Can I find out whether an SSL certificate was issued for my domain without my knowledge?

Can I find out whether an SSL certificate was issued for my domain without my knowledge?

Yes, you can search public Certificate Transparency logs for certificates issued for your domain and its subdomains. Monitoring services can also send alerts when new certificates appear in these logs.

An unfamiliar certificate does not automatically mean your domain has been compromised: it may come from a service you use or an automatic renewal. Check the names covered by the certificate, its issuer and its issue date, then compare these details with your active services. If you cannot account for it, investigate access to the accounts involved and contact the certificate authority about its reporting procedure and, where appropriate, revocation.

RELATED QUESTIONS

Here are a few more questions whose answers may interest you. We answer important, practical questions for our customers.

SUBSCRIBE TO OUR NEWSLETTER

Join our newsletter. We only use it to share important information.

Newsletter subscription illustration