Checks

Certificate Transparency SCTs present

The certificate embeds Signed Certificate Timestamps.

Why it matters

SCTs show the certificate was submitted to public Certificate Transparency logs.

What to do

No change is required for embedded SCTs. Browsers may also accept SCTs from the handshake or OCSP.

Reference

Publicly trusted certificates should include SCTs. Browsers also accept SCTs from the TLS handshake or OCSP.

Certificate Transparency