certificate-transparency

1–30 of 1297

This group is for the discussion of Certificate Transparency and its implementation.

http://www.certificate-transparency.org/

http://tools.ietf.org/wg/trans/

https://github.com/google/certificate-transparency/

New members are moderated to avoid spam, so expect a delay before your first message appears.

0 selected

Faruk YILDIRIM, … Aleksandr Avezbakiyev3

Jan 10

SSL Certificate Generation

On Thu, Jan 6, 2022, 8:54 AM Park David <david.min.jun7@gmail.com> wrote my mobile isn't

unread,

SSL Certificate Generation

On Thu, Jan 6, 2022, 8:54 AM Park David <david.min.jun7@gmail.com> wrote my mobile isn't

Jan 10

Jeremy Rowley

Jan 4

Nessie and Yeti 2020 and 2021 shards

With it being 2022 now, I'd like to decommission the 2020 and 2021 shards for our CT logs. I was

unread,

Nessie and Yeti 2020 and 2021 shards

With it being 2022 now, I'd like to decommission the 2020 and 2021 shards for our CT logs. I was

Jan 4

Jeremy Rowley, Clint Wilson2

12/3/21

CT1 Shutdown

No objections here, Jeremy. Thank you! -Clint On Dec 2, 2021, at 10:33 AM, Jeremy Rowley <

unread,

CT1 Shutdown

No objections here, Jeremy. Thank you! -Clint On Dec 2, 2021, at 10:33 AM, Jeremy Rowley <

12/3/21

Tal Strauss, frank jump2

11/16/21

Missing reports

im not sure where are you implemented there On Monday, November 15, 2021 at 1:32:54 AM UTC-6 tal...@

unread,

Missing reports

im not sure where are you implemented there On Monday, November 15, 2021 at 1:32:54 AM UTC-6 tal...@

11/16/21

Scott Gregory, … Pavel Kalinnikov3

10/11/21

Need help to understand why certificates with an old SCT appear in latest logs

Hi Scott, Logs are sharded by NotAfter rather than NotBefore. There can be a certificate issued a few

unread,

Need help to understand why certificates with an old SCT appear in latest logs

Hi Scott, Logs are sharded by NotAfter rather than NotBefore. There can be a certificate issued a few

10/11/21

Syed Farhan, Rob Stradling2

10/7/21

CT certs with invalid roots

Hi Farhan. This issue was discussed in this thread: https://groups.google.com/a/chromium.org/g/ct-

unread,

CT certs with invalid roots

Hi Farhan. This issue was discussed in this thread: https://groups.google.com/a/chromium.org/g/ct-

10/7/21

Jens Friess

8/19/21

Adding Official CT Monitor

Hi all, I am currently in the process of setting up a third-party CT monitor and would like to have

unread,

Adding Official CT Monitor

Hi all, I am currently in the process of setting up a third-party CT monitor and would like to have

8/19/21

Nate, Pavel Kalinnikov3

8/7/21

Effective download of certificate transparency logs for research purposes

Thank you Pavel for the reply. 1. We have special interest in all the certificates that were issued (

unread,

Effective download of certificate transparency logs for research purposes

Thank you Pavel for the reply. 1. We have special interest in all the certificates that were issued (

8/7/21

Imre Jonk, Pierre Phaneuf3

7/1/21

DigiCert yeti2022 misbehaving?

On Thu, 2021-07-01 at 10:13 +0100, 'Pierre Phaneuf' via certificate- transparency wrote: >

unread,

DigiCert yeti2022 misbehaving?

On Thu, 2021-07-01 at 10:13 +0100, 'Pierre Phaneuf' via certificate- transparency wrote: >

7/1/21

Jens Friess, … Al Cutter5

6/30/21

CT Usage Statistics

On Wed, Jun 30, 2021 at 10:16 AM Elnaz J <elnaz.jafarian@gmail.com> wrote: HI, Actually, I am

unread,

CT Usage Statistics

On Wed, Jun 30, 2021 at 10:16 AM Elnaz J <elnaz.jafarian@gmail.com> wrote: HI, Actually, I am

6/30/21

Jerry Hou, Paul Mattei4

6/3/21

How do I add to the list of available logs

Great, thanks Jerry! Now merged, great to have you on the site! ☺ All the best, Paul On Wed, Jun 2,

unread,

How do I add to the list of available logs

Great, thanks Jerry! Now merged, great to have you on the site! ☺ All the best, Paul On Wed, Jun 2,

6/3/21

Fengchen Gong, … Al Cutter6

5/13/21

Getting an SCT from internal CA and CT Log

Hi, I want to ask about embedding SCT into certificate. From what I saw, ct can handle that. I wonder

unread,

Getting an SCT from internal CA and CT Log

Hi, I want to ask about embedding SCT into certificate. From what I saw, ct can handle that. I wonder

5/13/21

程广深

4/30/21

How to embed SCT into the final certificate?

here is the sct i got from log server and i find the object name corresponding to OID 1.3.6.1.4.1.

unread,

How to embed SCT into the final certificate?

here is the sct i got from log server and i find the object name corresponding to OID 1.3.6.1.4.1.

4/30/21

Steel, John, Safaa Gemo3

3/31/21

Re: Is it required to submit certificate (NOT precertficate) to CT log server?

في الأربعاء، ٣١ آذار، ٢٠٢١ ٩:٢٧ م 'Steel, John' via certificate-transparency <certificate-

unread,

Re: Is it required to submit certificate (NOT precertficate) to CT log server?

في الأربعاء، ٣١ آذار، ٢٠٢١ ٩:٢٧ م 'Steel, John' via certificate-transparency <certificate-

3/31/21

Yi Shen, Mohammadamin Karbasforushan (Amin Karbas)5

3/31/21

Questions about log consistency

Hi Amin, The doc you've provided seems useful. 😊Thanks. Also find another aticle, talking about

unread,

Questions about log consistency

Hi Amin, The doc you've provided seems useful. 😊Thanks. Also find another aticle, talking about

3/31/21

Chris Hartwig, Rob Stradling2

3/30/21

Cert is only in Submariner, yet it's accepted by Chrome

Hi Chris. If a precertificate is logged, then the corresponding certificate does not need to be

unread,

Cert is only in Submariner, yet it's accepted by Chrome

Hi Chris. If a precertificate is logged, then the corresponding certificate does not need to be

3/30/21

Sylvia Stuurman

3/17/21

Strange extra certificate for my domain

When I check the certificate for my domain, neurodiverserelaties.nl through Mozilla Observatory, I

unread,

Strange extra certificate for my domain

When I check the certificate for my domain, neurodiverserelaties.nl through Mozilla Observatory, I

3/17/21

Nathanna from Squarecert, … Kat Joyce8

11/17/20

Root Inclusion Questions

Hi Nathanna, The Google Argon and Xenon Logs are qualified and usable in Google Chrome, yes. Kind

unread,

Root Inclusion Questions

Hi Nathanna, The Google Argon and Xenon Logs are qualified and usable in Google Chrome, yes. Kind

11/17/20

Prasad Katre

11/10/20

Moving new HTTPLog client from old archived project.

Hi All, I was using below Java project(org.certificate-transparency:ctlog:0.1.3-SNAPSHOT) for

unread,

Moving new HTTPLog client from old archived project.

Hi All, I was using below Java project(org.certificate-transparency:ctlog:0.1.3-SNAPSHOT) for

11/10/20

Kat Joyce

11/5/20

Incident report for excess 429 responses from the Google Logs in October

Hi everyone, Please find below our incident report for the higher-than-usual number of 429 responses

unread,

Incident report for excess 429 responses from the Google Logs in October

Hi everyone, Please find below our incident report for the higher-than-usual number of 429 responses

11/5/20

Xanti Lopeia

10/26/20

Search with wildcards

Hi For some research that I am doing, I want to do some queries using wildcards. But unfortunately

unread,

Search with wildcards

Hi For some research that I am doing, I want to do some queries using wildcards. But unfortunately

10/26/20

glovescoffee, … Pierre Phaneuf6

10/21/20

certificate transparency logs - limited range per API call

Hi, Al's approach is good, essentially, you have to adapt to the operator sending shorter batches

unread,

certificate transparency logs - limited range per API call

Hi, Al's approach is good, essentially, you have to adapt to the operator sending shorter batches

10/21/20

chandra prakash Dadheech

9/25/20

Stuck to parse leafdata and extradata in .net

I am trying to get CT logs but just stuck on the point to parse leafdata and extradata. Can anyone

unread,

Stuck to parse leafdata and extradata in .net

I am trying to get CT logs but just stuck on the point to parse leafdata and extradata. Can anyone

9/25/20

zagadeesh, Al Cutter4

9/2/20

is pilot/ct still managed?

Dear Al, You are correct, https://ct.googleapis.com/pilot/ct/v1/get-roots giving only those 4 roots.

unread,

is pilot/ct still managed?

Dear Al, You are correct, https://ct.googleapis.com/pilot/ct/v1/get-roots giving only those 4 roots.

9/2/20

Pranay Raut, … Kurt Roeckx5

7/9/20

Verify revoked certificate in CT

Understood. I do have one more query. I'm not sure if that will be relevant for this thread. Does

unread,

Verify revoked certificate in CT

Understood. I do have one more query. I'm not sure if that will be relevant for this thread. Does

7/9/20

Pranay Raut

7/9/20

Verify revoked certificate in CT

Hi, I'm trying to incorporate a CT into one of my Android project. I'm having trouble

unread,

Verify revoked certificate in CT

Hi, I'm trying to incorporate a CT into one of my Android project. I'm having trouble

7/9/20

Kat Joyce

6/18/20

New log_list.zip file on gstatic

Hi everyone, In the last couple of months, it has been brought to our attention that some users of

unread,

New log_list.zip file on gstatic

Hi everyone, In the last couple of months, it has been brought to our attention that some users of

6/18/20

Aaron Watson

6/18/20

dotnet api for validating SCT?

I have found Java and Python libraries for validating SCT's. Does anyone know of a library for

unread,

dotnet api for validating SCT?

I have found Java and Python libraries for validating SCT's. Does anyone know of a library for

6/18/20

Ray Zheng, Pierre Phaneuf2

6/3/20

Q&A

where to find client_pb2 from certificate-transparency

Hi, This is a generated file, running "make" in the python/ subdirectory should hopefully

unread,

Q&A

where to find client_pb2 from certificate-transparency

Hi, This is a generated file, running "make" in the python/ subdirectory should hopefully

6/3/20

SriRamji Kathiravan, … Matt Dolan8

6/2/20

https://www.gstatic.com/ct/log_list/log_list.json stopped working

The documentation on the format of the v1 schema was somewhat lacking, and indeed the original schema

unread,

https://www.gstatic.com/ct/log_list/log_list.json stopped working

The documentation on the format of the v1 schema was somewhat lacking, and indeed the original schema

6/2/20