ccadb_data

CCADB CSV report archive and Go parsing library.

CCADB CSV Reports

The following CCADB CSV Reports are included in this repository:

• AllCertificatePEMsCSVFormat_NotBeforeYear_YYYY, where YYYY is every year since 1994.

• AllCertificateRecordsCSVFormatv4.

Versioning

The latest versions of the upstream CSV reports are fetched hourly by a GitHub Action. Any changes are automatically committed. If one or more CA certificates is newly disclosed to CCADB, a Release is tagged using a Scalable Calendar Versioning format (v1.YYYYMMDD.HHMMSS).

Parsing Library

The parsing library currently provides functions that assist ctlint with verifying CT SCTs and pkimetal with detecting certificate profiles.

For documentation, see here.

Command-line Tools

• The ski_spki tool produces ski_spkisha256.csv, which maps Subject Key Identifiers to the corresponding SHA-256(SubjectPublicKeyInfo) hashes needed for verifying CT SCTs.

• The url_check tool performs a basic liveness check on URLs found in AllCertificateRecordsCSVFormatv4.