Skip to main content

NOTE: This tool is unmaintained, though at least somewhat still works. The official mechanism for querying CRLite is now the rust-query-crlite tool:

See the Wiki

Query CRLite Status

This tool reads public data from the CRLite service to provide some useful status pertaining to recent runs.

It maintains a local database in your ~/.crlitedb/audits folder, which is the same general place as the moz_crlite_query tool defaults.

Install from PyPi:

pip install crlite_status

Calling with only a number will show basic details of that many recent runs:

→ crlite_status 6
                                                          Data sizes
┏━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━┳━━━━━━━━━━┳━━━━━━━━━━━━━━━┳━━━━━━━━━━━━┳━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━┓
┃ Run ID     ┃ Run Time          ┃ Filter   ┃ Filter Layers ┃ Stash      ┃ Known Revoked ┃ Known Not        ┃ Period Covered ┃
┃            ┃                   ┃          ┃               ┃            ┃               ┃ Revoked          ┃                ┃
┡━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━━━━╇━━━━━━━━━━╇━━━━━━━━━━━━━━━╇━━━━━━━━━━━━╇━━━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━┩
│ 20200715-0 │ 2020-07-15 23:30Z │ 4.716 MB │ 27            │ 241.846 kB │ 3,627,091     │ 85,411,848       │ 1 day, 5:29:37 │
│ 20200714-3 │ 2020-07-14 18:00Z │ 4.713 MB │ 27            │ 42.293 kB  │ 3,624,884     │ 85,318,616       │ 5:59:55        │
│ 20200714-2 │ 2020-07-14 12:00Z │ 4.715 MB │ 27            │ 52.959 kB  │ 3,625,239     │ 85,279,722       │ 6:00:15        │
│ 20200714-1 │ 2020-07-14 06:00Z │ 4.715 MB │ 28            │ 20.627 kB  │ 3,625,180     │ 85,340,063       │ 5:59:46        │
│ 20200714-0 │ 2020-07-14 00:00Z │ 4.716 MB │ 27            │ 86.515 kB  │ 3,625,935     │ 85,282,318       │ 6:00:15        │
│ 20200713-3 │ 2020-07-13 18:00Z │ 4.712 MB │ 27            │ 46.512 kB  │ 3,623,297     │ 85,239,760       │                │
└────────────┴───────────────────┴──────────┴───────────────┴────────────┴───────────────┴──────────────────┴────────────────┘

You can also dig into CRL audit data with the --crl flag:

→ crlite_status 2 --crl
                                                          Data sizes
┏━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━┳━━━━━━━━━━┳━━━━━━━━━━━━━━━┳━━━━━━━━━━━━┳━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━┓
┃ Run ID     ┃ Run Time          ┃ Filter   ┃ Filter Layers ┃ Stash      ┃ Known Revoked ┃ Known Not        ┃ Period Covered ┃
┃            ┃                   ┃          ┃               ┃            ┃               ┃ Revoked          ┃                ┃
┡━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━━━━╇━━━━━━━━━━╇━━━━━━━━━━━━━━━╇━━━━━━━━━━━━╇━━━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━┩
│ 20200715-0 │ 2020-07-15 23:30Z │ 4.716 MB │ 27            │ 241.846 kB │ 3,627,091     │ 85,411,848       │ 1 day, 5:29:37 │
│ 20200714-3 │ 2020-07-14 18:00Z │ 4.713 MB │ 27            │ 42.293 kB  │ 3,624,884     │ 85,318,616       │ 5:59:55        │
└────────────┴───────────────────┴──────────┴───────────────┴────────────┴───────────────┴──────────────────┴────────────────┘
                                   20200715-0 audit entries
┏━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━━━━━┳━━━━━━━┓
┃ Issuer                                                       ┃ Kind                ┃ Count ┃
┡━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━━━━━━╇━━━━━━━┩
│ CN=Dodo Sign TLS ICA RSA R1,O=Dodo Sign                      │ Older Than Previous │ 1     │
│ Ltd,L=Ebene,ST=Plaines Wilhems,C=MU                          │                     │       │
│ CN=Domain The Net Technologies Ltd CA for EV SSL R2,O=Domain │ Older Than Previous │ 1     │
│ The Net Technologies Ltd,C=IL                                │                     │       │
│ CN=Go Daddy Secure Certificate Authority -                   │ Older Than Previous │ 66    │
│ G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\,   │                     │       │
│ Inc.,L=Scottsdale,ST=Arizona,C=US                            │                     │       │
│ CN=TeleSec Business CA 1,OU=T-Systems Trust                  │ Failed Download     │ 1     │
│ Center,O=T-Systems International GmbH,C=DE                   │                     │       │
│ CN=Starfield Secure Certificate Authority -                  │ Older Than Previous │ 16    │
│ G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield │                     │       │
│ Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US             │                     │       │
│ CN=Domain The Net Technologies Ltd CA for SSL R2,O=Domain    │ Older Than Previous │ 1     │
│ The Net Technologies Ltd,C=IL                                │                     │       │
│ CN=Amazon,OU=Server CA 3B,O=Amazon,C=US                      │ Older Than Previous │ 1     │
│ CN=Starfield Root Certificate Authority -                    │ Very Old, Blocked   │ 1     │
│ G2,OU=https://certs.starfieldtech.com/repository/,O=Starfie… │                     │       │
│ Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US             │                     │       │
│ OU=醫事憑證管理中心,O=行政院,C=TW                               │ Failed Download     │ 1     │
│ CN=SSL.com EV SSL Intermediate CA ECC R2,O=SSL               │ Older Than Previous │ 1     │
│ Corp,L=Houston,ST=Texas,C=US                                 │                     │       │
└──────────────────────────────────────────────────────────────┴─────────────────────┴───────┘
                                   20200714-3 audit entries
┏━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━━━━━━┳━━━━━━━┓
┃ Issuer                                                           ┃ Kind            ┃ Count ┃
┡━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━╇━━━━━━━━━━━━━━━━━╇━━━━━━━┩
│ CN=Starfield Secure Certificate Authority -                      │ Failed Verify   │ 1     │
│ G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield     │                 │       │
│ Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US                 │                 │       │
│ OU=醫事憑證管理中心,O=行政院,C=TW                                   │ Failed Download │ 1     │
│ CN=Go Daddy Secure Certificate Authority -                       │ Failed Verify   │ 80    │
│ G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\,       │                 │       │
│ Inc.,L=Scottsdale,ST=Arizona,C=US                                │                 │       │
│ CN=TeleSec Business CA 1,OU=T-Systems Trust Center,O=T-Systems   │ Failed Download │ 1     │
│ International GmbH,C=DE                                          │                 │       │
│ CN=SHECA RSA Organization Validation Server CA                   │ Failed Download │ 5     │
│ G3,O=UniTrust,C=CN                                               │                 │       │
│ CN=Starfield Root Certificate Authority -                        │ Old             │ 1     │
│ G2,OU=https://certs.starfieldtech.com/repository/,O=Starfield    │                 │       │
│ Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US                 │                 │       │
└──────────────────────────────────────────────────────────────────┴─────────────────┴───────┘

When using the --crl option, more fine-grained details can be obtained from the JSON files in ~/.crlite_db/audits/, or you can use --crl-details path_to_file.html and get a rich-text version.

Metadata

Release files for crlite-status 0.0.8

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for crlite-status 0.0.8
File Size Uploaded Provenance Actions
crlite_status-0.0.8.tar.gz 32.1 kB Without provenance Details for crlite_status-0.0.8.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for crlite-status 0.0.8
File Interpreter ABI Platform Actions
crlite_status-0.0.8-py3-none-any.whl Python 3 none any Details for crlite_status-0.0.8-py3-none-any.whl

Total release size: 50.3 kB

Release files / crlite_status-0.0.8.tar.gz

Download URL crlite_status-0.0.8.tar.gz
Size 32.1 kB
Tags Source
SHA-256 checksum
How to use checksums
83466345c2ec44cb1b67084746ee7e7c1f5f30343ff701d2475c89a493023d55
BLAKE2b-256 checksum
How to use checksums
63d2dfe3bf3019a3be1bc7a9c69fefee9693f773f8aecfcde2076d5d6ff24bc3
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/5.1.1 CPython/3.12.2

Release files / crlite_status-0.0.8-py3-none-any.whl

Download URL crlite_status-0.0.8-py3-none-any.whl
Size 18.2 kB
Tags Python 3
SHA-256 checksum
How to use checksums
4eb58dbb9a64578b0fd1785adeffbdef739666cbae0b86b7e92826b7cd2b6dfc
BLAKE2b-256 checksum
How to use checksums
235caf09ef02a468eca672ea83209456749d1b13fdc0e25f548cb2cb2621836f
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/5.1.1 CPython/3.12.2

Security for crlite-status 0.0.8

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page