Automatic checks against certificate transparency

[DanCvrcek]

We want to create a tool / plugin for certbot, that would automatically check a certificate transparency (CT) database and email a summary to contact emails, or even send alerts when the check discovers suspicious certificates.

Would it be of any interest? Or maybe it already exists?

[cpu]

Hi @DanCvrcek,

You might be interested in SSLMate’s “Certspotter” which can do similar CT validation alerts: https://github.com/SSLMate/certspotter

[DanCvrcek]

Hmm, thanks Daniel (@cpu), looks like a good starting point! And it seems to have raised some interest as well.

[tdelmas]

• https://github.com/SSLMate/certspotter exists as a web service too:
  https://sslmate.com/certspotter/

• https://www.digicert.com/certcentral/certificate-monitoring.htm is another web service

[DanCvrcek]

I can’t see any API specs for the second. Is there any?

Thanks Tom

[tdelmas]

@DanCvrcek I’m not aware of an API.

Another web service: https://suricat.io