DIGITALTRUST

Tools / Certificate Transparency lookup

Certificate Transparency lookup

Find every valid certificate issued for your domain and its subdomains in the public Certificate Transparency logs.

What is Certificate Transparency? Every public Certification Authority must record each certificate it issues in public logs that anyone can audit. That is how you discover a forgotten certificate on a subdomain, a supplier that issued without telling you, or an issuance that should never have happened.

Search run against the public Certificate Transparency logs, through Cert Spotter (SSLMate) and, as a fallback, crt.sh. Results are cached for 30 minutes. We only show certificates that are still valid.

By API or with AI assistants. This check is available in the public API (ct/search) and on the MCP server as search_certificate_transparency. 
curl "https://digitaltrust.pt/api/v1/ct/search?domain=company.eu"
API and MCP documentation.
Other tools

More checks, no sign-up.

SSL/TLS checker

Test the certificate, chain and protocols of any server: website, mail server or API.

Certificate decoder

See what is inside a certificate: names, validity, issuer, validation type and fingerprints.

CSR decoder

Check your certificate request before you send it: names, organisation, key and signature.

CSR generator

Create the private key and the CSR in your browser, or copy a ready-made OpenSSL command.

Key matcher

Confirm that a certificate, a CSR and a private key belong together.

SSL converter

Tell us where the certificate is going (Plesk, nginx, Windows, HAProxy, Java) and get the right files. PEM, DER, P7B and PFX, without the key leaving your computer.

CAA checker

See which Certification Authorities may issue for your domain, before you order.

Email security check

Check SPF, DKIM, DMARC, BIMI, MTA-STS and TLS-RPT for your domain in one test.
CallOrder SSL