Pricing

from $0.80 / 1,000 record scrapeds

Try for free

Go to Apify Store

Certificate Transparency Log Firehose

Try for free

Streams newly-issued certificates from public CT logs (Google, Cloudflare, DigiCert, Sectigo, TrustAsia) with a keyword/pattern watch-list match — delta-since-last-run, not a one-domain lookup.

Pricing

from $0.80 / 1,000 record scrapeds

Rating

0.0

(0)

Developer

BowTiedRaccoon

Actor stats

Bookmarked

Total users

Monthly active users

12 days ago

Last modified

Categories

Developer tools

Automation

Log Url

log_url

Optional

Base URL of the CT log this certificate was read from

Type:string | null

Leaf Index

leaf_index

Optional

Index of this entry in the log's Merkle tree

Type:integer | null

Cert Sha256

cert_sha256

Optional

SHA-256 fingerprint of the certificate DER

Type:string | null

Serial Number

serial_number

Optional

Certificate serial number

Type:string | null

Common Name

common_name

Optional

Subject Common Name (CN), if present

Type:string | null

Subject Alt Names

subject_alt_names

Optional

All dNSName Subject Alternative Names — the newly-observed-subdomain surface

Type:string[] | null

Matched Pattern

matched_pattern

Optional

Which watch-list term/pattern matched

Type:string | null

Issuer Cn

issuer_cn

Optional

Issuing CA's Common Name

Type:string | null

Issuer Org

issuer_org

Optional

Issuing CA's Organization

Type:string | null

Not Before

not_before

Optional

Certificate validity start (ISO 8601)

Type:string | null

Not After

not_after

Optional

Certificate validity end (ISO 8601)

Type:string | null

Is Precert

is_precert

Optional

True if this entry is a precertificate (entry_type=1) rather than a final leaf cert

Type:boolean | null

Is Wildcard

is_wildcard

Optional

True if the CN or any SAN is a wildcard (*.example.com)

Type:boolean | null

Entry Timestamp

entry_timestamp

Optional

CT log's own MerkleTreeLeaf timestamp (ISO 8601) — when the log accepted this entry

Type:string | null

First Seen At

first_seen_at

Optional

When this actor first observed the entry (ISO 8601) — the delta anchor

Type:string | null

Typosquat Flag

typosquat_flag

Optional

True if a SAN/CN fuzzy-matched (Levenshtein <=2, or substring) against the typosquatBrands watch-list

Type:boolean | null

Scraped At

scraped_at

Optional

When this record was scraped (ISO 8601)

Type:string | null

Google Ads Advertiser Tracker · Top 10 + CPC

doesaiknow/google-ads-transparency-intel

Find who advertises on your keywords in Google Ads. One row per keyword: up to 10 advertisers plus 10 ad domains, the creatives they run with first and last shown dates, CPC and search volume, and a diff of who entered or left since your last run.

David S

SSL Certificate Transparency Scraper (crt.sh)

chrisp1211/certificate-search-scraper-max

Scrape SSL/TLS certificate transparency logs from crt.sh for any domain. Great for security audits and subdomain discovery. Returns common name, subdomains (SANs), issuer and validity. Pay per certificate; empty runs free.

Christian Pichichero

SSL Certificate Checker & Expiry Monitor

fit_melon/ssl-certificate-checker

Check SSL/TLS certificates for a list of domains: expiry date, days remaining, issuer, SAN, TLS version, chain trust. Flags expired and soon-to-expire certs — ideal as a scheduled expiry monitor. Free.

D N

Certificate Transparency Subdomain Scraper

devilscrapes/crt-sh-certificate-transparency-scraper

Enumerate subdomains and audit certificate hygiene via crt.sh's public Certificate Transparency log — no API key. Get one row per certificate or unique subdomain with computed expiry, wildcard, and freshness signals, capped so a popular domain never blows your bill.

DevilScrapes

Domain Attack Surface & Subdomain Scanner

cypherstone/domain-attack-surface-scanner

Find a domain's subdomains from Certificate Transparency logs, resolve each to its IP, and check the live SSL certificate (issuer, expiry, days left). Open-source recon, no API key.

Jeff Ralston

TLS Certificate Expiry Checker | HTTPS Renewal Audit

sbio-apps/tls-certificate-expiry-checker

Check verified HTTPS certificates for supplied hosts and export expiry dates, days remaining, issuer, subject, SHA-256 fingerprint and negotiated TLS version. Flag certificates within your renewal window for scheduled domain maintenance.

Austin Aryain

Google Ads Transparency Center Scraper - Competitor Ads

orbots/google-ads-transparency-scraper

Every ad an advertiser runs on Google Search, YouTube, Display, Shopping and Maps, from the Ads Transparency Center: previews, format, first and last shown dates, days active, per-country activity. Search by brand, domain or advertiser ID. No login. From $0.005/run + $0.0015/ad.

Orbots

WhoisDS Newly Registered Domain Feed + Enrichment

jungle_synthesizer/whoisds-newly-registered-domain-feed-scraper

Daily delta of newly registered domains from the whoisds.com free NRD feed, enriched with DNS (A/MX/NS), Certificate Transparency presence, IDN punycode decoding, and keyword/typosquat matching against a brand watch-list. Fully passive.

BowTiedRaccoon

TCPA Consent Certificate API - Lead Verification Data

nabeelbaghoor/lead-consent-certificate-api

Check the consent certificate behind a lead before you call it. Confirms the lead's email and phone match the certificate, reads the consent language, scans the page text, and returns session metadata: page URL, IP geolocation, browser, OS, time on page and bot detection.

Nabeel Hassan

Wikimedia Commons Admin Logs Scraper

parseforge/wikimedia-commons-admin-logs-scraper

Scrapes Wikimedia Commons admin log events by deletion, block, or user rights type. Returns each event as a flat row with admin username, action, target, timestamp, and comment. Export to CSV, JSON, Excel, or XML.