X.509 certificate metadata observed when communicating with miscellaneous non-HTTPS endpoints, such as IMAPS, POP3S, etc.

Study Details

Study

Project Sonar

Author

Project Sonar | Rapid7

Contact

Rapid7 Labs

Dataset Details

The dataset contains a collection of metadata related to the net new X.509 certificates observed in each study when considering all SSL studies that ran prior. The _hosts and _endpoints files provide mapping between the IPs/endpoints and the fingerprint of the X.509 certificate presented. The _certs file provides a mapping of the net new certificates from a given study and the corresponding fingerprint. The _names file provides a mapping of the X.509 certificate name (CN) to its fingerprint.

Full Dataset Listing

Existing Open Data users can sign in for access. See the About page for information on requesting access.

File Name SHA1-Fingerprint Size Updated At
20260404/2026-04-04-1775261044-ftps_990_names.gz
9df599f1160d0f3480c41b70f7aa6bc4b4f33b4a
5.7 MB April 4, 2026
20260404/2026-04-04-1775261044-ftps_990_certs.gz
c6e1dd4c21c82103cc87cc3ef24f6723376ffad5
293.4 MB April 4, 2026
20260403/2026-04-03-1775249827-tcp_ldap_636_names.gz
9c334040e77e585f52c5060ad4ad62249273a5c1
924.0 KB April 3, 2026
20260403/2026-04-03-1775249827-tcp_ldap_636_certs.gz
652dec0da99b3c0ed66130544254d6a144fc0cae
35.7 MB April 3, 2026
20260403/2026-04-03-1775248451-nntps_563_names.gz
99bc4b6f40bf6f35a0cf559d09cb6aaaf1962eb4
143.7 KB April 4, 2026
20260403/2026-04-03-1775248451-nntps_563_certs.gz
093f42b2ac02a5ead2013e61d49bbf778bc0aa55
6.5 MB April 4, 2026
20260403/2026-04-03-1775241559-tcp_ldap_389_names.gz
176ab1143cec9d864f11f3db43031fcec05f8375
833.4 KB April 3, 2026
20260403/2026-04-03-1775241559-tcp_ldap_389_certs.gz
5113976e80b791714037b59eeeaeaeb4e4d8494e
32.6 MB April 3, 2026
20260403/2026-04-03-1775237186-mqtt_8883_names.gz
68169270eefe80709219f4883a05a51099c28a68
2.5 MB April 3, 2026
20260403/2026-04-03-1775237186-mqtt_8883_certs.gz
3a9b962ad5f08e27818685e4677968ef4913da78
107.9 MB April 3, 2026