X.509 certificate metadata observed when communicating with miscellaneous non-HTTPS endpoints, such as IMAPS, POP3S, etc.

Study Details

Study

Project Sonar

Author

Project Sonar | Rapid7

Contact

Rapid7 Labs

Dataset Details

The dataset contains a collection of metadata related to the net new X.509 certificates observed in each study when considering all SSL studies that ran prior. The _hosts and _endpoints files provide mapping between the IPs/endpoints and the fingerprint of the X.509 certificate presented. The _certs file provides a mapping of the net new certificates from a given study and the corresponding fingerprint. The _names file provides a mapping of the X.509 certificate name (CN) to its fingerprint.

Full Dataset Listing

Existing Open Data users can sign in for access. See the About page for information on requesting access.

File Name SHA1-Fingerprint Size Updated At
20251104/2025-11-04-1762219956-tcp_dns_853_names.gz
01cbdfd67defa40533af9ccd007c222cc49b1877
5.1 MB Nov. 4, 2025
20251104/2025-11-04-1762219956-tcp_dns_853_certs.gz
968a70e023980a2e783135add4b06d082e050bbf
224.5 MB Nov. 4, 2025
20251103/2025-11-03-1762208456-ftps_990_names.gz
9e637fbb98512ed724ab4c91ede97c5782499be8
5.7 MB Nov. 4, 2025
20251103/2025-11-03-1762208456-ftps_990_certs.gz
d6ead19c223ad1ff5ee43cd133acfa9a1eb4ab3c
305.5 MB Nov. 4, 2025
20251103/2025-11-03-1762202676-mqtt_8883_names.gz
fe0cf8a7db574105f11fe20f5efcd950bda0a306
2.3 MB Nov. 4, 2025
20251103/2025-11-03-1762202676-mqtt_8883_certs.gz
c5f05af296903355c4b315b6a452f97a34875e84
99.3 MB Nov. 4, 2025
20251103/2025-11-03-1762197187-tcp_ldap_3269_names.gz
12299150f29ae8013469a4c16887c3f475685306
185.3 KB Nov. 3, 2025
20251103/2025-11-03-1762197187-tcp_ldap_3269_certs.gz
d99984048ab236d4909f94b0e56dce79d43d9edf
5.9 MB Nov. 3, 2025
20251103/2025-11-03-1762186104-tcp_ldap_636_names.gz
07a2bff349ee8f5040e56e317858f23de5af1d94
987.3 KB Nov. 3, 2025
20251103/2025-11-03-1762186104-tcp_ldap_636_certs.gz
a59e05c328e9e387e336dd0632b4483e8b04f4ed
38.2 MB Nov. 3, 2025