Skip to main content

Certificate Transparency (CT) Frequently Asked Questions (FAQs)

What is Certificate Transparency?

Certificate Transparency (CT) is a significant improvement to the SSL ecosystem that helps organizations monitor certificates issued for their domains by making the certificate information available in a public log. To ensure that Entrust offers our customers the best certificate security and to provide a good experience to customers browsing your website, Entrust log all SSL certificates by default.

CT lets domain owners audit and monitor SSL certificates that have been issued using their domain name across all Certificate Authorities (CAs) with the right information to identify CAs that have issued unrecognized certificates.

Why does Entrust log my SSL certificates?

Entrust logs customer SSL certificates to promote domain security for our customers and comply with various browser requirements.

What dates did Entrust start logging SSL certificates during enrollment?

Extended Validation: 01/01/2015

Organization Validation: 26/03/2018

Does Entrust offer an option keep certificates and domains private?

You can choose whether to send Organization Validation (OV) SSL certificates to Certificate Transparency (CT) logs. The OV SSL certificate types are Standard, Advantage, UC Multi-Domain, and Wildcard.

CT Logging status for each certificate is affected by choices made during creation, and also by account and certificate-level CT Logging setting changes and selections made during Renew and Reissue operations.

Extended Validation (EV) SSL certificates are always logged. Private SSL certificates are never logged.

What if my certificate has SAN names?

Entrust will log all domain names included in both the subject common name and SAN fields of the SSL certificate. If you have a requirement to keep any of your internal domain name private, it is best to enroll for a Private Trust or Wildcard Certificate.

What certificate information appears in the public log?

All the information that is included in the SSL certificate issued by Entrust is included in the public CT log. A list of Certificate Transparency logs is available at:

How is this information used?

Domain owners, or security researchers can search the logs to identify and audit what SSL certificates have been issued by which certificate authorities for one or more domains for the purpose of detecting possible mis-issuance by a CA.

How can I find SSL certificates issued to my domain(s)?

Entrust provides a tool where our customers can search for SSL certificates issued to one or more domains by a CA available at the link below:

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance:

Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET
North America (toll free): 1-866-267-9297
Outside North America: 1-613-270-2680 (or see the list below)
NOTE: It is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.

Country Number
Australia 0011 - 800-3687-7863
Austria 00 - 800-3687-7863
Belgium 00 - 800-3687-7863
Denmark 00 - 800-3687-7863
Finland 990 - 800-3687-7863 (Telecom Finland)
00 - 800-3687-7863 (Finnet)
France 00 - 800-3687-7863
Germany 00 - 800-3687-7863
Hong Kong 001 - 800-3687-7863 (Voice)
002 - 800-3687-7863 (Fax)
Ireland 00 - 800-3687-7863
Israel 014 - 800-3687-7863
Italy 00 - 800-3687-7863
Japan 001 - 800-3687-7863 (KDD)
004 - 800-3687-7863 (ITJ)
0061 - 800-3687-7863 (IDC)
Korea 001 - 800-3687-7863 (Korea Telecom)
002 - 800-3687-7863 (Dacom)
Malaysia 00 - 800-3687-7863
Netherlands 00 - 800-3687-7863
New Zealand 00 - 800-3687-7863
Norway 00 - 800-3687-7863
Singapore 001 - 800-3687-7863
Spain 00 - 800-3687-7863
Sweden 00 - 800-3687-7863 (Telia)
00 - 800-3687-7863 (Tele2)
Switzerland 00 - 800-3687-7863
Taiwan 00 - 800-3687-7863
United Kingdom 00 - 800-3687-7863
0800 121 6078
+44 (0) 118 953 3088