X.509 certificate metadata observed when communicating with miscellaneous non-HTTPS endpoints, such as IMAPS, POP3S, etc.

Study Details

Study

Project Sonar

Author

Project Sonar | Rapid7

Contact

Rapid7 Labs

Dataset Details

The dataset contains a collection of metadata related to the net new X.509 certificates observed in each study when considering all SSL studies that ran prior. The _hosts and _endpoints files provide mapping between the IPs/endpoints and the fingerprint of the X.509 certificate presented. The _certs file provides a mapping of the net new certificates from a given study and the corresponding fingerprint. The _names file provides a mapping of the X.509 certificate name (CN) to its fingerprint.

Full Dataset Listing

Existing Open Data users can sign in for access. See the About page for information on requesting access.

File Name SHA1-Fingerprint Size Updated At
20251005/2025-10-05-1759625476-mqtt_8883_names.gz
7296b66ce7d9c36f843a4d19920bf6a4915d73d5
2.2 MB Oct. 5, 2025
20251005/2025-10-05-1759625476-mqtt_8883_certs.gz
c8edad5e42e043fd38ff5a8e2326571674b2a80a
98.6 MB Oct. 5, 2025
20251004/2025-10-04-1759615713-ftps_990_names.gz
66bcb7b91b9502929b681472d3bb22089ff1c518
5.8 MB Oct. 5, 2025
20251004/2025-10-04-1759615713-ftps_990_certs.gz
a3cd1bfb3b875c76da2b629ad0b3a33bfe762624
299.1 MB Oct. 5, 2025
20251004/2025-10-04-1759596898-nntps_563_names.gz
47d84775551ec0f19a62f3923c54a50363d058cf
159.8 KB Oct. 4, 2025
20251004/2025-10-04-1759596898-nntps_563_certs.gz
5ce25d069b43ec10bfaf03720ceb83626213bc32
7.3 MB Oct. 4, 2025
20251004/2025-10-04-1759579101-tcp_dns_853_names.gz
64ff0840543b5340eff8398f16a5e816108364d4
4.8 MB Oct. 4, 2025
20251004/2025-10-04-1759579101-tcp_dns_853_certs.gz
4943f26ec928dc523ae00198556699cb326700cd
211.4 MB Oct. 4, 2025
20251004/2025-10-04-1759555519-tcp_ldap_3268_names.gz
733c10a236019c0a5001c80707dec9fb730d430a
172.1 KB Oct. 4, 2025
20251004/2025-10-04-1759555519-tcp_ldap_3268_certs.gz
e88dbf42434c605ddb2a55763a4834bc8e98ba9a
5.0 MB Oct. 4, 2025