Skip to content
/ lectl Public
forked from sahsanu/lectl

Script to check issued certificates by Let's Encrypt on CTL (Certificate Transparency Log) using https://crt.sh

License

Notifications You must be signed in to change notification settings

pgporada/lectl

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

32 Commits
 
 
 
 
 
 

Repository files navigation

lectl

Script to check issued certificates by Let's Encrypt on CTL (Certificate Transparency Log) using https://crt.sh

Note: crt.sh is property of COMODO CA Limited 2015-2017

Usage

lectl [-h|--help] [-v|--version] [-l|--extraline] [-s|--sans] [-e|--expired] [-u|--utc] domain

Options

-h | --help      [Default: false] shows the help file.

-v | --version   shows the script version.

-l | --extraline [Default: false] adds extra line separator between found
                 certificates (when there are several certs with several
                 sans adding this extra line it's easier to read the output).

-s | --sans      [Default: false] shows all domains included in the
                 certificate as SANs. If you don't use this option you will
                 only see the Common Name.

-e | --expired   [Default: false] shows all certs issued for the specified
                 domain, including the certs that are already expired.

-u | --utc       [Default: false] shows the dates in UTC (GMT) instead of
                 your machine time zone.

-m               [Default: 100] searchs for more or less than 100 certificates
                 per domain OR subdomain. It means that if for example you use
                 option -m25 you could receive an output of max 50 certs (25 for
                 the domain and 25 for *.domain).
                 If this option is not used, lectl searchs only for last 100
                 certificates. If the option is used it searches by default
                 for last 1000 certificates.
                 If you want to search for more or less certificates, append
                 the number after the option with no spaces (Ex: -m500). If
                 you specify a number, then the option must be specified
                 independently.
                 Wrong: lectl -seulm500 domain.tld
                 Good: lectl -seul -m500 domain.tld

Examples

lectl letsencryt.org
lectl -s -e -u -l letsencryt.org
lectl -seulm letsencryt.org
lectl -lumse letsencryt.org
lectl -su --extraline letsencryt.org
lectl -u letsencryt.org -esm
lectl -seul -m500 letsencryt.org
...and so on

About

Script to check issued certificates by Let's Encrypt on CTL (Certificate Transparency Log) using https://crt.sh

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Shell 100.0%