Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

38 hosts · 275 ms

HostCertsFirst seenLast seenDNS
mfa.org 20 2025-06-14 2026-09-28 ok
*.mfa.org 20 2025-10-30 2026-09-30 —
mfa-465-dc1.mfa.org 2 2025-09-09 2025-09-10 nxdomain
www.mfa-465-dc1.mfa.org 2 2025-09-09 2025-09-10 nxdomain
owa.mfa.org 2 2026-04-29 2026-06-29 ok
www.owa.mfa.org 2 2026-04-29 2026-06-29 nxdomain
test-nginx-shared.mfa.org 1 2026-04-29 2026-04-29 ok
www.test-nginx-shared.mfa.org 1 2026-04-29 2026-04-29 nxdomain
printsondemand.mfa.org 2 2025-09-25 2026-08-25 ok
research.mfa.org 1 2026-08-05 2026-08-05 ok
vpn.mfa.org 5 2026-03-23 2026-09-14 ok
www.vpn.mfa.org 5 2026-03-23 2026-09-14 nxdomain
cameo.mfa.org 4 2026-03-23 2026-09-14 ok
www.cameo.mfa.org 4 2026-03-23 2026-09-14 nxdomain
go.mfa.org 5 2026-05-04 2026-09-19 ok
smtp.mfa.org 2 2026-04-29 2026-06-29 nxdomain
autodiscover.mfa.org 2 2026-04-29 2026-06-29 ok
collections.mfa.org 4 2026-04-18 2026-08-16 ok
vpn-dps.mfa.org 3 2026-03-28 2026-09-11 ok
www.vpn-dps.mfa.org 3 2026-03-28 2026-09-11 nxdomain
selects.mfa.org 10 2026-05-06 2026-09-01 ok
customprints.mfa.org 3 2026-04-20 2026-09-20 ok
libcat.mfa.org 2 2026-03-23 2026-08-23 ok
toast.mfa.org 1 2026-09-25 2026-09-25 ok
toast.test.mfa.org 1 2026-09-10 2026-09-10 ok
tnew.mfa.org 40 2025-08-20 2026-09-22 ok
www.mfa.org 2 2025-06-14 2026-06-15 ok
mn810r271p40x.mfa.org 3 2026-03-23 2026-09-06 ok
www.mn810r271p40x.mfa.org 3 2026-03-23 2026-09-06 nxdomain
mn810r260t60x.mfa.org 2 2025-06-09 2026-06-10 ok
www.mn810r260t60x.mfa.org 2 2025-06-09 2026-06-10 nxdomain
mn810r271s80x.mfa.org 1 2026-05-16 2026-05-16 ok
www.mn810r271s80x.mfa.org 1 2026-05-16 2026-05-16 nxdomain
mn830r280t80x.mfa.org 3 2025-09-10 2026-07-11 ok
www.mn830r280t80x.mfa.org 3 2025-09-10 2026-07-11 nxdomain
pay.mfa.org 6 2026-05-09 2026-09-05 ok
legacy.mfa.org 2 2026-04-29 2026-06-29 ok
library.mfa.org 5 2026-04-24 2026-08-22 ok

Programmatic access, with DNS A records: API GET /v1/hosts/mfa.org (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/mfa.org.