4 ms·
crt.sh is useful, but should NOT be treated as an authoritative and all inclusive source of information. They have a massive backlog of certificates not present
by mike_d 4y ago
crt.sh is useful, but should NOT be treated as an authoritative and all inclusive source of information. They have a massive backlog of certificates not present in the database.
For example, do a search for 'google.com' and you'll see they don't have a single Google cert logged post 2020.
- woodruffw 4y agoThanks for pointing that out. I wasn't aware they had a backlog.
- p-e-w 4y ago> crt.sh is useful [...] they don't have a single Google cert logged post 2020 Sounds like they're useless, actually, considering typical certificate validities nowadays.
- nickf 4y agoThere certainly is a backlog of certs being ingested from the logs: https://crt.sh/monitored-logs https://crt.sh/monitored-logs - but as you can see, it's tiny. crt.sh does contain all the certificates the CT logs know about. Google certs are there, just as any other: https://crt.sh/?id=7669606389 https://crt.sh/?id=7669606389
- mike_d 4y agoThat is just log monitoring and not the full ingestion pipeline. The search interface is woefully broken and has been for years.
- aaomidi 4y agoSearch for *.google.com