We want to create a tool / plugin for certbot, that would automatically check a certificate transparency (CT) database and email a summary to contact emails, or even send alerts when the check discovers suspicious certificates.
Would it be of any interest? Or maybe it already exists?
Hi @DanCvrcek,
You might be interested in SSLMate’s “Certspotter” which can do similar CT validation alerts: https://github.com/SSLMate/certspotter
Hmm, thanks Daniel (@cpu), looks like a good starting point! And it seems to have raised some interest as well.
https://github.com/SSLMate/certspotter exists as a web service too:
https://sslmate.com/certspotter/
https://www.digicert.com/certcentral/certificate-monitoring.htm is another web service
I can’t see any API specs for the second. Is there any?
Thanks Tom
@DanCvrcek I’m not aware of an API.
Another web service: https://suricat.io