X.509 certificate metadata observed when communicating with miscellaneous non-HTTPS endpoints, such as IMAPS, POP3S, etc.

Study Details

Study

Project Sonar

Author

Project Sonar | Rapid7

Contact

Rapid7 Labs

Dataset Details

The dataset contains a collection of metadata related to the net new X.509 certificates observed in each study when considering all SSL studies that ran prior. The _hosts and _endpoints files provide mapping between the IPs/endpoints and the fingerprint of the X.509 certificate presented. The _certs file provides a mapping of the net new certificates from a given study and the corresponding fingerprint. The _names file provides a mapping of the X.509 certificate name (CN) to its fingerprint.

Full Dataset Listing

Existing Open Data users can sign in for access. See the About page for information on requesting access.

File Name SHA1-Fingerprint Size Updated At
20260304/2026-03-04-1772643870-ftps_990_names.gz
461cdb3dc17f46af149f6d04df4b76facddb524c
5.8 MB March 4, 2026
20260304/2026-03-04-1772643870-ftps_990_certs.gz
01f178181492d3963c4de866523d32a206fb7a8a
303.0 MB March 4, 2026
20260304/2026-03-04-1772627249-tcp_dns_853_names.gz
5122bc1ed5500c862568f9a482a690fb4f3fa5b0
5.3 MB March 4, 2026
20260304/2026-03-04-1772627249-tcp_dns_853_certs.gz
059029047069aa239fe26673e762dc8ac43a0369
224.6 MB March 4, 2026
20260304/2026-03-04-1772603202-tcp_ldap_3269_names.gz
4536dc1bb7e7f7702d6e0095d749463db9694f4a
177.8 KB March 4, 2026
20260304/2026-03-04-1772603202-tcp_ldap_3269_certs.gz
9aabe8ee8843e8ff402243dd6ee14bd38c0079ff
5.3 MB March 4, 2026
20260303/2026-03-03-1772564132-mqtt_8883_names.gz
782b270214f4b9288f7f96c898d40943548e081f
2.5 MB March 3, 2026
20260303/2026-03-03-1772564132-mqtt_8883_certs.gz
829077c78b3f80fe1eb8755e6a7af6331b40f75c
104.3 MB March 3, 2026
20260303/2026-03-03-1772558886-nntps_563_names.gz
7128ef4b124c83d907dbc326beddb92d641901f3
144.5 KB March 3, 2026
20260303/2026-03-03-1772558886-nntps_563_certs.gz
d2600bc2fd64879f65db12ce4f8079fc24d5b6a4
6.5 MB March 3, 2026