Certificate Garden

Connecting
An original pixel-art garden at twilight, with six planting beds, warm lanterns and a winding stone path.

Let's Encrypt

0 observed

Google Trust Services

0 observed

DigiCert

0 observed

Sectigo

0 observed

Amazon

0 observed

Other issuers

0 observed

The garden is waiting for its first certificate.
Only real observations grow here.

0observed
0in bloom

Waiting for the feed

Cyan glow means DNS resolves.

About these observations

One Google Certificate Transparency log is sampled, not the whole internet. Blooms fade with time in the garden, not certificate expiry. DNS checks use the first valid exact hostname; wildcards are skipped. DNS resolution does not prove a website works or is safe. Cloudflare receives the queried hostname.

Connecting to a public Certificate Transparency log. Sampled log entries, never simulated events.

Scroll across the garden to explore all six patches.

Certificate details

DNS check pending

Domain names

An observation is not necessarily a new website. Certificates are renewed, and the same certificate can appear in multiple logs.

Recent blooms

The latest 30 displayed observations. Search highlights matching flowers and filters this list.

No matching blooms yet.

About the garden

Public Certificate Transparency logs record TLS certificates. This garden samples recent entries from a Google Certificate Transparency log and lets them bloom in their issuer’s patch.

Colour identifies the patch; larger blooms cover more domain names. Flowers fade after 90 seconds of garden time. This is observation age, not certificate expiry.

The garden polls a small sample of recent log entries every 15 seconds and keeps at most 180 flowers. Counters include all valid observations received while active, including repeat log appearances. They are not global issuance totals.

Pause freezes the garden and stops the connection. Hidden tabs also disconnect. Resuming observes new arrivals; missed events are not replayed.

Everything runs in your browser. No account, database, or stored history. Domain search stays here. Google receives the requests to its public log.

Learn about Certificate Transparency