crt.sectigo.com is a subdomain of Sectigo, a well-known certificate authority, so you might assume it's trustworthy. But there's a big problem: the site doesn't work over HTTPS. Any modern browser will flag it as insecure or refuse to load it entirely. That's a red flag for a service that likely deals with certificate data. On the plus side, the site does publish an about page, privacy policy, and business disclosure, which are signs the operator is transparent about who they are. There's also no history of malware or blacklisting. However, for a tool tied to a major tech company, the missing secure connection and lack of contact information are unexpected. If you need to use a certificate transparency lookup, consider using an alternative service until this one fixes its security. Is crt.sectigo.com a scam? Probably not — but it's not safe to use in its current state.
In plain English
This site is essentially broken from a security standpoint — it doesn't support HTTPS, so you can't safely connect at all. While the underlying brand (Sectigo) is reputable and the site has proper legal pages, the lack of a secure connection is a serious warning sign for any website today. I'd steer clear until it's fixed.
Where the score comes from
The site doesn't support HTTPS at all, which is a foundational security requirement. Any browser would block the connection, making the site effectively unusable for modern web traffic.
The domain is a subdomain of Sectigo, a well-known certificate authority, and the site provides an about page and legal entity disclosure. No WHOIS data is expected for a subdomain, so this is not a concern.
No blacklist entries or Google Web Risk flags, which is positive. However, the site has no notable external presence like Trustpilot or a high web rank, which is typical for a technical tool.
The site has an about page and business disclosure, but there's no contact information on the homepage and no social media links. For a tool tied to a known company, one would expect clear contact options.
Privacy policy, terms of service, and a legal-entity disclosure are all present. This meets the baseline for a commercial site, even though the site is currently inaccessible over HTTPS.
The site uses Cloudflare and loads fast, but it lacks DNSSEC, email handling, and has minimal security headers. For a site owned by a major CA, the infrastructure setup is surprisingly sparse.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →