Certificate Transparency and CT Logs

Monitor certificate issuance for your domains.

CT helps detect misissued or malicious certificates.

How CT Works

- CAs submit to public logs
- Logs are append-only
- Monitors watch for certs
- Browsers require CT

- Detect unauthorized certs
- Find shadow IT domains
- Identify phishing sites
- Audit CA compliance

- crt.sh
- Facebook Certificate Transparency
- Cert Spotter
- SSLMate
- Google Transparency Report