Certificate monitor service reliability detection method for PKI certificate transparency system

A reliability detection method for a certificate monitor service in a PKI certificate transparency system, comprising:

• sending a randomly generated set of to-be-queried domain names to a plurality of third-party certificate monitor service providers, and processing collected raw certificates output by the plurality of third-party certificate monitor service providers to obtain a plurality of certificate search result sets;
• for each queried domain name, filtering and aggregating the plurality of certificate search result sets to obtain a certificate reference set, detecting a difference between each certificate search result set and the certificate reference set, and issuing a reliability alert to the third-party certificate monitor service provider in a case that there is an irrelevant certificate and/or a missing certificate in the certificate search result set;
• and
• extracting features from a result of the filtering and a result of the detecting the difference by using a feature extraction tool, analyzing the extracted features, generating, based on a result of the analyzing, a table of fault causes each of which induces a fault of the third-party certificate monitor service provider, and locating the fault of the third-party certificate monitor service provider according to the result of the filtering, the result of the detecting the difference, and the table of fault causes.