September 2022 - Apple Log List Updates

[Clint]

Hello All,

Apple has updated its CT Log List from version 142 to 166. These updates include several logs being moved to Read-Only (and shortly to Retired) and several new logs being added.

Read-Only Logs
The following logs have been transitioned to readonly:

• Google 'Icarus' log (https://ct.googleapis.com/icarus/)
• Google 'Pilot' log (https://ct.googleapis.com/pilot/)
• Google 'Rocketeer' log (https://ct.googleapis.com/rocketeer/)
• Google 'Skydiver' log (https://ct.googleapis.com/skydiver/)

Newly Qualified Logs
The following logs have been added as qualified:

Cloudflare Nimbus2024

• Log ID: 2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6s=
• Log URL: https://ct.cloudflare.com/logs/nimbus2024
• Certificate Expiry Range: Jan 01 2024 00:00:00Z inclusive to Jan 01 2025 00:00:00Z exclusive

DigiCert Nessie2024 Log

• Log ID: c9meiRtMlnigIH1HneayxhzQUV5xGSqMa4AQesF3crU=
• Log URL: https://nessie2024.ct.digicert.com/log/
• Certificate Expiry Range: Jan 01 2024 00:00:00Z inclusive to Jan 01 2025 00:00:00Z exclusive

DigiCert Nessie2025 Log

• Log ID: 5tIxY0B3jMEQQQbXcbnOwdJA9paEhvu6hzId/R43jlA=
• Log URL: https://nessie2025.ct.digicert.com/log/
• Certificate Expiry Range: Jan 01 2025 00:00:00Z inclusive to Jan 01 2025 00:00:00Z exclusive

DigiCert Yeti2024 Log

• Log ID: SLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHM=
• Log URL: https://yeti2024.ct.digicert.com/log/
• Certificate Expiry Range: Jan 01 2024 00:00:00Z inclusive to Jan 01 2025 00:00:00Z exclusive

DigiCert Yeti2025 Log

• Log ID: fVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowuebg=
• Log URL: https://yeti2025.ct.digicert.com/log/
• Certificate Expiry Range: Jan 01 2025 00:00:00Z inclusive to Jan 01 2026 00:00:00Z exclusive

Google Argon2024

• Log ID: 7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZs=
• Log URL: https://ct.googleapis.com/logs/us1/argon2024/
• Certificate Expiry Range: Jan 01 2024 00:00:00Z inclusive to Jan 01 2025 00:00:00Z exclusive

Google Xenon2024

• Log ID: dv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQ=
• Log URL: https://ct.googleapis.com/logs/eu1/xenon2024/
• Certificate Expiry Range: Jan 01 2024 00:00:00Z inclusive to Jan 01 2025 00:00:00Z exclusive

Let’s Encrypt Oak 2024H1

• Log ID: O1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61Bc=
• Log URL: https://oak.ct.letsencrypt.org/2024h1
• Certificate Expiry Range: Dec 20 2023 00:00:00Z inclusive to Jul 20 2024 00:00:00Z exclusive

Let’s Encrypt Oak 2024H2

• Log ID: PxdLT9ciR1iUHWUchL4NEu2QN38fhWrrwb8ohez4ZG4=
• Log URL: https://oak.ct.letsencrypt.org/2024h2
• Certificate Expiry Range: Jun 20 2024 00:00:00Z inclusive to Jan 20 2025 00:00:00Z exclusive

Apple's current log list is available at https://valid.apple.com/ct/log_list/current_log_list.json.
Our current log list schema is available at https://valid.apple.com/ct/log_list/current_log_list_schema.json.

Details on Apple's log policy are available at https://support.apple.com/en-us/HT205280.
Apple's log program requirements, including definitions for CT log states, are available at https://support.apple.com/en-us/HT209255.
Prior versions of our log list may be found under https://valid.apple.com/ct/log_list/log_list_versions/log_list_v<log list version>.json (e.g. https://valid.apple.com/ct/log_list/log_list_versions/log_list_v142.json).

Thanks!
-Clint

[Clint]

Hello All,

Apple has updated its CT Log List from version 166 to 170. These updates include several logs being Retired.

Retired Logs
The following logs have been transitioned to retired with a timestamp of 2022-09-15T00:00:00Z:

• Google 'Icarus' log (https://ct.googleapis.com/icarus/)
• Google 'Pilot' log (https://ct.googleapis.com/pilot/)
• Google 'Rocketeer' log (https://ct.googleapis.com/rocketeer/)
• Google 'Skydiver' log (https://ct.googleapis.com/skydiver/)

Apple's current log list is available at https://valid.apple.com/ct/log_list/current_log_list.json.
Our current log list schema is available at https://valid.apple.com/ct/log_list/current_log_list_schema.json.

Details on Apple's log policy are available at https://support.apple.com/en-us/HT205280.
Apple's log program requirements, including definitions for CT log states, are available at https://support.apple.com/en-us/HT209255.

Prior versions of our log list may be found under https://valid.apple.com/ct/log_list/log_list_versions/log_list_v<log list version>.json (e.g. https://valid.apple.com/ct/log_list/log_list_versions/log_list_v166.json).

Thanks!
-Clint

[Xiaoming Yang]

I am the operator of TrustAsia's CT Logs, and we are apply to add our TrustAsia Log2024 to the Apple CT Log List.

We had sent a apply email to the Apple CT Log List, but it seems that we have not received any feedback.

We were researched the updates log of the Apple CT Log List in the Google Groups. It seems that our TrustAsia Log2024 missed the last updates.

Thank you for raising your concerns.

[Jaime Hablutzel]

Is https://ct2024.trustasia.com/log2024 going to be included in the Apple's Certificate Transparency log program any time soon? 

It is already included in the Chrome CT Log list for some time now, https://bugs.chromium.org/p/chromium/issues/detail?id=1315126#c19.

[Clint Wilson]

It should be soon, yes.

-Clint