Certificate Transparency

Certificate Transparency endpoints return regular JSON bodies (not newline-delimited streams). Query parameters and response shapes are defined in the OpenAPI specification for each path below.

Search

Summary: Search certificate transparency names by pattern.

Behavior: Returns a JSON array of matching names. The response may include the X-Has-More-Value header when more matches exist than were returned in the body for the requested limit. Query parameters include pattern (required), optional kind, limit, include_precert, and field. Successful responses are 200 with certificate transparency search results. The API may return 400 for a bad request, 401 / 403 for auth problems, and 429 when rate limited.

Scope: ct

export API_TOKEN="YOUR_API_TOKEN"

curl -sS -D - "https://api.haveibeensquatted.com/v1/ct/search?pattern=%5Eexample&limit=50" \
  -H "Authorization: Bearer $API_TOKEN"

Search domains

Summary: Search certificate transparency data for exact FQDNs.

Behavior: Repeat the fqdn query parameter to request multiple exact names in one call. Optional include_precert is supported. 200 returns certificate transparency search results for the requested names. Errors: 400, 401, 403, 429 as documented in the OpenAPI specification.

Scope: ct

export API_TOKEN="YOUR_API_TOKEN"

curl -sS "https://api.haveibeensquatted.com/v1/ct/search/domains?fqdn=www.example.com&fqdn=api.example.com" \
  -H "Authorization: Bearer $API_TOKEN"

Hydrate

Summary: Hydrate certificate transparency occurrences into certificate details.

Behavior: Pass one or more occurrence IDs as the occ query parameter in {log_id}:{index} format (repeat occ for multiple values). 200 returns hydrated occurrence results as JSON. Errors: 400, 401, 403, 429.

Scope: ct

export API_TOKEN="YOUR_API_TOKEN"

curl -sS "https://api.haveibeensquatted.com/v1/ct/hydrate?occ=86%3A3800460171" \
  -H "Authorization: Bearer $API_TOKEN"