Observe-decide-act boxes beside the message: CT records issuance, not authorization.

Certificate transparency is a ledger, not a secret

Certificate Transparency makes public TLS certificate issuance observable. It does not determine whether a domain owner authorized an issuance, replace certificate-chain validation, or guarantee that every certificate everywhere is logged. A misissued certificate can have valid transparency evidence. The benefit is a public trail that monitors and affected owners can investigate. ...

November 3, 2027 · 5 min · XB Field Notes
A leaf certificate connected through an intermediate to a trusted root, with each link naming the issuer.

A certificate chain is a path you should be able to print

Read the chain the edge actually presents, not just the leaf, before you trust the rollout.

June 8, 2026 · 3 min · XB Field Notes