Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

7 hosts · 306 ms

HostCertsFirst seenLast seenDNS
cardinalcna.com 6 2026-03-25 2026-08-11 nodata
*.cardinalcna.com 6 2026-03-25 2026-08-11 —
explore.cardinalcna.com 9 2026-05-21 2026-09-16 ok
info.cardinalcna.com 12 2026-06-02 2026-09-29 ok
go.cardinalcna.com 9 2026-05-31 2026-09-26 ok
contact.cardinalcna.com 11 2026-05-22 2026-09-18 ok
www.cardinalcna.com 2 2025-07-21 2026-07-03 ok

Programmatic access, with DNS A records: API GET /v1/hosts/cardinalcna.com (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/cardinalcna.com.