# Certificate transparency logs

**URL:** <https://community.letsencrypt.org/t/certificate-transparency-logs/187399>\
**Category:** Help\
**Created:** [November 7, 2022, 8:06am UTC](https://community.letsencrypt.org/t/certificate-transparency-logs/187399 "2022-11-07T08:06:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dark1](https://avatars.discourse-cdn.com/v4/letter/d/ea5d25/32.png) [@dark1](https://community.letsencrypt.org/u/dark1)\
**Post date:** [November 7, 2022, 8:06am UTC](https://community.letsencrypt.org/t/certificate-transparency-logs/187399/1 "2022-11-07T08:06:15Z")

</div>

hello I need to certificate transparency log monitoring, but I don't know how to get the log files.

---

<div class="post-metadata">

**Author:** ![petercooperjr](https://sea3.discourse-cdn.com/letsencrypt/user_avatar/community.letsencrypt.org/petercooperjr/32/84698_2.png) [@petercooperjr](https://community.letsencrypt.org/u/petercooperjr)\
**Post date:** [November 7, 2022, 3:10pm UTC](https://community.letsencrypt.org/t/certificate-transparency-logs/187399/2 "2022-11-07T15:10:56Z")

</div>

That's a really broad kind of question. There's a summary of information about Certificate Transparency in the Let's Encrypt documentation, though it focuses on the logs that the Let's Encrypt organization runs:

> **[Certificate Transparency (CT) Logs - Let's Encrypt](https://letsencrypt.org/docs/ct-logs/)**
>
> Certificate Transparency (CT)is a system for logging and monitoring the issuance of TLS certificates. CT greatly enhances everyone's ability to monitor and study certificate issuance, and these capabilities have led to numerous improvements to the CA...

And there's a web site with information about Certificate Transparency in general:

> **[Certificate Transparency : Certificate Transparency](https://certificate.transparency.dev)**
>
> Certificate Transparency

The actual mechanics of "looking" at the logs is a bit more complicated than what you might be expecting, though, as they're put together in a fancy cryptographic way to ensure that they aren't tampered with and that the logs are upholding their promises to include all certificates submitted to them. While it's possible to query the various logs oneself, there's a _lot_ of data there and most end-users would take advantage of a "log aggregator" type service that gets the information from all the logs and presents it in an easier-to-search format so that one can look at, say, just the certificates for one's own domain across the various public logs. Here are the popular services that I know of:

- [crt.sh by Sectigo](https://crt.sh/)
- [Censys Certificates](https://censys.io/certificates)
- [Facebook Transparency Monitoring](https://developers.facebook.com/tools/ct/) (needs a Facebook account)
- [Certstream](https://certstream.calidog.io/)
- [Entrust Certificate Search](https://ui.ctsearch.entrust.com/ui/ctsearchui)

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/letsencrypt/original/3X/c/a/ca6c06ea1ea201324bba7048c6841ce60236468d.png) [@system](https://community.letsencrypt.org/u/system)\
**Post date:** [December 7, 2022, 3:11pm UTC](https://community.letsencrypt.org/t/certificate-transparency-logs/187399/3 "2022-12-07T15:11:04Z")

</div>

Closed on December 7, 2022, 3:11pm UTC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.