Certificate transparency & re-key log
TLS hubs (adcs://) are identified by their certificate keyprint. When a listed hub begins presenting a different keyprint, we pause publishing its keyprint and record the change here. A re-key is routine, but an unexpected change can indicate a man-in-the-middle — owners confirm a legitimate re-key out-of-band.
✅ No certificate changes pending. Every listed TLS hub currently presents its expected keyprint.
Accepted re-keys
Keyprint changes the hub owner or list operator has confirmed as legitimate. Kept permanently (latest 200) so a hub's certificate history stays auditable.
| Hub | Seen | Accepted | Old keyprint | New keyprint |
|---|---|---|---|---|
| adcs://newyork.transxcorp.us:5001 | 6d ago | 6h ago | SHA256/KK6GO4VCGUTMH2XYGSP7Y66CJXFS4ZEBPDNP4VCK7FRJEYV3FHSA | SHA256/TBQNMNMJVXGP5SMO6XDG64IWEB446ETL6IMJMK2SGSTETR46KRVQ |
| adcs://dchub.one:411 | 17d ago | 17d ago | SHA256/YJT3K526K2FZCGU7RPDTNFFNPUBQXPQG4I3CRGZX3VMSCJZDQDPA | SHA256/F2RENMHBNNKQOZI4LYBZDNYARNLF6FU2WOGHTLAFWLJC4AOHGHPQ |
| adcs://dchub.one:411 | 29d ago | 29d ago | SHA256/G2NBAA2JUQXCK3MICDYQE5PHPORBQRKXABY62OAVQF2B7KJD76KA | SHA256/YJT3K526K2FZCGU7RPDTNFFNPUBQXPQG4I3CRGZX3VMSCJZDQDPA |
| adcs://dchub.one:411 | 46d ago | 44d ago | SHA256/3OGGAUC5C6RCZEXS2PDY5R7VCIM7YTF5JZ74YBJW3V2M3FB72BCQ | SHA256/G2NBAA2JUQXCK3MICDYQE5PHPORBQRKXABY62OAVQF2B7KJD76KA |
| adcs://dchub.one:411 | 60d ago | 60d ago | SHA256/I2Y2GXQFBAUOZHVDIXDUB3YXHJZUXDAYJLEWCCWCBDSEYZNCDZTQ | SHA256/3OGGAUC5C6RCZEXS2PDY5R7VCIM7YTF5JZ74YBJW3V2M3FB72BCQ |
Certificates expiring soon
TLS hubs whose certificate expires within 14 days (or already has). An expired certificate breaks clients that verify it — hub owners, renew in time.
| Hub | Issuer | Expires |
|---|---|---|
| [sTiFF-Meister] | www.it-admin.se | EXPIRED 737d ago |
| AirDC++ Web Client Dev | web-dev.airdcpp.net | EXPIRED 690d ago |
Related: Hub list · Statistics · Clients · Downloads · FAQ