Certificate Transparency explorer

crt-explorer

Local-first certificate transparency reconnaissance for domain inventory, cached crt.sh rows, direct local SQLite search, and CT log ingestion experiments.

crt.sh JSONCached endpoint reads with stale fallback when the public service gets flaky.

SQLiteImported cache rows and local suffix search for repeat lookups.

CT LogsDirect log range ingestion for experiments that bypass the crt.sh UI path.

Idle

Usage

CLI stays local. Notes are public.

./crt-explorer lfj.gg
./crt-explorer lfj.gg --format json --limit 25
./crt-explorer -f domains.txt --format csv
./crt-explorer import-cache
./crt-explorer local lfj.gg
./crt-explorer remote-pg phar.gg

Metadata

Public-safe project shape.

Endpoint https://crt.sh/?q=<query>&output=json

Cache 24 hour TTL by default, with stale-cache fallback for crt.sh outages.

Local DB data/crt-explorer.sqlite in the private workspace; not exposed through this public route.

Scope A reconnaissance helper, not a full crt.sh mirror. The upstream certwatch database is far too large to casually clone.