|
| 1 | +--- |
| 2 | +title: Certificate Transparency Insights in Cloudflare Radar |
| 3 | +description: New Certificate Transparency (CT) insights in Cloudflare Radar, with new API endpoints for certificate issuance trends |
| 4 | +products: |
| 5 | + - radar |
| 6 | +date: 2025-08-04 |
| 7 | +--- |
| 8 | + |
| 9 | +[**Radar**](/radar/) now introduces Certificate Transparency (CT) insights, providing visibility into certificate issuance trends based on Certificate Transparency logs currently monitored by Cloudflare. |
| 10 | + |
| 11 | +The following API endpoints are now available: |
| 12 | + |
| 13 | +- [`/api/v1/ct/timeseries`](/api/resources/radar/subresources/ct/methods/timeseries/): Retrieves certificate issuance time series. |
| 14 | +- [`/api/v1/ct/summary/{dimension}`](/api/resources/radar/subresources/ct/methods/summary/): Retrieves certificate distribution by dimension. |
| 15 | +- [`/api/v1/ct/timeseries_groups/{dimension}`](/api/resources/radar/subresources/ct/methods/timeseries_groups/): Retrieves time series of certificate distribution by dimension. |
| 16 | +- [`/api/v1/ct/authorities`](/api/resources/radar/subresources/ct/methods/authorities/): Lists certification authorities. |
| 17 | +- [`/api/v1/ct/authorities/{ca_slug}`](/api/resources/radar/subresources/ct/methods/authorities/): Retrieves details about a certification authority. Certification Authority information is derived from the [Common CA Database (CCADB)](https://www.ccadb.org/). |
| 18 | +- [`/api/v1/ct/logs`](/api/resources/radar/subresources/ct/methods/logs/): Lists CT logs. |
| 19 | +- [`/api/v1/ct/logs/{log_slug}`](/api/resources/radar/subresources/ct/methods/logs/): Retrieves details about a CT log (from Google Chrome log list). CT log information is derived from the [Google Chrome log list](https://googlechrome.github.io/CertificateTransparency/log_lists.html). |
| 20 | + |
| 21 | +For the `summary` and `timeseries_groups` endpoints, the following dimensions are available (and also usable as filters): |
| 22 | + |
| 23 | +- `ca`: Certification Authority (certificate issuer) |
| 24 | +- `ca_owner`: Certification Authority Owner |
| 25 | +- `duration`: Certificate validity duration (between NotBefore and NotAfter dates) |
| 26 | +- `entry_type`: Entry type (certificate vs. pre-certificate) |
| 27 | +- `expiration_status`: Expiration status (valid vs. expired) |
| 28 | +- `has_ips`: Presence of IP addresses |
| 29 | +- `has_wildcards`: Presence of wildcards |
| 30 | +- `log`: CT log |
| 31 | +- `log_api`: CT log API ([RFC6962](https://datatracker.ietf.org/doc/html/rfc6962) vs. [Static](https://c2sp.org/static-ct-api)) |
| 32 | +- `log_operator`: CT log operator |
| 33 | +- `public_key_algorithm`: Public key algorithm |
| 34 | +- `signature_algorithm`: Signature algorithm |
| 35 | +- `tld`: Top-level domain |
| 36 | +- `validation_level`: Validation level |
| 37 | + |
| 38 | +Learn more about the new Certificate Transparency insights in our [blog post](https://blog.cloudflare.com/new-ct-section-on-cloudflare-radar/), and check out the [new Radar page](https://radar.cloudflare.com/certificate-transparency). |
0 commit comments