A publication-grade monograph generated from Certificate Transparency
Pull every currently-valid leaf cert with matching SAN substrings out of the public CT logs; verify they're real leaves; assess intended usage via EKU/KeyUsage; scan their DNS names for effective CAA policy; emit a primary readable output as Markdown, LaTeX, and PDF. Made for the case where you want to *publish* the result.