Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts and first/last seen dates.

26 hosts · 263 ms

HostCertsFirst seenLast seen
city-1.de 39 2026-03-26 2026-09-26
*.city-1.de 40 2026-03-20 2026-09-26
owa.city-1.de 12 2026-03-20 2026-09-14
urlaub.city-1.de 2 2026-03-20 2026-09-14
cloud.city-1.de 12 2026-03-20 2026-09-14
exchange.city-1.de 12 2026-03-20 2026-09-14
share.city-1.de 12 2026-03-20 2026-09-14
dokumente.city-1.de 5 2026-05-24 2026-09-21
vero-offenbach.city-1.de 2 2026-05-09 2026-08-04
3eich.city-1.de 1 2026-10-02 2026-10-02
kennedys-maintal.city-1.de 2 2026-04-22 2026-07-18
notion.city-1.de 8 2026-05-13 2026-09-09
intern.city-1.de 12 2026-03-20 2026-09-14
imap.city-1.de 12 2026-03-20 2026-09-14
lp.city-1.de 3 2026-06-25 2026-09-08
newsletter.city-1.de 5 2026-05-30 2026-09-26
autodiscover.city-1.de 12 2026-03-20 2026-09-14
qr.city-1.de 8 2026-04-17 2026-08-07
nas.city-1.de 12 2026-03-20 2026-09-14
jobs.city-1.de 7 2026-05-17 2026-09-14
www.jobs.city-1.de 5 2026-05-02 2026-08-30
mfiles.city-1.de 12 2026-03-20 2026-09-14
numo-frankfurt.city-1.de 1 2026-07-24 2026-07-24
daten.numo-frankfurt.city-1.de 2 2026-08-18 2026-08-18
www.city-1.de 1 2026-03-26 2026-03-26
brix.city-1.de 7 2026-04-23 2026-09-28

Programmatic access: API GET /v1/hosts/city-1.de (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/city-1.de.