X.509 certificate metadata observed when communicating with miscellaneous non-HTTPS endpoints, such as IMAPS, POP3S, etc.

Study Details

Study

Project Sonar

Author

Project Sonar | Rapid7

Contact

Rapid7 Labs

Dataset Details

The dataset contains a collection of metadata related to the net new X.509 certificates observed in each study when considering all SSL studies that ran prior. The _hosts and _endpoints files provide mapping between the IPs/endpoints and the fingerprint of the X.509 certificate presented. The _certs file provides a mapping of the net new certificates from a given study and the corresponding fingerprint. The _names file provides a mapping of the X.509 certificate name (CN) to its fingerprint.

Full Dataset Listing

Existing Open Data users can sign in for access. See the About page for information on requesting access.

File Name SHA1-Fingerprint Size Updated At
20250814/2025-08-14-1755145586-smtp_starttls_587_names.gz
86e0f02197142a1708a7a973aba6afba257f3058
50.1 MB Aug. 14, 2025
20250814/2025-08-14-1755145586-smtp_starttls_587_certs.gz
a31ccc7a0648478b184cba69eb7ef9752f27c608
2.4 GB Aug. 14, 2025
20250804/2025-08-04-1754287836-tcp_dns_853_names.gz
baaf82918664500ba7b6023190de0aa73bb2f1b9
1.6 MB Aug. 4, 2025
20250804/2025-08-04-1754287836-tcp_dns_853_hosts.gz
538e9295e6b8b61da4cd57b901bd60efb882d28d
4.4 MB Aug. 4, 2025
20250804/2025-08-04-1754287836-tcp_dns_853_endpoints.gz
3809a21fc61c7987449de47ec0204e0700189cec
4.5 MB Aug. 4, 2025
20250804/2025-08-04-1754287836-tcp_dns_853_certs.gz
8d14b7959881768abd3bb3aae8337ffd3a0b15a4
32.1 MB Aug. 4, 2025
20250803/2025-08-03-1754264809-mqtt_8883_names.gz
ace9b23288e8b008af55c54f40eabe55287ed04e
1.2 MB Aug. 4, 2025
20250803/2025-08-03-1754264809-mqtt_8883_hosts.gz
998baabba41f5eb0b65ed135e8ac302dbd3c075f
2.0 MB Aug. 4, 2025
20250803/2025-08-03-1754264809-mqtt_8883_endpoints.gz
15cf784af618fa72b0e0b731d35c15016202d323
2.1 MB Aug. 4, 2025
20250803/2025-08-03-1754264809-mqtt_8883_certs.gz
309864f16097d28225074d42c536ca26658e74e7
31.3 MB Aug. 4, 2025