X.509 certificate metadata observed when communicating with miscellaneous non-HTTPS endpoints, such as IMAPS, POP3S, etc.

Study Details

Study

Project Sonar

Author

Project Sonar | Rapid7

Contact

Rapid7 Labs

Dataset Details

The dataset contains a collection of metadata related to the net new X.509 certificates observed in each study when considering all SSL studies that ran prior. The _hosts and _endpoints files provide mapping between the IPs/endpoints and the fingerprint of the X.509 certificate presented. The _certs file provides a mapping of the net new certificates from a given study and the corresponding fingerprint. The _names file provides a mapping of the X.509 certificate name (CN) to its fingerprint.

Full Dataset Listing

Existing Open Data users can sign in for access. See the About page for information on requesting access.

File Name SHA1-Fingerprint Size Updated At
20251204/2025-12-04-1764871256-ftps_990_names.gz
ceda29e4f41582ba260131d2115f4aea4926dff3
5.8 MB Dec. 4, 2025
20251204/2025-12-04-1764871256-ftps_990_certs.gz
10f886b59724d0b5691cef8576502fd653ca0b68
304.7 MB Dec. 4, 2025
20251203/2025-12-03-1764799898-tcp_dns_853_names.gz
a308e469b86d70aa1478edc5feb25a09ccd89f68
5.1 MB Dec. 4, 2025
20251203/2025-12-03-1764799898-tcp_dns_853_certs.gz
428dffa8ac58da302a654ea5eb7a388b3518f536
223.4 MB Dec. 4, 2025
20251203/2025-12-03-1764768513-tcp_ldap_636_names.gz
c3e7c0801b1995179842c2ff9cac31a27bab72de
982.6 KB Dec. 3, 2025
20251203/2025-12-03-1764768513-tcp_ldap_636_certs.gz
7ee12aa52701b6d472c67bff947b0fa3292393d5
37.4 MB Dec. 3, 2025
20251203/2025-12-03-1764754606-tcp_ldap_389_names.gz
7ca2afa65cd7210a6c4dee4ccc1fa7a0ccb356f9
878.6 KB Dec. 3, 2025
20251203/2025-12-03-1764754606-tcp_ldap_389_certs.gz
7b34e888536eee0cf0d48e713750342c5cdb32ae
33.6 MB Dec. 3, 2025
20251203/2025-12-03-1764748855-tcp_ldap_3268_names.gz
e32582ec93373e93e91f795f435a0581e6e21497
155.3 KB Dec. 3, 2025
20251203/2025-12-03-1764748855-tcp_ldap_3268_certs.gz
3d04c2adb18fa17d5b9b8282085bf448816c161d
4.6 MB Dec. 3, 2025