diff --git a/man/certspotter-script.md b/man/certspotter-script.md index b90be58..4a1321e 100644 --- a/man/certspotter-script.md +++ b/man/certspotter-script.md @@ -65,7 +65,7 @@ The following environment variables are set for `discovered_cert` events: `CERT_SHA256` -: The hex-encoded SHA-256 digest (sometimes called fingerprint) of the certificate. +: The hex-encoded SHA-256 digest (sometimes called fingerprint) of the certificate or precertificate. The digest is computed over the ASN.1 DER encoding. `PUBKEY_SHA256` diff --git a/man/certspotter.md b/man/certspotter.md index 9abefbb..032a0fc 100644 --- a/man/certspotter.md +++ b/man/certspotter.md @@ -136,10 +136,10 @@ the script interface, see certspotter-script(8). # OPERATION certspotter continuously monitors all browser-recognized Certificate -Transparency logs looking for certificates which are valid for any domain -on your watch list. When certspotter detects a matching certificate, it -emails you, executes a script, and/or writes a report to standard out, -as described above. +Transparency logs looking for certificates (including precertificates) +which are valid for any domain on your watch list. When certspotter +detects a matching certificate, it emails you, executes a script, and/or +writes a report to standard out, as described above. certspotter also saves a copy of matching certificates in `$CERTSPOTTER_STATE_DIR/certs` ("~/.certspotter/certs" by default)