About

What issued.live observes, and the limits of those records.

issued.live reads the public Certificate Transparency logs. Every publicly trusted certificate authority must submit the certificates it issues to these append-only logs. Anyone may read them. We read all of them, continuously, and record what appears.

What it records

For each domain we have seen, we keep the certificate observed for it, who issued that certificate, when it expires, and when we first saw the name appear in any log. We also resolve domains in DNS from several vantage points. For each domain we record the addresses it answers with, plus the network and organization those addresses belong to.

What it is not

• Not a registry. We do not issue, sell, renew or transfer domains, and we have no authority over any name. We show registration and expiry dates only where we hold them; until then they read null rather than a guess.
• Not affiliated with the domains it lists. A page describing a domain is an observation about a third party, not a page belonging to them. It carries no relationship to the domain's owner.
• Not a certificate authority. We observe certificates. We do not issue or validate them, and nothing here vouches for one.
• Not real time. We read the logs continuously, but lag between an event and its appearance here is unavoidable. Every record shows what we saw, and when.

Where the data comes from

• Certificate Transparency logs, read directly: our primary source of new names.
• ICANN zone file feeds, for newly registered domains.
• Our own DNS resolvers, for hosting addresses.
• worldip.io, for the network, organization and location of an address.

Accuracy

Everything here is observational. A record can be stale, a log can omit an entry, and a resolver can get a different answer than you would. Where a field is unknown we leave it empty rather than infer it. If you believe a record is wrong, tell us and include the domain.

Who runs it

Tuxxin LLC operates issued.live.

Last updated August 30, 2026.