Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts and first/last seen dates.

9 hosts · 185 ms

HostCertsFirst seenLast seen
bufex.com 5 2026-05-09 2026-09-06
handbooks-staging.bufex.com 4 2026-05-21 2026-07-20
marketing.bufex.com 6 2026-05-04 2026-09-01
connecteam.bufex.com 5 2026-05-03 2026-08-31
supplies.bufex.com 5 2026-05-09 2026-09-06
test.supplies.bufex.com 2 2026-04-24 2026-04-24
handbooks.bufex.com 4 2026-04-14 2026-08-12
suppliesdev.bufex.com 6 2026-04-21 2026-08-30
www.bufex.com 5 2026-05-09 2026-09-06

Programmatic access: API GET /v1/hosts/bufex.com (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/bufex.com.