CT logs for staging

Client dev
1

Is there a list of CT logs that might be used by the staging environment? I've been getting back some log ids that I can't find any references to on the internet. For example, I issued 3 certificates in a row on the staging environment and they contained SCTs from the following logs:

Cert 1:
28:76:1A:18:90:27:FB:EF:3C:D0:D6:1A:01:8D:76:B0:50:57:29:C7:A7:41:1B:CC:BD:F6:04:F4:5D:42:61:53 KHYaGJAn++880NYaAY12sFBXKcenQRvMvfYE9F1CYVM= ???
B0:CC:83:E5:A5:F9:7D:6B:AF:7C:09:CC:28:49:04:87:2A:C7:E8:8B:13:2C:63:50:B7:C6:FD:26:E1:6C:6C:77 sMyD5aX5fWuvfAnMKEkEhyrH6IsTLGNQt8b9JuFsbHc= Google 'Testtube' log

Cert 2:
DD:99:34:FC:A5:E7:24:80:C9:56:68:7D:81:34:99:08:49:B2:49:F7:B5:69:D8:C7:BC:AB:3F:5C:C1:F3:6E:64 3Zk0/KXnJIDJVmh9gTSZCEmySfe1adjHvKs/XMHzbmQ= ???
D8:A2:62:96:22:52:04:CD:B5:F3:53:49:58:2E:4E:D6:65:A2:45:1B:0F:27:A8:B6:89:61:36:B3:B9:FC:07:08 2KJiliJSBM2181NJWC5O1mWiRRsPJ6i2iWE2s7n8Bwg= ???

Cert 3:
E4:FB:77:4A:21:24:C5:86:40:B1:83:2F:50:AB:FA:DC:84:A3:8A:ED:71:91:EE:B6:69:22:37:92:CB:F6:28:91 5Pt3SiEkxYZAsYMvUKv63ISjiu1xke62aSI3ksv2KJE= ???
C0:5D:20:54:38:5C:B2:CF:B2:17:92:0D:2F:0D:C7:83:52:61:47:B1:AA:4F:EF:97:CA:78:E1:F0:BB:84:FC:ED wF0gVDhcss+yF5INLw3Hg1JhR7GqT++Xynjh8LuE/O0= Let's Encrypt Twig2025h2b
1 Like
2

Check out Certificate Transparency (CT) Logs - Let's Encrypt. (From half way down.)

Otherwise you could perhaps check the Boulder source code, although it might be (probably) a configuration parameter which is not in the code.

Found a better "source":

2 Likes
3

Let's Encrypt uses several CT logs for staging, including some which are purely test infrastructure (ct-test-srv from Boulder) and are not actual logs.

For logs that are publicly available, we use:

  • Twig, our Sunlight log
  • Rome and Navigli, from Geomys
  • Cloudflare's cftest instances
  • Google's Testtube

The ones you're missing are Navigli, ct-test-srv, and cftest

The ct-test-srv instances currently have log IDs:

KHYaGJAn++880NYaAY12sFBXKcenQRvMvfYE9F1CYVM=
3Zk0/KXnJIDJVmh9gTSZCEmySfe1adjHvKs/XMHzbmQ=
NvR3OcSRDDWwwb0Hg+t9aKCpL3+tDuk99WrHkTwabYo=

For the Navigli log, info see:

For cftest:

7 Likes
4

I guess the staging environment page could be updated :slight_smile:

3 Likes