DOMAIN RECORD

x.com

First observed
2026-08-16T11:32:02.180Z
Last observed
2026-08-20T20:02:21.737Z
Observation runs
2
Certificates observed
26
Change events
3

BASELINE ESTABLISHED

25 historical certificate observations were recorded in the baseline. Change tracking is active from this point forward. Baseline evidence is not treated as historical change events. 1 post-baseline observation and 3 change events have been recorded since.


OBSERVATION RAIL
  1. 2026-08-16T11:32:02.180Z
    Baseline established
    25 certificates observed
  2. 2026-08-20T19:03:35.428Z
    Forward observation
    New certificate issuance observed
    View evidence →
  3. 2026-08-20T19:03:35.428Z
    Issuer differs from previous observed issuance
  4. 2026-08-20T19:03:35.428Z
    SAN set differs from previous observed issuance
    +3 · −4
CERTIFICATE DELTA
Observed 2026-08-20T19:03:35.428Z
PREVIOUS
C=US, O=Let's Encrypt, CN=YR2
6 SANs
ISSUER issuer differs from previous observed issuance
SAN SAN set differs from previous observed issuance
OBSERVED
C=US, O=Let's Encrypt, CN=YE2
5 SANs
  • added *.twitter.com
  • added isolation.atla.twitter.com
  • added twitter.com
  • removed *.live.x.com
  • removed *.watch.x.com
  • removed cdn.syndication.x.com
  • removed click.send.x.com

LATEST CERTIFICATE EVIDENCE

HISTORICAL BOOTSTRAP — historical evidence imported via SSLMate CT Search when this record was established. FORWARD OBSERVATION — observed directly from public CT logs by OMSHIFT.

FORWARD OBSERVATION
Issuer
C=US, O=Let's Encrypt, CN=YE2
Validity
2026-08-20T18:01:57Z2026-11-18T18:01:56Z
First observed
2026-08-20T19:03:35.428Z
Last observed
2026-08-20T20:02:21.737Z
Source
OMSHIFT CT Monitor (forward observation)
SAN NAMES (5)

*.twitter.com, *.x.com, isolation.atla.twitter.com + 2 more

View certificate evidence →
HISTORICAL BOOTSTRAP
Issuer
C=US, O=Let's Encrypt, CN=YR2
Validity
2026-08-14T17:47:59Z2026-11-12T17:47:58Z
First observed
2026-08-16T11:32:02.180Z
Last observed
2026-08-16T11:32:02.180Z
Source
SSLMate CT Search (historical bootstrap)
SAN NAMES (6)

*.live.x.com, *.watch.x.com, *.x.com + 3 more

View certificate evidence →
HISTORICAL BOOTSTRAP
Issuer
C=US, O=Let's Encrypt, CN=YR2
Validity
2026-07-30T01:09:09Z2026-10-28T01:09:08Z
First observed
2026-08-16T11:32:02.180Z
Last observed
2026-08-16T11:32:02.180Z
Source
SSLMate CT Search (historical bootstrap)
SAN NAMES (2)

*.x.com, x.com

View certificate evidence →
HISTORICAL BOOTSTRAP
Issuer
C=US, O=Let's Encrypt, CN=YR2
Validity
2026-07-28T04:07:21Z2026-10-26T04:07:20Z
First observed
2026-08-16T11:32:02.180Z
Last observed
2026-08-16T11:32:02.180Z
Source
SSLMate CT Search (historical bootstrap)
SAN NAMES (35)

*.atla.twitter.com, *.atla.x.com, *.cftls.t.co + 32 more

View certificate evidence →
HISTORICAL BOOTSTRAP
Issuer
C=US, O=Let's Encrypt, CN=YR2
Validity
2026-07-28T03:39:33Z2026-10-26T03:39:32Z
First observed
2026-08-16T11:32:02.180Z
Last observed
2026-08-16T11:32:02.180Z
Source
SSLMate CT Search (historical bootstrap)
SAN NAMES (35)

*.atla.twitter.com, *.atla.x.com, *.cftls.t.co + 32 more

View certificate evidence →
HISTORICAL BOOTSTRAP
Issuer
C=US, O=Let's Encrypt, CN=YR2
Validity
2026-07-28T02:44:18Z2026-10-26T02:44:17Z
First observed
2026-08-16T11:32:02.180Z
Last observed
2026-08-16T11:32:02.180Z
Source
SSLMate CT Search (historical bootstrap)
SAN NAMES (7)

*.twitter.com, *.twitterintegration.com, *.watch.x.com + 4 more

View certificate evidence →
HISTORICAL BOOTSTRAP
Issuer
C=US, O=Let's Encrypt, CN=YR1
Validity
2026-07-25T04:27:55Z2026-10-23T04:27:54Z
First observed
2026-08-16T11:32:02.180Z
Last observed
2026-08-16T11:32:02.180Z
Source
SSLMate CT Search (historical bootstrap)
SAN NAMES (4)

*.twitter.com, *.x.com, twitter.com + 1 more

View certificate evidence →
HISTORICAL BOOTSTRAP
Issuer
C=US, O=Let's Encrypt, CN=YR2
Validity
2026-07-24T18:22:49Z2026-10-22T18:22:48Z
First observed
2026-08-16T11:32:02.180Z
Last observed
2026-08-16T11:32:02.180Z
Source
SSLMate CT Search (historical bootstrap)
SAN NAMES (4)

*.twitter.com, *.x.com, twitter.com + 1 more

View certificate evidence →
HISTORICAL BOOTSTRAP
Issuer
C=US, O=Let's Encrypt, CN=YR1
Validity
2026-07-24T18:22:46Z2026-10-22T18:22:45Z
First observed
2026-08-16T11:32:02.180Z
Last observed
2026-08-16T11:32:02.180Z
Source
SSLMate CT Search (historical bootstrap)
SAN NAMES (5)

*.twitter.com, *.x.com, isolation.atla.twitter.com + 2 more

View certificate evidence →
HISTORICAL BOOTSTRAP
Issuer
C=US, O=Let's Encrypt, CN=YR2
Validity
2026-07-24T02:31:24Z2026-10-22T02:31:23Z
First observed
2026-08-16T11:32:02.180Z
Last observed
2026-08-16T11:32:02.180Z
Source
SSLMate CT Search (historical bootstrap)
SAN NAMES (2)

*.x.com, x.com

View certificate evidence →
HISTORICAL BOOTSTRAP
Issuer
C=US, O=Let's Encrypt, CN=YR2
Validity
2026-07-24T00:41:40Z2026-10-22T00:41:39Z
First observed
2026-08-16T11:32:02.180Z
Last observed
2026-08-16T11:32:02.180Z
Source
SSLMate CT Search (historical bootstrap)
SAN NAMES (2)

*.x.com, x.com

View certificate evidence →
HISTORICAL BOOTSTRAP
Issuer
C=US, O=Let's Encrypt, CN=YR1
Validity
2026-07-21T15:33:07Z2026-10-19T15:33:06Z
First observed
2026-08-16T11:32:02.180Z
Last observed
2026-08-16T11:32:02.180Z
Source
SSLMate CT Search (historical bootstrap)
SAN NAMES (4)

*.twitter.com, *.x.com, twitter.com + 1 more

View certificate evidence →

View full certificate archive (26 total) →

Certificate Transparency observation does not prove a certificate is currently served by this domain, and SAN presence does not prove ownership. See /method for the full trust contract.