SSL-Tools

SSL check results of openai.com

NEW You can also bulk check multiple servers.

Discover if the webservers of openai.com can be reached through a secure connection.

Summary

JSON Refresh

Report created Tue, 14 Jul 2026 18:43:58 +0000

The webservers of openai.com can be reached through a secure connection.

Servers

Hostname / IP address Certificates Protocol
openai.com
104.18.33.45
 openai.com
HSTS
unexpected EOF
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s
openai.com
172.64.154.211
 openai.com
HSTS
unexpected EOF
DANE
missing
PFS
supported
Heartbleed
not vulnerable
Weak ciphers
not found
  • TLSv1.2
  • SSLv3
1 s

Certificates

First seen at:

CN=openai.com

Certificate chain
  • openai.com
    • remaining
    • 256 bit
    • ecdsa-with-SHA384
      • YE1
        • remaining
        • 384 bit
        • ecdsa-with-SHA384
          • Root YE
            • remaining
            • 384 bit
            • ecdsa-with-SHA384
              • ISRG Root X2 (Certificate is self-signed.)
                • remaining
                • 384 bit
                • ecdsa-with-SHA384
Subject
Common Name (CN)
  • openai.com
Alternative Names
  • *.email.openai.com
  • openai.com
Issuer
Country (C)
  • US
Organization (O)
  • Let's Encrypt
Common Name (CN)
  • YE1
validity period
Not valid before
2026-05-28
Not valid after
2026-08-26
This certifcate has been verified for the following usages:
  • Digital Signature
  • TLS Web Server Authentication
Fingerprints
SHA256
98:73:6B:F6:68:54:EB:3C:34:03:17:8D:65:57:69:B5:E4:E0:10:E7:61:3D:0E:F4:0B:5E:F2:9A:A0:F2:77:BF
SHA1
16:E0:94:00:DA:76:52:2D:A8:40:95:52:F1:BE:98:B7:49:7A:EE:1B
X509v3 extensions
subjectKeyIdentifier
  • C5:60:41:53:E6:75:1C:5A:27:65:2A:85:BD:5A:36:DC:34:26:03:99
authorityKeyIdentifier
  • keyid:BB:20:CA:47:0B:FE:D7:E5:9C:F9:8F:09:2A:A3:8C:37:45:B1:BC:D8
authorityInfoAccess
  • CA Issuers - URI:http://ye1.i.lencr.org/
certificatePolicies
  • Policy: 2.23.140.1.2.1
crlDistributionPoints
  • Full Name:
  • URI:http://ye1.c.lencr.org/47.crl
ct_precert_scts
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E:
  • F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7
  • Timestamp : May 28 20:31:56.355 2026 GMT
  • Extensions: none
  • Signature : ecdsa-with-SHA256
  • 30:45:02:20:7B:1F:BC:CB:46:66:EE:3E:D8:5F:65:38:
  • B7:3C:66:EB:C0:3B:FB:C4:EE:A9:C6:FB:0E:69:54:1D:
  • E9:91:04:5C:02:21:00:D7:52:BB:5E:A9:40:5F:7B:97:
  • 72:E8:EB:37:85:1B:D7:CB:13:7E:C5:74:61:BA:0B:AE:
  • E1:CE:E4:3B:14:4D:28
  • Signed Certificate Timestamp:
  • Version : v1 (0x0)
  • Log ID : 46:AF:86:3D:3B:3E:E5:9F:A5:77:DE:A8:24:5D:36:B0:
  • D9:ED:22:A2:23:F4:61:77:41:22:94:52:EE:95:50:5F
  • Timestamp : May 28 20:31:56.530 2026 GMT
  • Extensions: 00:00:05:00:07:EC:34:7F
  • Signature : ecdsa-with-SHA256
  • 30:44:02:20:0C:22:40:90:57:34:F9:22:A0:89:4A:37:
  • 5F:51:CB:42:46:D1:16:A2:83:B9:E4:FA:63:29:96:F8:
  • 05:4B:55:28:02:20:52:EF:48:E3:4A:CA:8A:0E:04:10:
  • E3:63:28:D1:96:1A:59:64:78:6C:9F:D0:DC:54:0C:1B:
  • 24:B8:55:31:38:0D