Skip to content
whois.me.uk
Menu
Sign in

CT-STALE-NAMES

Old host names in certificate logs no longer resolve

What it means

Certificate Transparency logs keep every name you ever had a certificate for. Names that no longer resolve are harmless by themselves, but names that still resolve to a third-party service you stopped using can be taken over (dangling CNAME).

How to fix it

  1. 1Review the stale list for anything that still has DNS records pointing at a service you no longer control, and remove those records.
  2. 2Nothing else is needed for names with no DNS at all.

Re-check after the change

DNS changes can take up to the record's TTL to be seen; use Re-run on the result page to bypass our 10-minute cache.