cs_list_certs: List Certificates

In hrbrmstr/sslsaran: Tools to Work with Certificate Transparency ('CT') Logs and Various 'CT' 'APIs'

Description

Uses the sslmate Cert Spotter API to list all CT logged certificates for a given domain.

Usage

cs_list_certs(domain, expired = FALSE, duplicate = FALSE,
  sslmate_api_key = Sys.getenv("SSLMATE_API_KEY"))

Arguments

domain	Return certificates for the given domain and all sub-domains. Also returns matching wildcard certificates. Must be at or below a registered domain.
expired	Include expired certificates? For TRUE you'll need an sslmate API key passed in to the function or stored in the SSLMATE_API_KEY environment variable. Default: FALSE. When false, only the most recent (pre-)certificate is returned for any given tbsCertificate. Default: FALSE.
duplicate	Include duplicate certificates?
sslmate_api_key	(optional). See expired and Note.

Value

data frame (tibble) with columns:

• type: (character) cert or precert

• dns_names: (list) DNS identifiers, from both the Subject CN and the DNS SANs

• sha256: (character) The hex-encoded SHA-256 digest of the raw X.509 (pre-)certificate

• pubkey_sha256: (character) The hex-encoded SHA-256 digest of the Subject Public Key Info

• issuer: (character) The distinguished name of the certificate's issuer

• not_before: (character) The not before date, in RFC3339 format (e.g. 2016-06-16T00:00:00-00:00)

• not_after: (character) The not after date, in RFC3339 format (e.g. 2016-06-16T00:00:00-00:00)

• logs: (list) A list of Certificate Transparency logs containing this (pre-)certificate

• data: (character) The raw X.509 (pre-)certificate, encoded in base64

Note

Unauthenticated access to the API may be subject to rate limits.

hrbrmstr/sslsaran documentation built on May 28, 2019, 12:59 p.m.