{"eid":"crt","name":"crt.sh certificate transparency search","domain":"crt.sh","resolved_by":"domain","topics":["netdisk-pan"],"n_records":1,"best_vorder":1,"review":null,"aliases":["crt.sh","crt.sh certificate transparency search","crt.sh certificate transparency search (AList and OpenList hostnames)"],"records":[{"rid":"netdisk-pan/crt-sh-alist-openlist-ct-channel","card":{"rid":"netdisk-pan/crt-sh-alist-openlist-ct-channel","eid":"crt","topic":"netdisk-pan","slug":"crt-sh-alist-openlist-ct-channel","provider":"crt.sh certificate transparency search (AList and OpenList hostnames)","url":"https://crt.sh/","domain":"crt.sh","category":"index-list","tier":null,"verdict":"qualifies-with-caveat","vorder":1,"grp":"usable","self_hosted":0,"confidence":"measured","binding":"request-rate","identity_kind":"anonymous","identity_basis":"stated","needs_card":0,"needs_phone":0,"needs_id":0,"needs_institution":0,"country":null,"crypto":null,"interfaces":"rest","egress_metered":0,"per_object_bytes":null,"retention_days":null,"verified_at":"2026-11-04T02:15:21.167Z","verified_basis":"live","checked_on":"2026-11-04","stale_on":"2026-11-26","n_evidence":8,"usd_month":null,"usd_per_tb_month":null,"summary":"not stated: crt.sh is a public certificate transparency search with a JSON output and prints no allowance, quota or price","duplicate_of":null,"n_unknown":0,"free_unit":"none"},"record":{"topic":"netdisk-pan","slug":"crt-sh-alist-openlist-ct-channel","provider":"crt.sh certificate transparency search (AList and OpenList hostnames)","url":"https://crt.sh/","category":"index-list","free_tier":{"stated":"not stated: crt.sh is a public certificate transparency search with a JSON output and prints no allowance, quota or price","unit":"none","metered_on":"none","source_url":"https://crt.sh/?q=alist.a%25&output=json&exclude=expired","read_on":"2026-11-03"},"per_object_cap":{"stated":"not applicable; it is a search over issued certificates","source_url":"https://crt.sh/?q=alist.a%25&output=json&exclude=expired"},"retention":{"stated":"a certificate stays listed after it expires; exclude=expired limits a query to certificates that are still valid","days":null,"source_url":"https://crt.sh/?q=alist.a%25&output=json&exclude=expired"},"egress":{"terms":"no egress; it is a search answer, and one prefix query returned a JSON body of several hundred KB","metered":false,"source_url":"https://crt.sh/?q=alist.a%25&output=json&exclude=expired"},"interface":["rest"],"tooling":"GET https://crt.sh/?q=alist.PREFIX%25&output=json&exclude=expired, one query per next character; a read client needs no login. The hostnames then go through GET /api/public/settings and GET /api/me on each host; the listing step is a POST that a GET-only probe cannot make","chaining":"a hostname list for the capability probe in the public-instances protocol, to be run after the hosted index lists (bangumi.tv, kuhehe.github.io) and in addition to them","limits":[{"kind":"request-rate","value":"a single wildcard query alist.%25 returned a truncated result set (the four known hosts alist.qsesvick.top, alist.tianmoy.cn, alist.shenzjd.com and alist.jiejingfan.vip were all missing from it) and crt.sh answered 502, 404 or no reply on many attempts; one query per next character, retried, was needed","source":"https://crt.sh/?q=alist.%25&output=json"}],"identity_cost":{"kind":"anonymous","detail":"an open search page and JSON endpoint, read with no account","country":null},"reliability_note":"crt.sh answered HTTP 502, 404 or no reply on a share of its requests and needed repeated tries; a hostname in CT is a certificate, not a live instance.","confidence":"measured","evidence":[{"url":"probe:crt.sh-alist-a-body","date":"2026-11-03","proved":"the prefix query alist.a%25 with exclude=expired returns certificates whose names carry an alist label, such as the wildcard *.alist.anhdv.workers.dev","capture":"sha256:ccf4e04be45ae1d71dd6409c1c1dae07782e1d21c52453e1bc0d8bf52bf554e2","quote":"\"common_name\":\"anhdv.workers.dev\",\"name_value\":\"*.alist.anhdv.workers.dev\""},{"url":"probe:crt.sh-openlist-a-body","date":"2026-11-03","proved":"the prefix query openlist.a%25 with exclude=expired returns certificates whose names carry an openlist label, such as openlist.akz.cc.cd","capture":"sha256:752bbd2cb48601a932cbf5e6364d7249e60dd68b568e50944396bab6f2a7199a","quote":"\"common_name\":\"openlist.akz.cc.cd\",\"name_value\":\"openlist.akz.cc.cd\""},{"url":"probe:crt.sh-alist-tianmoy-body","date":"2026-11-03","proved":"a direct query for a known instance finds its certificate, so the instance is in CT even where the broad alist.%25 query did not return it","capture":"sha256:2e03b5526ebfd78ebbf14debaf25d33da19ed561acd18337fa84cc49fc9280f2","quote":"\"common_name\":\"alist.tianmoy.cn\",\"name_value\":\"alist.tianmoy.cn\""},{"url":"probe:openlist.011206.xyz-me","date":"2026-11-03","proved":"a hostname found only through CT, openlist.011206.xyz, answers GET /api/me with an enabled guest session, which is step 1 of the instance protocol","capture":"sha256:92b5f17df4530587fe3412ec271b5970bf2cf3764f1adab0b418c9d9a10368fe","quote":"\"username\":\"guest\",\"password\":\"\",\"base_path\":\"/\",\"role\":1,\"disabled\":false"},{"url":"probe:crt-sh-alist-openlist-ct-hostnames","date":"2026-11-04","proved":"the stored CT hostname list holds 7447 lines, one distinct hostname with an alist or openlist label each","capture":"sha256:e47630d7f625ce61eb6469313ffb18decb8d26e8435460ede8ba07b91bf79b51","quote":"alist-barbers.com"},{"url":"probe:crt-sh-alist-openlist-settings-hosts","date":"2026-11-04","proved":"the stored list of hosts that answered GET /api/public/settings holds 2356 lines","capture":"sha256:422e5df1133eb71181bbf74f14e1623e10713162ca5771bdc418a2f504e12ecb","quote":"alist.002199.xyz"},{"url":"probe:crt-sh-alist-openlist-guest-hosts","date":"2026-11-04","proved":"the stored list of guest-enabled hosts holds 588 lines","capture":"sha256:28cb921d51cc591ca2e910a7877f05ab5f38ab6676354929ef9d3a907432c458","quote":"alist.0101111.xyz"},{"url":"probe:crt-sh-alist-openlist-guest-hosts","date":"2026-11-04","proved":"the stored guest-enabled host list holds 588 lines","capture":"sha256:28cb921d51cc591ca2e910a7877f05ab5f38ab6676354929ef9d3a907432c458","quote":"alist.0101111.xyz"}],"verdict":"qualifies-with-caveat","verified_at":"2026-11-04T02:15:21.167Z","binding":"request-rate","notes":"Certificate transparency lists hosts whose name starts with alist or openlist, including hosts that no forum or GitHub index names. It holds 7447 distinct hostnames with such a label (wildcard form included), 4 with an existing record. Of these, 2356 return the AList or OpenList envelope on GET /api/public/settings and 588 an enabled guest session on GET /api/me, so 586 new hostnames pass steps 0 and 1. The listing step (POST /api/fs/list) is not done, so none counts as a readable instance. Hosts named pan, cloud or share are not reachable by this channel.","extras":{"access_mode":"index","ct_hostnames":7447,"with_existing_record":4,"answered_settings":2356,"guest_enabled":588,"new_guest_enabled":586,"listing_step_run":false},"binding_note":"crt.sh throttles and truncates wide wildcard queries, so a prefix partition is required and the result is a lower bound."},"claims":[{"path":"$.free_tier.stated","kind":"free-quota","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.limits[0].value","kind":"limit:request-rate","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"}],"unknown":[],"history":[],"drift":[]}]}