Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

7 hosts · 262 ms

HostCertsFirst seenLast seenDNS
mdm3.bankmuscat.com.sa 2 2025-09-10 2026-09-28 ok
mdmvpn3.bankmuscat.com.sa 2 2025-09-10 2026-09-28 ok
owa.bankmuscat.com.sa 3 2025-06-15 2026-07-16 ok
outlook.bankmuscat.com.sa 3 2025-06-15 2026-07-16 nxdomain
mail.bankmuscat.com.sa 3 2025-06-15 2026-07-16 ok
autodiscover.bankmuscat.com.sa 3 2025-06-15 2026-07-16 ok
mta-sts.bankmuscat.com.sa 3 2026-04-18 2026-09-07 ok

Programmatic access, with DNS A records: API GET /v1/hosts/bankmuscat.com.sa (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/bankmuscat.com.sa.