- Free allowance
- Not stated: crt.sh is a public certificate transparency search with a JSON output and prints no allowance, quota or price
- Verdict
- caveatusable, with a named limit or an unprobed read path
- Cost
- not stated
- Identity
- anonymousno card, no phone
- Binding limit
- request-ratea single wildcard query alist.%25 returned a truncated result set (the four known hosts alist.qsesvick.top, alist.tianmoy.cn, alist.shenzjd.com and alist.jiejingfan.vip were all missing from it) and crt.sh answered 502, 404 or no reply...
- Evidence
- measured8 sources; a live request was made and its output kept
- Freshness
- stale on 2026-11-26checked 2026-11-04 (live); stale on 2026-11-26
| Free tier | not stated: crt.sh is a public certificate transparency search with a JSON output and prints no allowance, quota or price unit none; metered on none |
|---|
| Price | none stated |
|---|
| Limits | - request-rate (binding) a single wildcard query alist.%25 returned a truncated result set (the four known hosts alist.qsesvick.top, alist.tianmoy.cn, alist.shenzjd.com and alist.jiejingfan.vip were all missing from it) and crt.sh answered 502, 404 or no reply on many attempts; one query per next character, retried, was needed source
|
|---|
| Binding | request-rate crt.sh throttles and truncates wide wildcard queries, so a prefix partition is required and the result is a lower bound. |
|---|
| Identity | anonymous an open search page and JSON endpoint, read with no account |
|---|
| Egress | no egress; it is a search answer, and one prefix query returned a JSON body of several hundred KB |
|---|
| Per-object cap | not applicable; it is a search over issued certificates |
|---|
| Retention | a certificate stays listed after it expires; exclude=expired limits a query to certificates that are still valid |
|---|
| Interface | rest |
|---|
| Tooling | GET https://crt.sh/?q=alist.PREFIX%25&output=json&exclude=expired, one query per next character; a read client needs no login. The hostnames then go through GET /api/public/settings and GET /api/me on each host; the listing step is a POST that a GET-only probe cannot make |
|---|
| Composes with | a hostname list for the capability probe in the public-instances protocol, to be run after the hosted index lists (bangumi.tv, kuhehe.github.io) and in addition to them |
|---|
| Reliability | crt.sh answered HTTP 502, 404 or no reply on a share of its requests and needed repeated tries; a hostname in CT is a certificate, not a live instance. |
|---|
| Notes | Certificate transparency lists hosts whose name starts with alist or openlist, including hosts that no forum or GitHub index names. It holds 7447 distinct hostnames with such a label (wildcard form included), 4 with an existing record. Of these, 2356 return the AList or OpenList envelope on GET /api/public/settings and 588 an enabled guest session on GET /api/me, so 586 new hostnames pass steps 0 and 1. The listing step (POST /api/fs/list) is not done, so none counts as a readable instance. Hosts named pan, cloud or share are not reachable by this channel. |
|---|