Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

17 hosts · 335 ms

HostCertsFirst seenLast seenDNS
ambient-enterprises.com 5 2026-06-04 2026-08-31 ok
*.ambient-enterprises.com 1 2026-06-04 2026-06-04 —
service.ambient-enterprises.com 3 2026-07-09 2026-09-07 ok
exchange.ambient-enterprises.com 2 2026-09-23 2026-09-23 ok
webmail.ambient-enterprises.com 3 2026-08-03 2026-10-03 ok
admin.ambient-enterprises.com 1 2026-08-03 2026-08-03 ok
vpn.ambient-enterprises.com 2 2026-02-03 2026-02-04 ok
www.vpn.ambient-enterprises.com 2 2026-02-03 2026-02-04 nxdomain
ges.ambient-enterprises.com 6 2026-07-03 2026-09-01 ok
mta-sts.ambient-enterprises.com 2 2026-04-02 2026-09-02 ok
trust.ambient-enterprises.com 2 2026-09-09 2026-09-09 ok
gov.ambient-enterprises.com 1 2026-01-08 2026-01-08 ok
email.gov.ambient-enterprises.com 1 2026-02-05 2026-02-05 ok
www.email.gov.ambient-enterprises.com 1 2026-02-05 2026-02-05 nxdomain
www.gov.ambient-enterprises.com 1 2026-01-08 2026-01-08 nxdomain
www.ambient-enterprises.com 6 2026-07-03 2026-08-31 ok
my.ambient-enterprises.com 4 2026-05-15 2026-09-30 ok

Programmatic access, with DNS A records: API GET /v1/hosts/ambient-enterprises.com (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/ambient-enterprises.com.