• v1.2.1 dfe3bbac43

    cert-transparency-watcher v1.2.1
    Some checks failed
    tests / test (3.14) (push) Has been cancelled
    tests / test (3.6-bullseye) (push) Has been cancelled
    release / release (push) Successful in 14s
    Stable

    Ghost released this 2026-10-17 01:49:59 -07:00 | 15 commits to main since this release

    • A wildcard certificate is its own subdomain label (*, or *.dev for *.dev.example.com) instead of counting as the apex: with --allow-subdomain @ a new *.example.com certificate (valid for every subdomain) used to pass unflagged. Allow it with --allow-subdomain '*'.
    • Names in FQDN form (trailing dot) are matched like any other name.
    • Tests: accuracy corpus (15 certificates with known verdicts: other CAs, forgotten hosts, wildcards, deeper names, unrelated SANs, precert duplicates, out-of-window and malformed rows), mutation testing (nightly), claims ledger.

    Install

    pipx install git+https://git.canutethegreat.com/CanuteTheGreat/cert-transparency-watcher.git@v1.2.1
    # or the wheel attached to this release:
    pipx install https://git.canutethegreat.com/CanuteTheGreat/cert-transparency-watcher/releases/download/v1.2.1/cert_transparency_watcher-1.2.1-py3-none-any.whl
    # or the single file (stdlib-only Python 3):
    curl -fsSLO https://git.canutethegreat.com/CanuteTheGreat/cert-transparency-watcher/releases/download/v1.2.1/cert_transparency_watcher.py
    

    SHA-256

    9b9000fa4aafeed3db6ac77f76baf1a33388dedf353b3124390068e31d0d0246  cert_transparency_watcher.py
    d1ece299c7f11db2cb98f518d68349721ea16323d73767293cee4b5edb454575  cert_transparency_watcher-1.2.1-py3-none-any.whl
    85194fc242b7de563837b244835029622d01553b18fe9da6904d5ed7569feb9b  cert_transparency_watcher-1.2.1.tar.gz
    
    Downloads