How would a CA submit a certificate to Certificate Transparency logs? Preferably Google's Pilot or Rocketeer CT.

Would one submit via an API, SDK, library? If submitting should it be a render of a certificate (without log extensions) or the final certificate?


The operation of Certificate Transparency is specified in RFC 6962 and the submission method is specified in sections 4.1 and 4.2. A shortened version:

4.1. Add Chain to Log

POST https://<log server>/ct/v1/add-chain

4.2. Add PreCertChain to Log

POST https://<log server>/ct/v1/add-pre-chain

The format for the POST requests is specified in the beginning of section 4:

Messages are sent as HTTPS GET or POST requests. Parameters for POSTs and all responses are encoded as JavaScript Object Notation (JSON) objects [RFC4627].

  • Hi Esa. Could you provide an example of how the data would look in JSON format? I know what JSON is, I'm just wondering the specifcation of which fields are needed... is their a CSR or a CRT? - Thanks for your answer.' – Nathanna Nov 8 '20 at 7:44
  • 1
    You could first read through the RFC 6962. The section 3 has structures for the messages, and JSON is the input format. – Esa Jokinen Nov 8 '20 at 7:53
  • Did you find the answer to this @Nathanna? Trying to work this out myself. – devnull Mar 12 at 21:31

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.