Public utilities that complement Certificate Transparency monitoring — no subscription required.
Check whether a domain has a public Certificate Authority Authorisation (CAA) policy configured, determine if it is valid, reconfigure it or create a new policy, and apply changes via Domain Connect if your DNS hosting service supports it. Receive detailed guidance and manual DNS record configuration steps where it does not.
Gain a deep understanding of your domain's DNS records, the public X.509 certificates that are in use, possible typosquatting and malicious look-alike domains, and the associated information available via Certificate Transparency logs, as well as your dependence on public Certificate Authorities.
Browse the public Certificate Transparency log ecosystem — which logs are online, how many entries they hold, and which logs Good Roots monitors for anomaly-focused CT ingestion.
