DOMAIN RECORD

dropbox.com

First observed
2026-08-19T17:13:39.430Z
Last observed
2026-08-19T18:05:18.451Z
Observation runs
2
Certificates observed
2
Change events
2

MONITORING STARTED

No historical certificate record was available when this domain was admitted. OMSHIFT has been observing public Certificate Transparency logs directly since 2026-08-16T15:16:57.593Z — 1 observation and 2 change events recorded since.


OBSERVATION RAIL
  1. 2026-08-19T17:13:39.430Z
    Monitoring from 2026-08-19T17:13:39.430Z
    No historical reconstruction — observed only from this point forward.
  2. 2026-08-19T17:13:15.398Z
    Forward observation
    New certificate issuance observed
    View evidence →
  3. 2026-08-19T17:13:15.398Z
    SAN set differs from previous observed issuance
    +1 · −0
CERTIFICATE DELTA
Observed 2026-08-19T17:13:15.398Z
PREVIOUS
C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
2 SANs
SAN SAN set differs from previous observed issuance
OBSERVED
C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
3 SANs
  • added *.app.dropbox.com

LATEST CERTIFICATE EVIDENCE

HISTORICAL BOOTSTRAP — historical evidence imported via SSLMate CT Search when this record was established. FORWARD OBSERVATION — observed directly from public CT logs by OMSHIFT.

FORWARD OBSERVATION
Issuer
C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Validity
2026-03-30T00:00:00Z2026-10-14T23:59:59Z
First observed
2026-08-19T17:13:39.430Z
Last observed
2026-08-19T17:14:34.084Z
Source
OMSHIFT CT Monitor (forward observation)
SAN NAMES (2)

*.dropbox.com, dropbox.com

View certificate evidence →
FORWARD OBSERVATION
Issuer
C=US, O=DigiCert Inc, CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1
Validity
2026-08-19T00:00:00Z2026-10-14T23:59:59Z
First observed
2026-08-19T17:13:15.398Z
Last observed
2026-08-19T18:05:18.451Z
Source
OMSHIFT CT Monitor (forward observation)
SAN NAMES (3)

*.app.dropbox.com, *.dropbox.com, dropbox.com

View certificate evidence →

Certificate Transparency observation does not prove a certificate is currently served by this domain, and SAN presence does not prove ownership. See /method for the full trust contract.