> For the complete documentation index, see [llms.txt](https://docs.certinext.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.certinext.io/documentation/certificate-lifecycle-management/discovering-certificates/ct-logs.md).

# CT Logs

CERTInext extends discovery beyond internal infrastructure through Certificate Transparency (CT) log monitoring, providing visibility into publicly issued certificates.

CT logs are global, append-only records mandated by browsers for publicly trusted certificates. CERTInext continuously consumes CT log data to identify certificates issued for verified domains.

#### What CT Log Monitoring Detects

* Newly issued public certificates
* Unauthorized or unexpected issuance
* Expired or expiring public certificates
* Certificates issued by unknown or unapproved CAs
* Weak or outdated cryptographic parameters

#### Enabling CT Log Monitoring

Administrators can enable monitoring by selecting verified domains and optionally including subdomains. Once enabled, CERTInext continuously tracks CT activity and updates metrics in near real time.

<figure><img src="https://955357252-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNvYrWQTJxwzOAGkanyHW%2Fuploads%2Fml7ECUtDGE1Dteyc5VSm%2Fimage.png?alt=media&amp;token=24e6bdbf-e53a-48f9-916d-b011bff865a9" alt=""><figcaption></figcaption></figure>

#### CT Metrics and Results

CT dashboards display:

* Domain and subdomain coverage
* Certificates discovered
* Expired certificates
* Certificates expiring within defined timelines

Each CT-discovered certificate includes details such as CN/SAN, issuer CA, certificate type, key strength, and expiry information. Renewal actions can be initiated directly from the platform.