Sectigo Certificate Transparency Logs: Accepted Roots

Sectigo's CT logs are powered by the following software:

• RFC6962 logs: Trillian with the Trillian CT personality.
• Static CT logs: TesseraCT, which uses the Tessera library.

Our first generation RFC6962 logs use Trillian's MySQL backend with a MariaDB database, whereas our second generation RFC6962 logs use Trillian's PostgreSQL backend with a PostgreSQL database. Our Static CT logs use the POSIX storage backend.

All of our logs are behind Cloudflare, and our RFC6962 logs use the CF_CTile caching proxy.

Production logs

Our production logs accept all root certificates that are trusted for the server authentication trust purpose in one or more of the Microsoft, Mozilla, Chrome, Apple, and 360 Browser root programs.

Mammoth and Sabre were our first generation production logs (RFC6962), currently included in the Chrome and Apple log programs, but no longer accepting entries.

Elephant and Tiger are our second generation production logs (RFC6962), currently included in the Chrome and Apple log programs.

Monument and Statue are our third generation production logs (Static CT), soon to be submitted for inclusion in the Chrome and Apple log programs.

Non-Production logs

Our non-production logs accept various root certificates that are no longer trusted or are known to CCADB but not yet trusted. Our first and second generation non-production logs also accept(ed) all root certificates that are trusted for any trust purpose in one or more of the Microsoft, Mozilla, Chrome, Apple, 360 Browser, Java, and Android root programs.

Dodo was our first generation non-production log (RFC6962).

Dumbo is our second generation non-production log (RFC6962).

Standee is our third generation non-production log (Static CT).

Test logs

Our test logs accept root certificates that are not publicly trusted and that have been submitted by community members.

Dodo was also our first generation test log (RFC6962).

Tigger is our second generation test log (RFC6962). We welcome Pull Requests to add other root certificates to Tigger.