SSL/TLS Certificate API
Monitor SSL/TLS certificates as they are issued across all TLDs. 6 to 10 million certificates processed daily, with 90 days of searchable history. The only CodePunch feed that covers ccTLD domain activity.
What the feed contains
SSL/TLS certificates are logged publicly via Certificate Transparency logs maintained by browser vendors and CAs. CodePunch ingests this stream continuously, processing 6 to 10 million newly issued certificates per day and making them searchable via API.
Because certificate issuance is not restricted to gTLD domains, this feed provides visibility into ccTLD domain activity that zone file processing cannot cover. When a new domain on any ccTLD provisions an SSL certificate, it appears in this feed, making it a valuable complement to the domain activity and DNS feeds.
The 90-day searchable history allows retrospective investigation into certificate issuance patterns, useful for incident response and historical threat analysis.
API endpoint
Features
Daily Certificate Stream
6 to 10 million SSL/TLS certificates processed daily from Certificate Transparency logs. Covers all certificate authorities and all TLDs.
90-Day Searchable History
Search and filter certificates issued during the past 90 days. Supports retrospective investigation, pattern analysis, and historical threat research.
ccTLD Domain Coverage
Zone files are not publicly available for ccTLDs. SSL certificate issuance data provides an effective alternative signal for tracking new domain activity across country-code TLDs.
Subject and SAN Data
Each certificate record includes subject common name, Subject Alternative Names, issuing CA, validity dates, and serial number for full certificate profiling.
Trademark and Malware Analysis
Filter the certificate stream by keyword against subject and SAN fields for trademark monitoring and malware infrastructure detection across all TLDs.
Bulk Ingestion Support
Paginated responses designed for high-volume data ingestion pipelines. Pull the full daily certificate batch into your own data store for local querying and enrichment.
Coverage
| TLD Type | Coverage | Source |
|---|---|---|
| gTLDs (.com, .net, .org and all others) | Full | Certificate Transparency logs |
| ccTLDs (.uk, .de, .au and others) | Full | Certificate Transparency logs |
| History depth | 90 days | Searchable via API |
Coverage depends on certificate issuance. Domains that do not provision an SSL/TLS certificate will not appear in this feed regardless of TLD.