Certificate Transparency and CT Logs

CT helps detect misissued or malicious certificates.

How CT Works

- CAs submit to public logs
- Logs are append-only
- Monitors watch for certs
- Browsers require CT

Monitoring Benefits

- Detect unauthorized certs
- Find shadow IT domains
- Identify phishing sites
- Audit CA compliance

Monitoring Tools

- crt.sh
- Facebook Certificate Transparency
- Cert Spotter
- SSLMate
- Google Transparency Report