---
title: "Certificates & Signals"
slug: "certificates-signals"
tags: ["Certificate Intelligence", "Threat Signals", "Certificate Transparency"]
updated: 2026-11-06T18:40:57Z
published: 2026-11-06T18:40:57Z
canonical: "help.silentpush.com/certificates-signals"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.silentpush.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Certificates & Signals

This article documents certificate-related and signals data sources in SPQL. These include Certificate Transparency data, related certificate intelligence models, and aggregated signals used for threat scoring and behavioral analysis across the platform.

## Certificates & Signals

### certs

Certificate transparency and related certificate data stored in ClickHouse. Supports filtering by issuer, subject, dates, fingerprints, serial numbers, and related metadata.

### cert-cookies & cert-siblings

Related certificate intelligence models for cookie-based and sibling certificate relationships across domains.

### signals

Aggregated signals across sources. Contains detailed indicator fields (including body analysis, geoip counts, SSL aggregates, and other behavioral signals) used for threat scoring and detection.