X.509 certificate metadata observed when communicating with miscellaneous non-HTTPS endpoints, such as IMAPS, POP3S, etc.

Study Details

Study

Project Sonar

Author

Project Sonar | Rapid7

Contact

Rapid7 Labs

Dataset Details

The dataset contains a collection of metadata related to the net new X.509 certificates observed in each study when considering all SSL studies that ran prior. The _hosts and _endpoints files provide mapping between the IPs/endpoints and the fingerprint of the X.509 certificate presented. The _certs file provides a mapping of the net new certificates from a given study and the corresponding fingerprint. The _names file provides a mapping of the X.509 certificate name (CN) to its fingerprint.

Full Dataset Listing

Existing Open Data users can sign in for access. See the About page for information on requesting access.

File Name SHA1-Fingerprint Size Updated At
20260104/2026-01-04-1767531809-tcp_dns_853_names.gz
504daf2690668e77d03eddf4ceffeea52cbd9ebe
5.1 MB Jan. 4, 2026
20260104/2026-01-04-1767531809-tcp_dns_853_certs.gz
3bffe07e2e3ebc3bbda64eb9fbe46ff8badd45e1
224.1 MB Jan. 4, 2026
20260103/2026-01-03-1767484294-tcp_ldap_389_names.gz
4c87d79cac5bf578625d47c9b8ba21c773a7ce3c
864.6 KB Jan. 4, 2026
20260103/2026-01-03-1767484294-tcp_ldap_389_certs.gz
c849bb61acb0cd5f6a0411d1584640ebb6af3c22
33.3 MB Jan. 4, 2026
20260103/2026-01-03-1767468606-tcp_ldap_3268_names.gz
c1165239b6057130781c22505c396a0a4d6a8166
151.2 KB Jan. 3, 2026
20260103/2026-01-03-1767468606-tcp_ldap_3268_certs.gz
c0121a151f44415cd933e86b02ddadb84d4f87e3
4.5 MB Jan. 3, 2026
20260103/2026-01-03-1767445796-tcp_ldap_3269_names.gz
378d8023ec1ff75ba29c13f5e4210417dc9bce90
176.4 KB Jan. 3, 2026
20260103/2026-01-03-1767445796-tcp_ldap_3269_certs.gz
830269d65754a376bf23462b7bf61b368d807a7b
5.4 MB Jan. 3, 2026
20260103/2026-01-03-1767438884-ftps_990_names.gz
507f0802401b72613951a68a6d179d1550717bbc
5.8 MB Jan. 3, 2026
20260103/2026-01-03-1767438884-ftps_990_certs.gz
299a5b8ce61892d89e933bb395e2edd6204f65d6
306.6 MB Jan. 3, 2026