Home▸Cybersecurity▸Certificate Transparency: Catching Forged Certificates

Certificate Transparency: Catching Forged Certificates

Interactive Certificate Transparency simulator: watch a Merkle-tree log ingest TLS certificates, some forged, and see how monitor scans catch the mis-issued ones — with live detection latency and audit-path math.

Cybersecurity3DModerate60 FPS

Every publicly-trusted TLS certificate today must be published to an append-only Certificate Transparency log built as a Merkle hash tree, so that a forged or fraudulently mis-issued certificate cannot stay hidden. This simulator grows a real 16-leaf Merkle tree in 3D as certificates arrive, some legitimate and some forged, and runs a monitor that periodically scans the log the way a domain owner's CT monitor does in production — diffing the public record against what was actually requested. Tune the issuance rate, the forged-certificate probability and the monitor's scan interval, toggle monitoring off entirely to see forged certificates go permanently uncaught, and watch the live detection-latency stat show exactly what a slower or disabled monitor costs in exposure time.

⚙ Under the hood

Watch a live Certificate Transparency log build a Merkle hash tree from issued TLS certificates, some forged, and see how periodic monitor scans catch the mis-issued ones before they can be abused.

certificate transparencymerkle treepkiforgery detectiontlsincident response

3D · Three.js / WebGL renderer · 60 FPS target · runs fully client-side, no install