Data
Microproduct Data GuideBeginner

Certificate Transparency Search

Issued TLS certificates indexed from public CT logs for building domain certificate monitors and issuance alerts.

Start the Guide Open Official Source Open in Colab
Report a Problem

At a Glance

Difficulty
Beginner — comfortable for a first prototype
Size
Tiny · ≤0.05 GB
Formats
JSON
Access
API
API Key
Not Required
Provider
Sectigo crt.sh
Updates
Continuous
Last Verified
Aug 18, 2026
Source Type
Company Source
Data Terms
Certificate Transparency log public data / crt.sh use
  • Python Syntax Checked
  • Runnable Notebook

From Source to Product Signal

Test a Product Idea in Four Steps

crt.sh queries public Certificate Transparency logs. Start with one registered domain and a JSON search. CT logs are the origin; crt.sh is the query surface. Logs can lag, expired certificates remain, and this is not a complete inventory of every private PKI.

1

Check the Setup

  • Python 3.10 or newer
  • A notebook environment such as Jupyter or Google Colab
  • A domain you are authorized to inspect
2

Access the Data

  1. 1.Open crt.sh and try one Identity search in the browser.
  2. 2.Request JSON for that domain with output=json.
  3. 3.Keep issuer name, common name, and not-after date.
Open Official Source
3

Run the Python Example

Install the packages, then run the notebook cell.

python -m pip install pandas requests

import pandas as pd
import requests

response = requests.get(
    "https://crt.sh/",
    params={"q": "example.com", "output": "json"},
    timeout=60,
)
response.raise_for_status()
certificates = pd.DataFrame(response.json())
certificates["retrieved_at_utc"] = pd.Timestamp.now(tz="UTC")
print(certificates[["issuer_name", "common_name", "not_after"]].head())
4

Test a Useful Signal

List Certificates for One Domain

Test whether a CT search can power a bounded issuance monitor.

  1. 01Deduplicate certificate ids and keep issuer, common name, and expiry.
  2. 02Flag certificates whose not-after date is in the past.
  3. 03Explain that CT coverage depends on participating logs and is not a private-PKI inventory.

Related Datasets

Dataset Details

Sectigo crt.sh is a company source. Last verified 2026-08-18. Temporal coverage: certificates submitted to participating CT logs.

Geography

Global

Formats

JSON

Provider

Sectigo crt.sh

Data Terms

Certificate Transparency log public data / crt.sh use

Send Feedback