• What is Certificate Transparency?
• Why does Entrust log my SSL certificates?
• What dates did Entrust start logging SSL certificates during enrollment?
• Does Entrust offer an option keep certificates and domains private?
• What if my certificate has SAN names?
• What certificate information appears in the public log?
• How is this information used?
• How can I find SSL certificates issued to my domain(s)?

What is Certificate Transparency?

Certificate Transparency (CT) is a significant improvement to the SSL ecosystem that helps organizations monitor certificates issued for their domains by making the certificate information available in a public log. To ensure that Entrust offers our customers the best certificate security and to provide a good experience to customers browsing your website, Entrust log all SSL certificates by default.

CT lets domain owners audit and monitor SSL certificates that have been issued using their domain name across all Certificate Authorities (CAs) with the right information to identify CAs that have issued unrecognized certificates.

Why does Entrust log my SSL certificates?

Entrust logs customer SSL certificates to promote domain security for our customers and comply with various browser requirements.

What dates did Entrust start logging SSL certificates during enrollment?

Extended Validation: 01/01/2015

Organization Validation: 26/03/2018

Does Entrust offer an option keep certificates and domains private?

You can choose whether to send Organization Validation (OV) SSL certificates to Certificate Transparency (CT) logs. The OV SSL certificate types are Standard, Advantage, UC Multi-Domain, and Wildcard.

CT Logging status for each certificate is affected by choices made during creation, and also by account and certificate-level CT Logging setting changes and selections made during Renew and Reissue operations.

Extended Validation (EV) SSL certificates are always logged. Private SSL certificates are never logged.

What if my certificate has SAN names?

Entrust will log all domain names included in both the subject common name and SAN fields of the SSL certificate. If you have a requirement to keep any of your internal domain name private, it is best to enroll for a Private Trust or Wildcard Certificate.

What certificate information appears in the public log?

All the information that is included in the SSL certificate issued by Entrust is included in the public CT log. A list of Certificate Transparency logs is available at:

http://www.certificate-transparency.org/known-logs

How is this information used?

Domain owners, or security researchers can search the logs to identify and audit what SSL certificates have been issued by which certificate authorities for one or more domains for the purpose of detecting possible mis-issuance by a CA.

How can I find SSL certificates issued to my domain(s)?

Entrust provides a tool where our customers can search for SSL certificates issued to one or more domains by a CA available at the link below:

https://www.entrust.com/ct-search/?_ga=2.50508009.1193306266.1519035677-887139529.1484240870&_gac=1.241452598.1518780829.EAIaIQobChMInMC0uKuq2QIVXbjACh3KzADuEAAYASAAEgJgtfD_BwE

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance:

Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET
North America (toll free): 1-866-267-9297
Outside North America: 1-613-270-2680 (or see the list below)
NOTE: It is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.