-
released this
2026-10-17 01:49:59 -07:00 | 15 commits to main since this release- A wildcard certificate is its own subdomain label (
*, or*.devfor*.dev.example.com) instead of counting as the apex: with--allow-subdomain @a new*.example.comcertificate (valid for every subdomain) used to pass unflagged. Allow it with--allow-subdomain '*'. - Names in FQDN form (trailing dot) are matched like any other name.
- Tests: accuracy corpus (15 certificates with known verdicts: other CAs, forgotten hosts, wildcards, deeper names, unrelated SANs, precert duplicates, out-of-window and malformed rows), mutation testing (nightly), claims ledger.
Install
pipx install git+https://git.canutethegreat.com/CanuteTheGreat/cert-transparency-watcher.git@v1.2.1 # or the wheel attached to this release: pipx install https://git.canutethegreat.com/CanuteTheGreat/cert-transparency-watcher/releases/download/v1.2.1/cert_transparency_watcher-1.2.1-py3-none-any.whl # or the single file (stdlib-only Python 3): curl -fsSLO https://git.canutethegreat.com/CanuteTheGreat/cert-transparency-watcher/releases/download/v1.2.1/cert_transparency_watcher.pySHA-256
9b9000fa4aafeed3db6ac77f76baf1a33388dedf353b3124390068e31d0d0246 cert_transparency_watcher.py d1ece299c7f11db2cb98f518d68349721ea16323d73767293cee4b5edb454575 cert_transparency_watcher-1.2.1-py3-none-any.whl 85194fc242b7de563837b244835029622d01553b18fe9da6904d5ed7569feb9b cert_transparency_watcher-1.2.1.tar.gzDownloads
-
Source code (ZIP)
7 downloads
-
Source code (TAR.GZ)
8 downloads
- A wildcard certificate is its own subdomain label (