{ "collectedAt": "2026-10-10", "method": "CAA via Google Public DNS and Cloudflare DNS-over-HTTPS; serving certificate via TLS handshake with SNI; issuer history via CertIndex exact-name lookup, not_before >= 2025-10-10 (lower bound)", "hosts": [ { "domain": "kubernetes.io", "caa": [ "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"" ], "caaCloudflareResolver": [ "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"" ], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YE1", "servingNotBefore": "notBefore=Aug 12 08:23:52 2026 GMT", "servingNotAfter": "notAfter=Nov 10 08:23:51 2026 GMT", "ctIssuersSince2025_10_10": { "Let's Encrypt": 3 } }, { "domain": "github.com", "caa": [ "0 issue \"digicert.com\"", "0 issue \"globalsign.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"sectigo.com\"", "0 issuewild \"digicert.com\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"sectigo.com\"" ], "caaCloudflareResolver": [ "0 issue \"digicert.com\"", "0 issue \"globalsign.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"sectigo.com\"", "0 issuewild \"digicert.com\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"sectigo.com\"" ], "servingIssuer": "issuer=C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA DV E36", "servingNotBefore": "notBefore=Sep 1 00:00:00 2026 GMT", "servingNotAfter": "notAfter=Nov 29 23:59:59 2026 GMT", "ctIssuersSince2025_10_10": { "Sectigo Limited": 17, "?": 2, "Let's Encrypt": 5 } }, { "domain": "gitlab.com", "caa": [ "0 iodef \"mailto:security@gitlab.com\"", "0 issue \"amazon.com\"", "0 issue \"amazonaws.com\"", "0 issue \"amazontrust.com\"", "0 issue \"awstrust.com\"", "0 issue \"comodoca.com\"", "0 issue \"digicert.com; cansignhttpexchanges=yes\"", "0 issue \"globalsign.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issue \"sectigo.com\"", "0 issue \"ssl.com\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"digicert.com; cansignhttpexchanges=yes\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"ssl.com\"" ], "caaCloudflareResolver": [ "0 iodef \"mailto:security@gitlab.com\"", "0 issue \"amazon.com\"", "0 issue \"amazonaws.com\"", "0 issue \"amazontrust.com\"", "0 issue \"awstrust.com\"", "0 issue \"comodoca.com\"", "0 issue \"digicert.com; cansignhttpexchanges=yes\"", "0 issue \"globalsign.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issue \"sectigo.com\"", "0 issue \"ssl.com\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"digicert.com; cansignhttpexchanges=yes\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"ssl.com\"" ], "servingIssuer": "issuer=C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA DV R36", "servingNotBefore": "notBefore=Apr 26 00:00:00 2026 GMT", "servingNotAfter": "notAfter=Nov 10 23:59:59 2026 GMT", "ctIssuersSince2025_10_10": { "Let's Encrypt": 8, "Google Trust Services": 14, "Sectigo Limited": 4 } }, { "domain": "bitbucket.org", "caa": [ "0 iodef \"mailto:root@bitbucket.org\"", "0 issue \"amazon.com\"", "0 issue \"digicert.com\"", "0 issue \"globalsign.com\"", "0 issue \"letsencrypt.org\"", "0 issuewild \"amazon.com\"", "0 issuewild \"digicert.com\"" ], "caaCloudflareResolver": [ "0 iodef \"mailto:root@bitbucket.org\"", "0 issue \"amazon.com\"", "0 issue \"digicert.com\"", "0 issue \"globalsign.com\"", "0 issue \"letsencrypt.org\"", "0 issuewild \"amazon.com\"", "0 issuewild \"digicert.com\"" ], "servingIssuer": "issuer=C=US, O=Amazon, CN=Amazon ECDSA 256 M01", "servingNotBefore": "notBefore=Jun 9 00:00:00 2026 GMT", "servingNotAfter": "notAfter=Dec 23 23:59:59 2026 GMT", "ctIssuersSince2025_10_10": { "Amazon": 118, "DigiCert Inc": 1 } }, { "domain": "docker.com", "caa": [ "0 iodef \"mailto:infra+caa-iodef@docker.com\"", "0 issue \"amazon.com\"", "0 issue \"comodoca.com\"", "0 issue \"digicert.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"", "0 issue \"sectigo.com\"" ], "caaCloudflareResolver": [ "0 iodef \"mailto:infra+caa-iodef@docker.com\"", "0 issue \"amazon.com\"", "0 issue \"comodoca.com\"", "0 issue \"digicert.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"", "0 issue \"sectigo.com\"" ], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YR1", "servingNotBefore": "notBefore=Sep 28 09:34:18 2026 GMT", "servingNotAfter": "notAfter=Dec 27 09:34:17 2026 GMT", "ctIssuersSince2025_10_10": { "Amazon": 7 } }, { "domain": "npmjs.com", "caa": [ "0 issue \"comodoca.com\"", "0 issue \"digicert.com; cansignhttpexchanges=yes\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issue \"sectigo.com\"", "0 issue \"ssl.com\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"digicert.com; cansignhttpexchanges=yes\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"sectigo.com\"", "0 issuewild \"ssl.com\"" ], "caaCloudflareResolver": [ "0 issue \"comodoca.com\"", "0 issue \"digicert.com; cansignhttpexchanges=yes\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issue \"sectigo.com\"", "0 issue \"ssl.com\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"digicert.com; cansignhttpexchanges=yes\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"sectigo.com\"", "0 issuewild \"ssl.com\"" ], "servingIssuer": "issuer=C=US, O=Google Trust Services, CN=WE1", "servingNotBefore": "notBefore=Sep 11 03:46:27 2026 GMT", "servingNotAfter": "notAfter=Dec 10 04:46:16 2026 GMT", "ctIssuersSince2025_10_10": { "Let's Encrypt": 4, "Google Trust Services": 1 } }, { "domain": "pypi.org", "caa": [ "0 iodef \"mailto:infrastructure-staff@python.org\"", "0 issue \"amazon.com\"", "0 issue \"globalsign.com\"", "0 issue \"letsencrypt.org\"" ], "caaCloudflareResolver": [ "0 iodef \"mailto:infrastructure-staff@python.org\"", "0 issue \"amazon.com\"", "0 issue \"globalsign.com\"", "0 issue \"letsencrypt.org\"" ], "servingIssuer": "issuer=C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R3 DV TLS CA 2025 Q4", "servingNotBefore": "notBefore=Dec 28 04:33:08 2025 GMT", "servingNotAfter": "notAfter=Jan 29 04:33:07 2027 GMT", "ctIssuersSince2025_10_10": { "GlobalSign nv-sa": 1 } }, { "domain": "crates.io", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R3 DV TLS CA 2025 Q4", "servingNotBefore": "notBefore=Jan 15 15:26:59 2026 GMT", "servingNotAfter": "notAfter=Feb 16 15:26:58 2027 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "rubygems.org", "caa": [ "0 issue \"amazonaws.com\"", "0 issue \"comodoca.com\"", "0 issue \"globalsign.com\"", "0 issue \"letsencrypt.org\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"globalsign.com\"" ], "caaCloudflareResolver": [ "0 issue \"amazonaws.com\"", "0 issue \"comodoca.com\"", "0 issue \"globalsign.com\"", "0 issue \"letsencrypt.org\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"globalsign.com\"" ], "servingIssuer": "issuer=C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R3 DV TLS CA 2026 Q1", "servingNotBefore": "notBefore=Feb 5 18:00:26 2026 GMT", "servingNotAfter": "notAfter=Mar 9 18:00:25 2027 GMT", "ctIssuersSince2025_10_10": { "GlobalSign nv-sa": 1 } }, { "domain": "nuget.org", "caa": [ "0 contactemail \"caarecordaware@microsoft.com\"" ], "caaCloudflareResolver": [ "0 contactemail \"caarecordaware@microsoft.com\"" ], "servingIssuer": "issuer=C=US, O=Microsoft Corporation, CN=Microsoft TLS G2 RSA CA OCSP 16", "servingNotBefore": "notBefore=Aug 27 03:10:58 2026 GMT", "servingNotAfter": "notAfter=Feb 23 03:10:58 2027 GMT", "ctIssuersSince2025_10_10": { "Microsoft Corporation": 1 } }, { "domain": "packagist.org", "caa": [ "0 iodef \"mailto:security@packagist.org\"", "0 issue \"amazon.com\"", "0 issue \"letsencrypt.org\"" ], "caaCloudflareResolver": [ "0 iodef \"mailto:security@packagist.org\"", "0 issue \"amazon.com\"", "0 issue \"letsencrypt.org\"" ], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YR1", "servingNotBefore": "notBefore=Sep 14 20:02:46 2026 GMT", "servingNotAfter": "notAfter=Dec 13 20:02:45 2026 GMT", "ctIssuersSince2025_10_10": { "Let's Encrypt": 1 } }, { "domain": "golang.org", "caa": [ "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"" ], "caaCloudflareResolver": [ "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"" ], "servingIssuer": "issuer=C=US, O=Google Trust Services, CN=WR2", "servingNotBefore": "notBefore=Sep 18 20:00:42 2026 GMT", "servingNotAfter": "notAfter=Dec 11 20:00:41 2026 GMT", "ctIssuersSince2025_10_10": { "Google Trust Services": 114 } }, { "domain": "go.dev", "caa": [ "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"" ], "caaCloudflareResolver": [ "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"" ], "servingIssuer": "issuer=C=US, O=Google Trust Services, CN=WR3", "servingNotBefore": "notBefore=Sep 21 05:40:16 2026 GMT", "servingNotAfter": "notAfter=Dec 20 06:28:06 2026 GMT", "ctIssuersSince2025_10_10": {} }, { "domain": "rust-lang.org", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YR1", "servingNotBefore": "notBefore=Sep 21 20:02:52 2026 GMT", "servingNotAfter": "notAfter=Dec 20 20:02:51 2026 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "nodejs.org", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA DV R36", "servingNotBefore": "notBefore=Apr 8 00:00:00 2026 GMT", "servingNotAfter": "notAfter=Oct 23 23:59:59 2026 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "python.org", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R3 DV TLS CA 2025 Q4", "servingNotBefore": "notBefore=Jan 13 13:03:46 2026 GMT", "servingNotAfter": "notAfter=Feb 14 13:03:45 2027 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "deno.com", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YE2", "servingNotBefore": "notBefore=Sep 23 09:36:58 2026 GMT", "servingNotAfter": "notAfter=Dec 22 09:36:57 2026 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "bun.sh", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=Google Trust Services, CN=WE1", "servingNotBefore": "notBefore=Aug 24 17:41:17 2026 GMT", "servingNotAfter": "notAfter=Nov 22 18:41:02 2026 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "grafana.com", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1", "servingNotBefore": "notBefore=Apr 1 00:00:00 2026 GMT", "servingNotAfter": "notAfter=Oct 16 23:59:59 2026 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "prometheus.io", "caa": [ "0 issue \"comodoca.com\"", "0 issue \"digicert.com; cansignhttpexchanges=yes\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issue \"ssl.com\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"digicert.com; cansignhttpexchanges=yes\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"ssl.com\"" ], "caaCloudflareResolver": [ "0 issue \"comodoca.com\"", "0 issue \"digicert.com; cansignhttpexchanges=yes\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issue \"ssl.com\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"digicert.com; cansignhttpexchanges=yes\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"ssl.com\"" ], "servingIssuer": "issuer=C=US, O=Google Trust Services, CN=WE1", "servingNotBefore": "notBefore=Sep 30 05:58:39 2026 GMT", "servingNotAfter": "notAfter=Dec 29 06:56:20 2026 GMT", "ctIssuersSince2025_10_10": { "Let's Encrypt": 3 } }, { "domain": "letsencrypt.org", "caa": [ "0 issue \"amazon.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"", "0 issue \"sectigo.com\"", "0 issue \"ssl.com\"", "0 issue \"www.digicert.com\"", "0 issuewild \"amazon.com\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog\"", "0 issuewild \"sectigo.com\"", "0 issuewild \"ssl.com\"", "0 issuewild \"www.digicert.com\"" ], "caaCloudflareResolver": [ "0 issue \"amazon.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"", "0 issue \"sectigo.com\"", "0 issue \"ssl.com\"", "0 issue \"www.digicert.com\"", "0 issuewild \"amazon.com\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog\"", "0 issuewild \"sectigo.com\"", "0 issuewild \"ssl.com\"", "0 issuewild \"www.digicert.com\"" ], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YE2", "servingNotBefore": "notBefore=Sep 4 14:34:32 2026 GMT", "servingNotAfter": "notAfter=Dec 3 14:34:31 2026 GMT", "ctIssuersSince2025_10_10": { "Let's Encrypt": 4 } }, { "domain": "cloudflare.com", "caa": [ "0 iodef \"mailto:tls-abuse@cloudflare.com\"", "0 issue \"comodoca.com\"", "0 issue \"digicert.com; cansignhttpexchanges=yes\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issue \"ssl.com\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"digicert.com; cansignhttpexchanges=yes\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"ssl.com\"" ], "caaCloudflareResolver": [ "0 iodef \"mailto:tls-abuse@cloudflare.com\"", "0 issue \"comodoca.com\"", "0 issue \"digicert.com; cansignhttpexchanges=yes\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issue \"ssl.com\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"digicert.com; cansignhttpexchanges=yes\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"ssl.com\"" ], "servingIssuer": "issuer=C=US, O=Google Trust Services, CN=WE1", "servingNotBefore": "notBefore=Sep 5 22:29:39 2026 GMT", "servingNotAfter": "notAfter=Dec 4 23:29:33 2026 GMT", "ctIssuersSince2025_10_10": { "?": 9, "Google Trust Services": 15, "Let's Encrypt": 8 } }, { "domain": "vercel.com", "caa": [ "0 issue \"globalsign.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"", "0 issue \"sectigo.com\"" ], "caaCloudflareResolver": [ "0 issue \"globalsign.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"", "0 issue \"sectigo.com\"" ], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YR1", "servingNotBefore": "notBefore=Sep 25 12:18:22 2026 GMT", "servingNotAfter": "notAfter=Dec 24 12:18:21 2026 GMT", "ctIssuersSince2025_10_10": { "Let's Encrypt": 9 } }, { "domain": "netlify.com", "caa": [ "128 iodef \"mailto:security@netlify.com\"", "128 issue \"amazon.com\"", "128 issue \"digicert.com;account=2d83e9ac9b6776c3f215150f6ebceea8cefe3bc2e1fb5efffb1d71e200575226\"" ], "caaCloudflareResolver": [ "128 iodef \"mailto:security@netlify.com\"", "128 issue \"amazon.com\"", "128 issue \"digicert.com;account=2d83e9ac9b6776c3f215150f6ebceea8cefe3bc2e1fb5efffb1d71e200575226\"" ], "servingIssuer": "issuer=C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1", "servingNotBefore": "notBefore=Feb 6 00:00:00 2026 GMT", "servingNotAfter": "notAfter=Feb 5 23:59:59 2027 GMT", "ctIssuersSince2025_10_10": { "DigiCert Inc": 2 } }, { "domain": "fly.io", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YE2", "servingNotBefore": "notBefore=Sep 2 23:48:34 2026 GMT", "servingNotAfter": "notAfter=Dec 1 23:48:33 2026 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "digitalocean.com", "caa": [ "0 iodef \"mailto:security@digitalocean.com\"", "0 issue \"awstrust.com\"", "0 issue \"comodoca.com\"", "0 issue \"digicert.com; cansignhttpexchanges=yes\"", "0 issue \"globalsign.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issue \"ssl.com\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"digicert.com; cansignhttpexchanges=yes\"", "0 issuewild \"globalsign.com\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"ssl.com\"" ], "caaCloudflareResolver": [ "0 iodef \"mailto:security@digitalocean.com\"", "0 issue \"awstrust.com\"", "0 issue \"comodoca.com\"", "0 issue \"digicert.com; cansignhttpexchanges=yes\"", "0 issue \"globalsign.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issue \"ssl.com\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"digicert.com; cansignhttpexchanges=yes\"", "0 issuewild \"globalsign.com\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"ssl.com\"" ], "servingIssuer": "issuer=C=US, O=Google Trust Services, CN=WE1", "servingNotBefore": "notBefore=Sep 11 03:12:56 2026 GMT", "servingNotAfter": "notAfter=Dec 10 04:12:47 2026 GMT", "ctIssuersSince2025_10_10": { "Google Trust Services": 9, "Let's Encrypt": 15, "Sectigo Limited": 4, "SSL Corporation": 2, "DigiCert Inc": 1, "GlobalSign nv-sa": 1 } }, { "domain": "heroku.com", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YE1", "servingNotBefore": "notBefore=Sep 7 06:03:46 2026 GMT", "servingNotAfter": "notAfter=Dec 6 06:03:45 2026 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "render.com", "caa": [ "0 iodef \"mailto:security@render.com\"", "0 issue \"digicert.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"digicert.com\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"" ], "caaCloudflareResolver": [ "0 iodef \"mailto:security@render.com\"", "0 issue \"digicert.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"digicert.com\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"" ], "servingIssuer": "issuer=C=US, O=Google Trust Services, CN=WE1", "servingNotBefore": "notBefore=Sep 19 08:19:09 2026 GMT", "servingNotAfter": "notAfter=Dec 18 09:19:05 2026 GMT", "ctIssuersSince2025_10_10": { "Let's Encrypt": 15, "Google Trust Services": 3 } }, { "domain": "railway.com", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YR1", "servingNotBefore": "notBefore=Aug 15 08:52:18 2026 GMT", "servingNotAfter": "notAfter=Nov 13 08:52:17 2026 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "hetzner.com", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=DigiCert Inc, OU=www.digicert.com, CN=Thawte TLS RSA CA G1", "servingNotBefore": "notBefore=Jul 15 00:00:00 2026 GMT", "servingNotAfter": "notAfter=Jan 29 23:59:59 2027 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "hashicorp.com", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YR1", "servingNotBefore": "notBefore=Sep 23 11:01:19 2026 GMT", "servingNotAfter": "notAfter=Dec 22 11:01:18 2026 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "terraform.io", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YR1", "servingNotBefore": "notBefore=Aug 23 00:13:08 2026 GMT", "servingNotAfter": "notAfter=Nov 21 00:13:07 2026 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "helm.sh", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YE1", "servingNotBefore": "notBefore=Aug 25 19:54:09 2026 GMT", "servingNotAfter": "notAfter=Nov 23 19:54:08 2026 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "argoproj.io", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YE2", "servingNotBefore": "notBefore=Sep 11 18:13:53 2026 GMT", "servingNotAfter": "notAfter=Dec 10 18:13:52 2026 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "cncf.io", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YR1", "servingNotBefore": "notBefore=Sep 28 03:03:37 2026 GMT", "servingNotAfter": "notAfter=Dec 27 03:03:36 2026 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "istio.io", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YE1", "servingNotBefore": "notBefore=Aug 26 02:33:56 2026 GMT", "servingNotAfter": "notAfter=Nov 24 02:33:55 2026 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "envoyproxy.io", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YE1", "servingNotBefore": "notBefore=Aug 30 12:03:47 2026 GMT", "servingNotAfter": "notAfter=Nov 28 12:03:46 2026 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "sentry.io", "caa": [ "0 iodef \"mailto:security@sentry.io\"", "0 issue \"digicert.com\"", "0 issue \"letsencrypt.org\"" ], "caaCloudflareResolver": [ "0 iodef \"mailto:security@sentry.io\"", "0 issue \"digicert.com\"", "0 issue \"letsencrypt.org\"" ], "servingIssuer": "issuer=C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1", "servingNotBefore": "notBefore=Aug 6 00:00:00 2026 GMT", "servingNotAfter": "notAfter=Feb 20 23:59:59 2027 GMT", "ctIssuersSince2025_10_10": {} }, { "domain": "datadoghq.com", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1", "servingNotBefore": "notBefore=Sep 8 00:00:00 2026 GMT", "servingNotAfter": "notAfter=Mar 25 23:59:59 2027 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "pagerduty.com", "caa": [ "0 iodef \"mailto:ssl-tls-certificates-caa-iodef-report.r4785y6f@pdt-circular.pagerduty.com\"", "0 issue \"amazon.com\"", "0 issue \"amazonaws.com\"", "0 issue \"amazontrust.com\"", "0 issue \"awstrust.com\"", "0 issue \"comodo.com\"", "0 issue \"digicert.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"", "0 issuewild \"comodo.com\"", "0 issuewild \"digicert.com\"" ], "caaCloudflareResolver": [ "0 iodef \"mailto:ssl-tls-certificates-caa-iodef-report.r4785y6f@pdt-circular.pagerduty.com\"", "0 issue \"amazon.com\"", "0 issue \"amazonaws.com\"", "0 issue \"amazontrust.com\"", "0 issue \"awstrust.com\"", "0 issue \"comodo.com\"", "0 issue \"digicert.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"", "0 issuewild \"comodo.com\"", "0 issuewild \"digicert.com\"" ], "servingIssuer": "issuer=C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1", "servingNotBefore": "notBefore=Feb 23 00:00:00 2026 GMT", "servingNotAfter": "notAfter=Mar 18 23:59:59 2027 GMT", "ctIssuersSince2025_10_10": {} }, { "domain": "atlassian.com", "caa": [ "0 issue \"amazon.com\"", "0 issue \"digicert.com; account=c2eb0f50ca113d7543d58a10f523d0469ff922f115e5e4e9056f3d5f87d3356c\"", "0 issue \"globalsign.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"", "0 issuewild \"amazon.com\"", "0 issuewild \"digicert.com; account=c2eb0f50ca113d7543d58a10f523d0469ff922f115e5e4e9056f3d5f87d3356c\"", "0 issuewild \"globalsign.com\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog\"" ], "caaCloudflareResolver": [ "0 issue \"amazon.com\"", "0 issue \"digicert.com; account=c2eb0f50ca113d7543d58a10f523d0469ff922f115e5e4e9056f3d5f87d3356c\"", "0 issue \"globalsign.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"", "0 issuewild \"amazon.com\"", "0 issuewild \"digicert.com; account=c2eb0f50ca113d7543d58a10f523d0469ff922f115e5e4e9056f3d5f87d3356c\"", "0 issuewild \"globalsign.com\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog\"" ], "servingIssuer": "issuer=C=US, O=Amazon, CN=Amazon RSA 2048 M04", "servingNotBefore": "notBefore=Jul 27 00:00:00 2026 GMT", "servingNotAfter": "notAfter=Feb 9 23:59:59 2027 GMT", "ctIssuersSince2025_10_10": { "Amazon": 233 } }, { "domain": "jetbrains.com", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=Amazon, CN=Amazon RSA 2048 M04", "servingNotBefore": "notBefore=Jun 29 00:00:00 2026 GMT", "servingNotAfter": "notAfter=Jan 12 23:59:59 2027 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "redhat.com", "caa": [ "0 iodef \"mailto:it-cert-admin@redhat.com\"", "0 issue \"amazontrust.com\"", "0 issue \"digicert.com\"", "0 issue \"letsencrypt.org\"" ], "caaCloudflareResolver": [ "0 iodef \"mailto:it-cert-admin@redhat.com\"", "0 issue \"amazontrust.com\"", "0 issue \"digicert.com\"", "0 issue \"letsencrypt.org\"" ], "servingIssuer": "issuer=C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1", "servingNotBefore": "notBefore=Aug 20 00:00:00 2026 GMT", "servingNotAfter": "notAfter=Mar 6 23:59:59 2027 GMT", "ctIssuersSince2025_10_10": { "Let's Encrypt": 7, "DigiCert Inc": 1 } }, { "domain": "ubuntu.com", "caa": [ "0 iodef \"mailto:is-admin@canonical.com\"", "0 issue \"digicert.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"letsencrypt.org; accounturi=https://acme-v01.api.letsencrypt.org/acme/reg/32541290\"", "0 issuewild \"digicert.com\"", "0 issuewild \"letsencrypt.org\"" ], "caaCloudflareResolver": [ "0 iodef \"mailto:is-admin@canonical.com\"", "0 issue \"digicert.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"letsencrypt.org; accounturi=https://acme-v01.api.letsencrypt.org/acme/reg/32541290\"", "0 issuewild \"digicert.com\"", "0 issuewild \"letsencrypt.org\"" ], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YR1", "servingNotBefore": "notBefore=Sep 16 04:14:37 2026 GMT", "servingNotAfter": "notAfter=Dec 15 04:14:36 2026 GMT", "ctIssuersSince2025_10_10": { "Let's Encrypt": 2 } }, { "domain": "debian.org", "caa": [ "0 iodef \"mailto:dsa@debian.org\"", "128 issue \"letsencrypt.org;validationmethods=dns-01;accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/346607\"", "128 issuewild \";\"" ], "caaCloudflareResolver": [ "0 iodef \"mailto:dsa@debian.org\"", "128 issue \"letsencrypt.org;validationmethods=dns-01;accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/346607\"", "128 issuewild \";\"" ], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YR1", "servingNotBefore": "notBefore=Aug 20 00:21:08 2026 GMT", "servingNotAfter": "notAfter=Nov 18 00:21:07 2026 GMT", "ctIssuersSince2025_10_10": { "Let's Encrypt": 2 } }, { "domain": "kernel.org", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YE1", "servingNotBefore": "notBefore=Aug 14 20:48:32 2026 GMT", "servingNotAfter": "notAfter=Nov 12 20:48:31 2026 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "mozilla.org", "caa": [ "0 iodef \"mailto:foxsec+caaiodef@mozilla.com\"", "0 issue \"amazon.com\"", "0 issue \"amazonaws.com\"", "0 issue \"amazontrust.com\"", "0 issue \"awstrust.com\"", "0 issue \"certainly.com\"", "0 issue \"comodoca.com\"", "0 issue \"digicert.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"", "0 issue \"sectigo.com\"" ], "caaCloudflareResolver": [ "0 iodef \"mailto:foxsec+caaiodef@mozilla.com\"", "0 issue \"amazon.com\"", "0 issue \"amazonaws.com\"", "0 issue \"amazontrust.com\"", "0 issue \"awstrust.com\"", "0 issue \"certainly.com\"", "0 issue \"comodoca.com\"", "0 issue \"digicert.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog\"", "0 issue \"sectigo.com\"" ], "servingIssuer": "issuer=C=US, O=Google Trust Services, CN=WR3", "servingNotBefore": "notBefore=Sep 14 09:15:07 2026 GMT", "servingNotAfter": "notAfter=Dec 13 10:07:59 2026 GMT", "ctIssuersSince2025_10_10": { "Amazon": 5, "Google Trust Services": 4 } }, { "domain": "openssl.org", "caa": [ "0 iodef \"mailto:sec@openssl.org\"", "0 issue \"letsencrypt.org\"" ], "caaCloudflareResolver": [ "0 iodef \"mailto:sec@openssl.org\"", "0 issue \"letsencrypt.org\"" ], "servingIssuer": "issuer=C=US, O=Google Trust Services, CN=WR3", "servingNotBefore": "notBefore=Aug 18 23:07:47 2026 GMT", "servingNotAfter": "notAfter=Nov 17 00:00:19 2026 GMT", "ctIssuersSince2025_10_10": {} }, { "domain": "nginx.org", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YE2", "servingNotBefore": "notBefore=Jul 19 09:12:14 2026 GMT", "servingNotAfter": "notAfter=Oct 17 09:12:13 2026 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "caddyserver.com", "caa": [ "0 issue \"comodoca.com\"", "0 issue \"digicert.com; cansignhttpexchanges=yes\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issue \"ssl.com\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"digicert.com; cansignhttpexchanges=yes\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"ssl.com\"" ], "caaCloudflareResolver": [ "0 issue \"comodoca.com\"", "0 issue \"digicert.com; cansignhttpexchanges=yes\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issue \"ssl.com\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"digicert.com; cansignhttpexchanges=yes\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"ssl.com\"" ], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YE2", "servingNotBefore": "notBefore=Aug 13 12:52:21 2026 GMT", "servingNotAfter": "notAfter=Nov 11 12:52:20 2026 GMT", "ctIssuersSince2025_10_10": { "Let's Encrypt": 1 } }, { "domain": "traefik.io", "caa": [ "0 issue \"comodoca.com\"", "0 issue \"digicert.com; cansignhttpexchanges=yes\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issue \"ssl.com\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"digicert.com; cansignhttpexchanges=yes\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"ssl.com\"" ], "caaCloudflareResolver": [ "0 issue \"comodoca.com\"", "0 issue \"digicert.com; cansignhttpexchanges=yes\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issue \"ssl.com\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"digicert.com; cansignhttpexchanges=yes\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"ssl.com\"" ], "servingIssuer": "issuer=C=US, O=Google Trust Services, CN=WE1", "servingNotBefore": "notBefore=Aug 14 12:23:07 2026 GMT", "servingNotAfter": "notAfter=Nov 12 13:22:54 2026 GMT", "ctIssuersSince2025_10_10": { "Let's Encrypt": 1 } }, { "domain": "cert-manager.io", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YE1", "servingNotBefore": "notBefore=Oct 6 03:54:36 2026 GMT", "servingNotAfter": "notAfter=Jan 4 03:54:35 2027 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "elastic.co", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YR2", "servingNotBefore": "notBefore=Oct 7 01:00:34 2026 GMT", "servingNotAfter": "notAfter=Jan 5 01:00:33 2027 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "mongodb.com", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YR1", "servingNotBefore": "notBefore=Oct 5 05:16:51 2026 GMT", "servingNotAfter": "notAfter=Jan 3 05:16:50 2027 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "postgresql.org", "caa": [ "0 iodef \"mailto:hostmaster@postgresql.org\"", "0 issue \"amazontrust.com\"", "0 issue \"letsencrypt.org\"" ], "caaCloudflareResolver": [ "0 iodef \"mailto:hostmaster@postgresql.org\"", "0 issue \"amazontrust.com\"", "0 issue \"letsencrypt.org\"" ], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YR1", "servingNotBefore": "notBefore=Oct 1 01:09:09 2026 GMT", "servingNotAfter": "notAfter=Dec 30 01:09:08 2026 GMT", "ctIssuersSince2025_10_10": { "Let's Encrypt": 4 } }, { "domain": "supabase.com", "caa": [], "caaCloudflareResolver": [], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YR1", "servingNotBefore": "notBefore=Sep 10 19:18:21 2026 GMT", "servingNotAfter": "notAfter=Dec 9 19:18:20 2026 GMT", "ctIssuersSince2025_10_10": null }, { "domain": "neon.tech", "caa": [ "0 iodef \"mailto:sre@neon.tech\"", "0 issue \"amazon.com\"", "0 issue \"comodoca.com\"", "0 issue \"digicert.com; cansignhttpexchanges=yes\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issue \"sectigo.com\"", "0 issue \"ssl.com\"", "0 issuewild \"amazon.com\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"digicert.com; cansignhttpexchanges=yes\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"sectigo.com\"", "0 issuewild \"ssl.com\"" ], "caaCloudflareResolver": [ "0 iodef \"mailto:sre@neon.tech\"", "0 issue \"amazon.com\"", "0 issue \"comodoca.com\"", "0 issue \"digicert.com; cansignhttpexchanges=yes\"", "0 issue \"letsencrypt.org\"", "0 issue \"pki.goog; cansignhttpexchanges=yes\"", "0 issue \"sectigo.com\"", "0 issue \"ssl.com\"", "0 issuewild \"amazon.com\"", "0 issuewild \"comodoca.com\"", "0 issuewild \"digicert.com; cansignhttpexchanges=yes\"", "0 issuewild \"letsencrypt.org\"", "0 issuewild \"pki.goog; cansignhttpexchanges=yes\"", "0 issuewild \"sectigo.com\"", "0 issuewild \"ssl.com\"" ], "servingIssuer": "issuer=C=US, O=Google Trust Services, CN=WE1", "servingNotBefore": "notBefore=Oct 2 02:52:08 2026 GMT", "servingNotAfter": "notAfter=Dec 31 03:52:00 2026 GMT", "ctIssuersSince2025_10_10": {} }, { "domain": "stripe.com", "caa": [ "0 iodef \"mailto:caa-violations@stripe.com\"", "0 issue \"amazon.com\"", "0 issue \"digicert.com\"", "0 issue \"visa.com\"" ], "caaCloudflareResolver": [ "0 iodef \"mailto:caa-violations@stripe.com\"", "0 issue \"amazon.com\"", "0 issue \"digicert.com\"", "0 issue \"visa.com\"" ], "servingIssuer": "issuer=C=US, O=DigiCert, Inc., CN=DigiCert G5 TLS ECC SHA384 2021 CA1", "servingNotBefore": "notBefore=Sep 24 00:00:00 2026 GMT", "servingNotAfter": "notAfter=Dec 10 23:59:59 2026 GMT", "ctIssuersSince2025_10_10": { "DigiCert, Inc.": 13, "DigiCert Inc": 87 } }, { "domain": "tailscale.com", "caa": [ "0 issue \"amazon.com\"", "0 issue \"amazonaws.com\"", "0 issue \"amazontrust.com\"", "0 issue \"awstrust.com\"", "0 issue \"comodoca.com\"", "0 issue \"digicert.com\"", "0 issue \"letsencrypt.org\"", "0 issuewild \";\"" ], "caaCloudflareResolver": [ "0 issue \"amazon.com\"", "0 issue \"amazonaws.com\"", "0 issue \"amazontrust.com\"", "0 issue \"awstrust.com\"", "0 issue \"comodoca.com\"", "0 issue \"digicert.com\"", "0 issue \"letsencrypt.org\"", "0 issuewild \";\"" ], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YR1", "servingNotBefore": "notBefore=Sep 14 14:34:14 2026 GMT", "servingNotAfter": "notAfter=Dec 13 14:34:13 2026 GMT", "ctIssuersSince2025_10_10": { "Let's Encrypt": 2, "Amazon": 2 } }, { "domain": "1password.com", "caa": [ "0 iodef \"mailto:alerts+caa@agilebits.com\"", "0 issue \"amazon.com\"", "0 issue \"digicert.com\"", "0 issue \"globalsign.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"sectigo.com\"" ], "caaCloudflareResolver": [ "0 iodef \"mailto:alerts+caa@agilebits.com\"", "0 issue \"amazon.com\"", "0 issue \"digicert.com\"", "0 issue \"globalsign.com\"", "0 issue \"letsencrypt.org\"", "0 issue \"sectigo.com\"" ], "servingIssuer": "issuer=C=US, O=Let's Encrypt, CN=YE1", "servingNotBefore": "notBefore=Aug 26 13:40:39 2026 GMT", "servingNotAfter": "notAfter=Nov 24 13:40:38 2026 GMT", "ctIssuersSince2025_10_10": { "Let's Encrypt": 4, "Amazon": 1 } } ] }