X.509 certificate metadata observed when communicating with miscellaneous non-HTTPS endpoints, such as IMAPS, POP3S, etc.

Study Details

Study

Project Sonar

Author

Project Sonar | Rapid7

Contact

Rapid7 Labs

Dataset Details

The dataset contains a collection of metadata related to the net new X.509 certificates observed in each study when considering all SSL studies that ran prior. The _hosts and _endpoints files provide mapping between the IPs/endpoints and the fingerprint of the X.509 certificate presented. The _certs file provides a mapping of the net new certificates from a given study and the corresponding fingerprint. The _names file provides a mapping of the X.509 certificate name (CN) to its fingerprint.

Full Dataset Listing

Existing Open Data users can sign in for access. See the About page for information on requesting access.

File Name SHA1-Fingerprint Size Updated At
20260103/2026-01-03-1767445796-tcp_ldap_3269_names.gz
378d8023ec1ff75ba29c13f5e4210417dc9bce90
176.4 KB Jan. 3, 2026
20260103/2026-01-03-1767445796-tcp_ldap_3269_certs.gz
830269d65754a376bf23462b7bf61b368d807a7b
5.4 MB Jan. 3, 2026
20260103/2026-01-03-1767438884-ftps_990_names.gz
507f0802401b72613951a68a6d179d1550717bbc
5.8 MB Jan. 3, 2026
20260103/2026-01-03-1767438884-ftps_990_certs.gz
299a5b8ce61892d89e933bb395e2edd6204f65d6
306.6 MB Jan. 3, 2026
20260103/2026-01-03-1767431893-nntps_563_names.gz
84b5712ff3a5bcb0fa52d0abc85b56e6686bdf9f
149.8 KB Jan. 3, 2026
20260103/2026-01-03-1767431893-nntps_563_certs.gz
342d72d0f53549db72d6e099c5df872718faa360
6.7 MB Jan. 3, 2026
20260103/2026-01-03-1767426243-mqtt_8883_names.gz
fa6e7bd603e79eceac021fae4ca3a3c17c37d949
2.3 MB Jan. 3, 2026
20260103/2026-01-03-1767426243-mqtt_8883_certs.gz
4f2ee855911f16c838aeaa55b4bfb441489ed9a3
98.0 MB Jan. 3, 2026
20260103/2026-01-03-1767409650-tcp_ldap_636_names.gz
bb128db7054becf40558668d4d598a3ed01f43ea
971.7 KB Jan. 3, 2026
20260103/2026-01-03-1767409650-tcp_ldap_636_certs.gz
1c0b0344a730d1551545d0186610886e234ca95a
37.2 MB Jan. 3, 2026