Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

68 hosts · 364 ms

HostCertsFirst seenLast seenDNS
cnp.fr 3 2026-04-09 2026-09-25 ok
*.cnp.fr 3 2026-04-09 2026-09-25 —
vpn-gp-w10.cnp.fr 2 2026-03-21 2026-09-06 ok
sbc1.cnp.fr 2 2025-07-28 2026-07-28 ok
sia2.cnp.fr 2 2026-04-02 2026-09-18 ok
sbc2.cnp.fr 2 2025-07-28 2026-07-28 ok
open2.cnp.fr 2 2026-09-28 2026-09-29 ok
vpn-gp-w10-re7.cnp.fr 2 2026-03-21 2026-09-06 ok
view-re7.cnp.fr 1 2026-05-13 2026-05-13 ok
www-re7.cnp.fr 5 2025-09-02 2026-08-31 ok
flux-re7.cnp.fr 2 2026-05-18 2026-06-04 ok
sia.cnp.fr 2 2026-04-01 2026-09-17 ok
info-anticipa.cnp.fr 6 2026-05-09 2026-09-06 ok
eye.info-anticipa.cnp.fr 6 2026-05-09 2026-09-06 ok
img.info-anticipa.cnp.fr 6 2026-05-09 2026-09-06 ok
landings.info-anticipa.cnp.fr 6 2026-05-09 2026-09-06 servfail
forms.info-anticipa.cnp.fr 6 2026-05-09 2026-09-06 ok
tryane.cnp.fr 1 2026-02-12 2026-02-12 nxdomain
www.retraite.caisse-epargne.cnp.fr 1 2025-10-09 2025-10-09 nxdomain
www.maretraite.caisse-epargne.cnp.fr 1 2025-10-09 2025-10-09 nxdomain
www.e-beneficiaire.cnp.fr 2 2025-07-06 2026-07-06 ok
www.beneficiaire.cnp.fr 2 2025-07-06 2026-07-06 ok
www.ebeneficiaire.cnp.fr 2 2025-07-06 2026-07-06 ok
espace-assure.cnp.fr 1 2026-04-23 2026-04-23 nxdomain
mail.cnp.fr 7 2026-03-10 2026-08-26 ok
re7-open.cnp.fr 3 2026-09-18 2026-09-19 ok
www-re7-admin.cnp.fr 9 2025-09-02 2026-08-31 ok
www-ppr-admin.cnp.fr 2 2025-08-05 2026-08-06 ok
www-admin.cnp.fr 3 2025-09-02 2026-09-25 ok
info.cnp.fr 7 2026-04-14 2026-09-30 ok
eye.info.cnp.fr 7 2026-04-14 2026-09-30 ok
img.info.cnp.fr 7 2026-04-14 2026-09-30 ok
landings.info.cnp.fr 7 2026-04-14 2026-09-30 ok
forms.info.cnp.fr 7 2026-04-14 2026-09-30 ok
exo.cnp.fr 2 2026-04-21 2026-10-07 ok
vpn-gp.cnp.fr 2 2026-03-21 2026-09-06 ok
www.retraite.recosup.cnp.fr 1 2025-10-09 2025-10-09 ok
www.maretraite.recosup.cnp.fr 1 2025-10-09 2025-10-09 ok
autodiscover.cnp.fr 7 2026-03-10 2026-08-26 ok
www.maretraite.pfr.cnp.fr 1 2025-10-09 2025-10-09 ok
www-ppr.cnp.fr 2 2025-08-05 2026-08-06 ok
www.retraite.entreprises.cnp.fr 1 2025-10-09 2025-10-09 ok
www.maretraite.entreprises.cnp.fr 1 2025-10-09 2025-10-09 ok
info-ametis.cnp.fr 7 2026-04-14 2026-09-30 ok
eye.info-ametis.cnp.fr 7 2026-04-14 2026-09-30 ok
img.info-ametis.cnp.fr 7 2026-04-14 2026-09-30 ok
landings.info-ametis.cnp.fr 7 2026-04-14 2026-09-30 ok
forms.info-ametis.cnp.fr 7 2026-04-14 2026-09-30 servfail
view.angers.cnp.fr 3 2026-03-10 2026-08-26 nxdomain
*.extranet.cnp.fr 1 2026-05-26 2026-05-26 —
view2.extranet.cnp.fr 1 2026-02-12 2026-02-12 nxdomain
lcf-client-apim.extranet.cnp.fr 2 2026-05-13 2026-06-04 nxdomain
ado-client-apim.extranet.cnp.fr 2 2026-04-01 2026-09-17 nxdomain
lcf-client-apim-hp.extranet.cnp.fr 3 2026-05-07 2026-05-20 nxdomain
ado-client-apim-hp.extranet.cnp.fr 2 2026-04-01 2026-09-17 nxdomain
view.extranet.cnp.fr 3 2025-08-04 2026-08-04 nxdomain
GW-KD-Etage-2.iot.cnp.fr 1 2026-05-12 2026-05-12 —
GW-KD-Etage-3.iot.cnp.fr 1 2026-05-11 2026-05-11 —
GW-KD-Etage-4.iot.cnp.fr 1 2026-05-11 2026-05-11 —
GW-KD-Etage-5.iot.cnp.fr 1 2026-05-11 2026-05-11 —
GW-KD-Etage-RDC.iot.cnp.fr 1 2026-05-11 2026-05-11 —
GW-KD-Etage-RDJ.iot.cnp.fr 1 2026-05-06 2026-05-06 —
transfert.cnp.fr 4 2025-07-25 2026-07-30 ok
transfert-test.cnp.fr 2 2026-02-12 2026-02-23 ok
view.cnp.fr 3 2025-08-21 2026-08-23 ok
www.cnp.fr 3 2025-09-02 2026-09-25 ok
flux.cnp.fr 2 2025-07-11 2026-07-13 ok
www.affinity.cnp.fr 2 2026-03-31 2026-09-16 ok

Programmatic access, with DNS A records: API GET /v1/hosts/cnp.fr (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/cnp.fr.