About

What issued.live observes, and what it does not.

issued.live reads the public Certificate Transparency logs. Every publicly trusted certificate authority is required to submit the certificates it issues to these append-only logs, and anyone may read them. We read all of them, continuously, and record what appears.

What it records

For each domain we have seen, we keep the certificate observed for it, who issued that certificate, when it expires, and when we first saw the name appear in any log. Separately, we resolve domains in DNS from several vantage points and record the addresses they answer with, along with the network and organization those addresses belong to.

What it is not

• Not a registry. We do not issue, sell, renew or transfer domains, and we have no authority over any name. Registration and expiry dates are shown only where we hold them; until then they read null, never a guess.
• Not affiliated with the domains it lists. A page describing a domain is an observation about a third party, not a page belonging to them, and carries no relationship to the domain's owner.
• Not a certificate authority. We observe certificates; we do not issue or validate them, and nothing here should be read as vouching for one.
• Not real time. Logs are read continuously but there is unavoidable lag between an event and its appearance here. Every record is what we saw, and when.

Sources

• Certificate Transparency logs, read directly — our primary source of new names.
• ICANN zone file feeds, for newly registered domains.
• Our own DNS resolvers, for hosting addresses.
• worldip.io, for the network, organization and location of an address.

Accuracy

Everything here is observational. A record can be stale, a log can omit an entry, and a resolver can be served a different answer than you would be. Where a field is unknown we leave it empty rather than infer it. If you believe a record is wrong, tell us and include the domain.

Who runs it

issued.live is operated by Tuxxin LLC.

Last updated August 30, 2026.