IronToll Let's Encrypt Cert with Atypical Issuer CN 'YE1'

Arnold Chan@slaz

•updated Sep 11, 2026•0•0•1

Detects Certificate Transparency log entries indicating the issuance of Let's Encrypt certificates where the issuer identifies as 'YE1' and the domain subjects match specific brand impersonation tokens, often associated with fraudulent disposable top-level domains.