x509 log overview
See how Corelight’s implementation of the Zeek x509.log provides detailed information about certificates observed during the negotiation of TLS/SSL sessions. Find unusually weak certs, keys with insufficient bit lengths, unusually long validity periods, and outdated signing algorithms using rich network evidence including certificate key length, type, dates, subject, issuer, serial, and signing algorithm.
