Also worth looking at is Google's Certificate Transparency project [0], [1]. Certificate Transparency makes it possible to detect SSL certificates that hav

Also worth looking at is Google's Certificate Transparency project [0], [1]. Certificate Transparency makes it possible to detect SSL certificates that have been mistakenly issued by a certificate authority or maliciously acquired from an otherwise unimpeachable certificate authority. It also makes it possible to identify certificate authorities that have gone rogue and are maliciously issuing certificates. Certificate Transparency Lookup Tool [2]. [0] https://www.certificate-transparency.org/ https://www.certificate-transparency.org/ [1] https://github.com/google/certificate-transparency https://github.com/google/certificate-transparency [2] https://www.google.com/transparencyreport/https/ct/ https://www.google.com/transparencyreport/https/ct/