howto build a monitor?

[Juergen Schmidt]

Hi 

I did some research but I could not find any documentation on how to do monitoring. 

I am not a CA, just one of the "brand owners" mentioned in the description of CT. And I'd like to check, who has been issuing certificates on my domains. So can you give me some pointers, how to do that? Are there tools, so I can do it right now?
Or do I have to rely on the services of Goolge and other CAs?

thanks in advance, ju

[Adam Eijdenberg]

Hi Juergen,

While it is possible to build your own monitor that pulls directly from CT logs another good option is to use a monitor that someone else has built to search for certificates for your domains.

Here are some options that are already out there:

https://crt.sh/

https://www.digicert.com/certificate-monitoring/

https://api.ctwatch.net/domain/ct.de (substitute your domain name in the URL)

If you do wish to build your own there are some open source frameworks that may help:

https://github.com/crtsh

https://github.com/tobermorytech/certificate-transparency-monitor

https://github.com/google/certificate-transparency

I hope that gives some good pointers to get started.

Cheers, Adam

--
You received this message because you are subscribed to the Google Groups "certificate-transparency" group.
To unsubscribe from this group and stop receiving emails from it, send an email to certificate-transp...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.