X.509 certificate metadata observed when communicating with miscellaneous non-HTTPS endpoints, such as IMAPS, POP3S, etc.

Study Details

Study

Project Sonar

Author

Project Sonar | Rapid7

Contact

Rapid7 Labs

Dataset Details

The dataset contains a collection of metadata related to the net new X.509 certificates observed in each study when considering all SSL studies that ran prior. The _hosts and _endpoints files provide mapping between the IPs/endpoints and the fingerprint of the X.509 certificate presented. The _certs file provides a mapping of the net new certificates from a given study and the corresponding fingerprint. The _names file provides a mapping of the X.509 certificate name (CN) to its fingerprint.

Full Dataset Listing

Existing Open Data users can sign in for access. See the About page for information on requesting access.

File Name SHA1-Fingerprint Size Updated At
20260204/2026-02-04-1770201903-ftps_990_names.gz
915219bedcd237a231f156934e929b9d005cea63
5.7 MB Feb. 4, 2026
20260204/2026-02-04-1770201903-ftps_990_certs.gz
5887077383de7107428af83780a011aacd016e73
302.3 MB Feb. 4, 2026
20260204/2026-02-04-1770192396-nntps_563_names.gz
e94493dbe2a07aa431e4e0c656e58e233618c126
150.6 KB Feb. 4, 2026
20260204/2026-02-04-1770192396-nntps_563_certs.gz
ebead5f28d4967cb18b1e56e833b3222149d9246
6.8 MB Feb. 4, 2026
20260203/2026-02-03-1770156755-tcp_dns_853_names.gz
9078e3c1753f2282f350f3572eda08d9e6cba939
5.2 MB Feb. 4, 2026
20260203/2026-02-03-1770156755-tcp_dns_853_certs.gz
b0cf67baf1e683b85612be87871aa6544a36fc36
224.5 MB Feb. 4, 2026
20260203/2026-02-03-1770148757-tcp_ldap_3269_names.gz
81668dc8ee27a0846d6dc6493bb4dba6898f3473
197.4 KB Feb. 3, 2026
20260203/2026-02-03-1770148757-tcp_ldap_3269_certs.gz
a5e6416cf73bc41a2d21f7f920f773bc1562811b
5.9 MB Feb. 3, 2026
20260203/2026-02-03-1770144274-tcp_ldap_636_names.gz
b557750e1f5d8e4a373c36d05d4bdd08a658e371
973.3 KB Feb. 3, 2026
20260203/2026-02-03-1770144274-tcp_ldap_636_certs.gz
418cc30f11cbdee6d125253213f240d8cc74779e
37.5 MB Feb. 3, 2026