What is Certificate Transparency?

Under Certificate Transparency(CT), a Certificate Authority will have to publish all SSL/TLS they issue in a public logs.  



Anyone can look through the CT logs and find certificate issued for a domain.

Website : http://www.certificate-transparency.org/known-logs



You can enter an Identity Domain name, Organization name etc..

Website : https://crt.sh
https://udemy-images.s3.amazonaws.com/redactor/raw/2020-08-07_21-50-47-853053b6d896f6100395ae3d067e3a7e.png?width=1920

Certificate Transparency crt.sh Automation : Bash Script to parse the results and save output in a file. 

https://udemy-images.s3.amazonaws.com/redactor/raw/2020-08-07_21-59-36-f97a691884304e22131623a322e286e6.png?width=1920


Shodan Subdomain Enumeration : shodan.io aggregates data collected as a part of scans project shodan.io aggregates  SSL/TLS certificate and let us search through them. Thus, it potentially helps us to discover a new subdomain.

https://udemy-images.s3.amazonaws.com/redactor/raw/2020-08-09_17-36-09-500442de0b4bd93eabb9a66167e6356d.png?width=1920