analyzing-tls-certificate-transparency-logs

What problem does it solve?

Certificate Transparency (CT) logs are a primary source for tracking valid certificates issued for domains. This Skill queries crt.sh and the pycrtsh library to help detect phishing domains, unauthorized certificate issuance, and shadow IT across an organization's assets.

Core Features & Use Cases

• Query CT logs to identify typosquatting and suspicious domains related to a target brand.
• Detect certificates issued by unauthorized Certificate Authorities and wildcard certs.
• Support incident response, threat hunting, and security monitoring across multiple domains.

Quick Start

Run the TLS CT analysis agent against your target domain to generate a findings report.