Howdy! This is part of a regular series of posts in which we’ll highlight useful, interesting, and otherwise cool queries for use with Censys Search and ASM. If you have any questions, similar queries, or custom versions of this week’s highlight, let us know!

This is a pretty simple one, but is useful to know regardless. If you know the specific SHA 256 fingerprint of a given certificate, you can use the services.tls.certificate.fingerprint_sha256 field to search for all hosts presenting it. For example:

services.tls.certificate.fingerprint_sha256: "e827dd2376f59c655eb5bae5499977dd08d3f851573c4cf5688ded097205a7dd"