CA Transparency

This repository contains the data and code used for measuring/analyzing the operational features of CAs in the modern web PKI as of July 1, 2020. Please see the paper or contact [email protected] for more details.

Repo Structure

• data/fides_cert_operators_20200701.psv: Pipe ("|") separated fields for 9,154 CA certificates and their Fides CA operator label and CCADB label
• data/fides_clusters_20200701.psv: Pipe ("|") separated fields for Fides clusters
• data/fides_edges_20200701.psv: Pipe ("|") separated fields for Fides cluster edges
• data/cert_fps: certificate fingerprints generated by different issuers
• data/cert_network_infrastructure: network infrastructure utilized by different issuers
• data/fides_cluster_ccadb_owner_resolved.psv: manual resolution of SSPKIs with conflicting CCADB labels
• data/fides_sspki_ccadb_owner_resolved.psv: manual resolution of Fides clusters with conflicting CCADB labels
• scripts/ocr-pdf-adobe.sh: OSA script to automate Adobe Acrobat's OCR functionality. PDFs that were not OCR-able by Adobe Acrobat can be manually OCR'd using Google Drive/Documents.

Additional Resources

• asn1-fingerprint: Go library for ASN1 certificate fingerprints.
• ct-download: Go utility for downloading unique CT certificates.