{"id":48858056,"url":"https://github.com/elektro-wolle/check-certs","last_synced_at":"2026-04-15T13:43:54.184Z","repository":{"id":204978242,"uuid":"713105431","full_name":"elektro-wolle/check-certs","owner":"elektro-wolle","description":"Simple checker for new certificates for a given set of domain-names","archived":false,"fork":false,"pushed_at":"2023-11-10T15:35:37.000Z","size":7,"stargazers_count":4,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"main","last_synced_at":"2024-01-31T19:51:00.974Z","etag":null,"topics":["monitoring","security","tls-certificate"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/elektro-wolle.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null}},"created_at":"2023-11-01T21:07:21.000Z","updated_at":"2023-11-08T17:11:26.000Z","dependencies_parsed_at":null,"dependency_job_id":"13721a80-3bcb-4efc-9aec-1bde6966e851","html_url":"https://github.com/elektro-wolle/check-certs","commit_stats":{"total_commits":4,"total_committers":2,"mean_commits":2.0,"dds":0.25,"last_synced_commit":"7081c9c3bb004efda80e7aebe4ab4f55b5d15144"},"previous_names":["elektro-wolle/check-certs"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/elektro-wolle/check-certs","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elektro-wolle%2Fcheck-certs","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elektro-wolle%2Fcheck-certs/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elektro-wolle%2Fcheck-certs/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elektro-wolle%2Fcheck-certs/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/elektro-wolle","download_url":"https://codeload.github.com/elektro-wolle/check-certs/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elektro-wolle%2Fcheck-certs/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31844089,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-15T13:28:40.153Z","status":"ssl_error","status_checked_at":"2026-04-15T13:28:29.396Z","response_time":63,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["monitoring","security","tls-certificate"],"created_at":"2026-04-15T13:43:53.533Z","updated_at":"2026-04-15T13:43:54.173Z","avatar_url":"https://github.com/elektro-wolle.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# check-certs\n\nAfter the encrypted traffic interception on https://notes.valdikss.org.ru/jabber.ru-mitm/,\nI decided to write a script to check if any certificates appear in the \ncertificate transparency logs for the domains I'm hosting aka where I knew, when the certificates were issued.\n\n## Usage\n\nPython3 is needed to run the script.\nThe additional dependencies are listed in `requirements.txt` and can be installed with `pip3 install -r requirements.txt`.\n\n```\n$ ./check-certs.py domain1.com domain2.com\n```\n\nFor ease of use, you should add this script to your crontab:\n\n```\n0 0 * * * /path/to/check-certs.py domain1.com domain2.com\n```\n\nYou'll get a mail with all certificate details if any new certificates appear in the CT-logs.\n\n## How it works\n\nThe script uses the [crt.sh](https://crt.sh) API to get all certificates for the given domains.\nThen it downloads the certificates and stores the new ones in a local database.\nIf a new certificate appears, you'll get a mail with all certificate details.\n\n## References\n\n* https://blog.germancoding.com/2020/03/31/monitoring-certificate-issuance-with-the-power-of-certificate-transparency/ for the idea to use crt.sh instead of the official CT-logs.\n* https://github.com/drfabiocastro/certwatcher\n* https://github.com/CaliDog/certstream-python\n* https://github.com/SSLMate/certspotter\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Felektro-wolle%2Fcheck-certs","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Felektro-wolle%2Fcheck-certs","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Felektro-wolle%2Fcheck-certs/lists"}