// What this register proves about itself
Proof of absence
Ask whether a domain was listed on a given date and get a cryptographic answer, not a lookup. Two adjacent leaves with consecutive indices in a sorted tree sealed at that date — nothing can sit between them. A false claim of past certification is disproved by arithmetic.
Append-only, provably
An RFC 6962 consistency proof shows the register at any past size is a prefix of the register now. No entry has been inserted behind an earlier position — including by the operator. It verifies with any standard Certificate Transparency verifier, not one of ours.
Revocations stay readable
A delisted entry is not deleted. The revocation is sealed with its reason and the full history stays public. Listed from one date, revoked on another, and why — permanently. No badge scheme does this, because quietly dropping customers is the point of a badge.
Nobody is listed by us
A domain lists itself by serving a one-time token at its own address. The operator cannot add you, and cannot claim you asked. Domain control is proved the same way withdrawal is proved.
Check the register against itself.
No account, no key. Type any domain — one that is listed, one that never was, one that was removed. The answer comes back as a proof you can recompute yourself.
// Register
loading…
| Domain | Status | Failing checks | Last checked | Listed since |
|---|---|---|---|---|
| Loading register… | ||||
What a listing is not
- Not a certification. Nobody has been certified by anyone.
- Not a statement that any law applies to a listed domain, or that a listed domain satisfies it. Whether a regulation applies to an organisation is a question for that organisation's own advisers.
- Not an audit. No third party has audited this register or any domain on it.
- Not a claim about anything a domain did not seal. A check observes what a URL served at a moment in time.
- Being listed and being sealed are separate things, and neither is consent to the other.
List your own domain.
Two steps, no account, no approval queue. You prove you control the domain and the register runs its checks in the open. Free.
Step 1 — request a token
Step 2 — serve it, then claim
Suite — · every route on this page is public and unauthenticated ·
spec ·
raw list ·
checkpoints ·
live roots ·
seal check