Building certgrep.sh: a free certificate transparency search engine
Summary
The piece describes building certgrep.sh, a free certificate transparency search engine that indexes domain names from CT logs and supports full regex and fuzzy matching. It details the architecture including a trigram-based candidate filter, FST-based regex matching, and just-in-time hydration to fetch certificates on demand, all aimed at scalable threat detection with a 90-day retention window.