pki.core.gen.tr is our certificate intelligence service for security teams, DevOps and system administrators. It collects its data from the wire, not from Certificate Transparency logs: our scanner connects to HTTPS hosts across Türkiye's public IPv4 address space, records the TLS handshake and parses every certificate into the index. The result is a continuously updated database of which host presents which certificate, who signed it and when it expires.
Highlights
- Continuous scanning — Raw data from real TCP connections and TLS handshakes; hosts and certificates are re-scanned on a regular schedule.
- Certificate search API — Search by IP, domain, certificate authority, expiry window, signature algorithm and more; JSON responses, Bearer-token access and a ready OpenAPI spec.
- Expiry tracking — Certificates expiring soon, and those already expired, are visible on the dashboard at a glance.
- Tracked hosts — Pin your own IP:port pairs and get notified the moment a certificate changes or nears expiry.
- Certificate authorities — How many certificates each authority has signed, issuer chains and the key-algorithm mix.
- GeoIP — BGP-based location and ASN for any IP, one at a time or up to 100 in a batch.
- MCP for AI assistants — The MCP server at
https://pki.core.gen.tr/mcpopens the same data to Claude, ChatGPT, Cursor and compatible assistants: just ask "find Let's Encrypt certificates expiring in the next 30 days".
Intelligence That Reaches the Firewall
The r2 for pfSense and r2 for OPNsense modules passively listen to TLS handshakes passing through the firewall and compare the presented certificate with the one we have indexed for that destination. On a mismatch they log the event, or add the source IP to a block table for a period you choose. There is no interception (MITM) and no extra certificate authority to install on clients.
Plans
The free plan includes 1,000 API requests per week, 5 tracked hosts and full database access. Pro and Max plans cover higher volumes. The interface ships in English, Turkish and Arabic (RTL), with two-factor authentication. Get started with a free account at https://pki.core.gen.tr.