Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

6 hosts · 283 ms

HostCertsFirst seenLast seenDNS
lovetheatre.com 18 2026-05-11 2026-09-29 ok
*.lovetheatre.com 21 2025-06-24 2026-09-29 —
links1.lovetheatre.com 3 2026-06-24 2026-08-23 ok
sgtm.lovetheatre.com 3 2026-05-27 2026-09-12 ok
help.lovetheatre.com 4 2026-06-06 2026-10-04 ok
mta-sts.lovetheatre.com 1 2026-02-14 2026-02-14 ok

Programmatic access, with DNS A records: API GET /v1/hosts/lovetheatre.com (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/lovetheatre.com.