How to Access and Monitor Let’s Encrypt CT Logs

Hi everyone,

I’m interested in working directly with Let’s Encrypt’s Certificate Transparency (CT) logs. I’ve seen that logs like Sycamore and Willow are available, but I’m unsure how to:

  1. Access the submitted certificates from these CT logs.
  2. Properly monitor them for new certificate issuance in real time.
  3. Parse the Sunlight log tiles and extract certificates or domain names.

I’m aware that older RFC 6962 endpoints like /ct/v1/get-entries no longer work, and that Sunlight logs use a tile-based structure with checkpoints .

Could anyone provide guidance, documentation, or example tools/scripts for:

  • Accessing the logs programmatically.
  • Monitoring new certificates efficiently.
  • Extracting certificates or domains from Let’s Encrypt CT logs.

Any pointers, best practices, or references would be greatly appreciated!

Thanks in advance.

guess this will work?

4 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.