c4415bb46bb82d8c50e5bea7ea1a74f5a149cb96bd952467266044300
TXTsending_domain1011011=f98c68e7636a708a1987c7b9da300d64a354041fa41ea2039fbb02bc18c4ed0f300
TXTv=spf1 include:_spf.google.com ip4:23.178.112.0/24 ip4:64.78.194.68 ip4:64.78.152.132 include:mail.zendesk.com include:_spf.intacct.com -all300
AAAA2a05:d014:58f:6200::259120
AAAA2a05:d014:58f:6200::258120

Technology stack

Hosting
Netlify
Security
Content Security PolicyHSTS
Static site generator
Hugo

SSL certificate

ValidValid
IssuerUS, YE2, Let's Encrypt
ExpiresFebruary 1, 2027
Days remaining83
ProtocolTLSv1.3
Namescp.letsencrypt.org, cp.root-x1.letsencrypt.org, cps.letsencrypt.org, cps.root-x1.letsencrypt.org, lencr.org, letsencrypt.com, letsencrypt.org, www.lencr.org, www.letsencrypt.com, www.letsencrypt.org

Email security

BScore 85/100 across SPF, DMARC, DKIM, MTA-STS and BIMI.
  • warnNo MTA-STS: mail sent to you can be downgraded to an unencrypted connection.
  • warnNo TLS-RPT record, so you won't hear about failed encrypted deliveries.
  • warnNo BIMI record (optional: shows your logo next to your emails in supporting inboxes).
  • goodSPF record found.
  • goodSPF ends with -all: servers you have not listed are rejected (hard fail).
  • goodDMARC policy is reject: mail that fails authentication is blocked.
  • goodDMARC aggregate reports are sent to mailto:[email protected].
  • goodDKIM keys found (selector: google, k2, mandrill).
  • good5 MX record(s) found. Mail is handled by Google Workspace.

Homepage metadata

TitleLet's Encrypt
DescriptionLet's Encrypt is a free, automated, and open Certificate Authority brought to you by the nonprofit Internet Security Research Group (ISRG). Read all about our work in our Annual Report.
Languageen-US
IndexableYes
Word count617

About letsencrypt.org

Who is the registrar of letsencrypt.org?

letsencrypt.org is registered with Cloudflare, Inc. (IANA ID 1910).

When does letsencrypt.org expire?

The current registration of letsencrypt.org expires on July 8, 2027. It was first registered on July 8, 2014.

What technology does letsencrypt.org use?

We detected 4 technologies on letsencrypt.org, including Netlify, Content Security Policy, HSTS, Hugo.

Does letsencrypt.org protect its email with SPF and DMARC?

letsencrypt.org scores 85/100 (grade B) for email security. No MTA-STS: mail sent to you can be downgraded to an unencrypted connection. No TLS-RPT record, so you won't hear about failed encrypted deliveries.

What are the name servers of letsencrypt.org?

letsencrypt.org uses owen.ns.cloudflare.com, vera.ns.cloudflare.com.