Cloudflare transitioned Certificate Transparency Monitoring to general availability, implementing SPKI SHA-256 hash matching to filter out internal certificate renewal alerts and eliminate noise.

Key Details

• Certificate Transparency Monitoring is now generally available and active across more than 650,000 customer domains.
• Implemented spki_sha256 matching between the certificate ordering service and alerting flow to automatically suppress alerts for Cloudflare-managed certificates including Universal SSL and Advanced Certificate Manager.
• Updated alert emails to include affected hostnames in subject lines and direct links to certificates in the Cloudflare dashboard.
• Announced upcoming integration to route Certificate Transparency alerts via Cloudflare Notifications to webhooks and PagerDuty.

In This Story