Skip to content
Gridlode
Rank #486Updated November 10, 2026

openssl.org

openssl.org is registered with Gandi SAS since December 19, 1998 (27.9 years). The registration expires on December 19, 2032. Its email security grade is C. Its SSL certificate is issued by Let's Encrypt and is valid for 63 more days.

Domain age
27.9 yrs
Technologies
—
Email security
C
SSL days left
63

Registration

RegistrarGandi SAS
IANA ID81
RegisteredDecember 19, 1998
ExpiresDecember 19, 2032
UpdatedOctober 16, 2026
Statusclient transfer prohibited
Name serversns-cloud-b1.googledomains.com, ns-cloud-b2.googledomains.com, ns-cloud-b3.googledomains.com, ns-cloud-b4.googledomains.com
DNSSECSigned

DNS records

TypeValueTTL
A34.49.79.893600
MXaspmx.l.google.com 13600
MXalt1.aspmx.l.google.com 53600
MXalt2.aspmx.l.google.com 53600
MXalt3.aspmx.l.google.com 103600
MXalt4.aspmx.l.google.com 103600
NSns-cloud-b1.googledomains.com21600
NSns-cloud-b2.googledomains.com21600
NSns-cloud-b3.googledomains.com21600
NSns-cloud-b4.googledomains.com21600
CAAiodef 0 mailto:[email protected]3600
CAAissue 0 letsencrypt.org3600
TXTMS=ms303295913600
TXTbw=8FWhDisk9A5pIZaRqgEVlw9bmNX2JfRXqrMEIQ7H3LDq3600
TXTopenai-domain-verification=dv-yMgwPMed7LsPUgnVC7wKD1yQ3600
TXTanthropic-domain-verification-aak9cc=zhKPG1Uo7ZmC2C0SRXdTupz4B3600
TXTgoogle-site-verification=UcenFo8BSxiqYnF3VG-WR2sRg5sA6_rqD95uHRd1XCQ3600
TXTgoogle-site-verification=Vfn-VvIAKa3dsUvBlPcoj9Fs9n4vjWvTNRblV_fqJJY3600
TXTgoogle-site-verification=gSC0oSoa_ORUbibpFTgJOzjCiSO1RbQvSLAFNf_Rlyc3600
TXTv=spf1 include:_spf.mailgun.org include:_spf.google.com include:spf.ourmailsender.com include:mail.zendesk.com include:amazonses.com mx:openssl.org -all3600
AAAA2600:1901:0:d50b::3600

SSL certificate

ValidValid
IssuerUS, YR1, Let's Encrypt
ExpiresJanuary 12, 2027
Days remaining63
ProtocolTLSv1.3
Namesopenssl.org, www.openssl.org

Email security

CScore 79/100 across SPF, DMARC, DKIM, MTA-STS and BIMI.
  • warnSPF uses 8 of the 10 allowed DNS lookups. Adding another service may break it.
  • warnNo MTA-STS: mail sent to you can be downgraded to an unencrypted connection.
  • warnNo TLS-RPT record, so you won't hear about failed encrypted deliveries.
  • warnNo BIMI record (optional: shows your logo next to your emails in supporting inboxes).
  • goodSPF record found.
  • goodSPF ends with -all: servers you have not listed are rejected (hard fail).
  • goodDMARC policy is quarantine: failing mail goes to spam. Move to p=reject for full protection.
  • goodDMARC aggregate reports are sent to mailto:[email protected], mailto:[email protected], mailto:[email protected].
  • goodDKIM keys found (selector: google).
  • good5 MX record(s) found. Mail is handled by Google Workspace.

About openssl.org

Who is the registrar of openssl.org?

openssl.org is registered with Gandi SAS (IANA ID 81).

When does openssl.org expire?

The current registration of openssl.org expires on December 19, 2032. It was first registered on December 19, 1998.

Does openssl.org protect its email with SPF and DMARC?

openssl.org scores 79/100 (grade C) for email security. SPF uses 8 of the 10 allowed DNS lookups. Adding another service may break it. No MTA-STS: mail sent to you can be downgraded to an unencrypted connection.

What are the name servers of openssl.org?

openssl.org uses ns-cloud-b1.googledomains.com, ns-cloud-b2.googledomains.com, ns-cloud-b3.googledomains.com, ns-cloud-b4.googledomains.com.