Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

10 hosts · 234 ms

HostCertsFirst seenLast seenDNS
capital.com.tw 13 2026-03-05 2026-09-17 nodata
*.capital.com.tw 13 2026-03-05 2026-09-17 —
webrtqt01.capital.com.tw 6 2026-03-18 2026-09-07 ok
webrtqt02.capital.com.tw 3 2026-01-16 2026-08-10 ok
fatca.capital.com.tw 1 2026-01-22 2026-01-22 nodata
iwarrant-mobile.capital.com.tw 4 2026-04-16 2026-08-10 ok
autodiscover.cim.capital.com.tw 2 2026-08-06 2026-08-10 nxdomain
autodiscover.futures.capital.com.tw 4 2026-07-17 2026-08-10 ok
warrant.capital.com.tw 4 2026-02-09 2026-08-10 ok
iwarrant.capital.com.tw 4 2026-02-09 2026-08-10 ok

Programmatic access, with DNS A records: API GET /v1/hosts/capital.com.tw (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/capital.com.tw.