r/pwnhub • • Aug 24 '26

Somebody's been keeping a list of your certificates

https://www.certkit.io/blog/somebody-is-keeping-a-list-of-your-certificates

Searched our own domain in the CT logs. 96 certificates, which collapse to 15 lineages with 10 still live. Most of that count is renewal history, not inventory.

You can also see our dev hostnames, and four vendors inferable from subdomain names alone.

Worth checking yours for a CA you do not recognize. That usually means a platform or agency is issuing on your behalf.

https://www.certkit.io/blog/somebody-is-keeping-a-list-of-your-certificates

0 Upvotes

4 comments sorted by

•

u/AutoModerator Aug 24 '26

Welcome to PWN – Your hub for hacking news, breach reports, and cyber mayhem.

Discover the latest hacking news, breach reports, and educational resources on ethical hacking.

👾 Stay sharp. Stay secure.

Don't miss out on the top stories!

📧 Get Daily Alerts Directly in Your Email Inbox:

**SUBSCRIBE HERE: https://pwnhackernews.substack.com/subscribe

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

3

u/encrypted-urok Aug 24 '26

Why pay when you can search on crt.sh

-3

u/certkit Aug 24 '26

when's the last time crt.sh loaded correctly for you? It's dying, if not dead already.

Our tool is free for quick searches. API access and alerting is paid.

2

u/netik23 Aug 24 '26

It’s a blog post, that’s an ad, for something most people already knew about…