Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

8 hosts · 216 ms

HostCertsFirst seenLast seenDNS
nationalpaints.com 8 2026-02-21 2026-09-27 ok
*.nationalpaints.com 3 2026-02-21 2026-09-23 —
qrc.nationalpaints.com 4 2026-05-29 2026-09-17 ok
www.qrc.nationalpaints.com 3 2026-05-24 2026-09-10 ok
portal.nationalpaints.com 5 2026-04-19 2026-10-03 ok
www.portal.nationalpaints.com 4 2026-04-19 2026-10-01 ok
mta-sts.nationalpaints.com 2 2026-06-05 2026-08-15 ok
www.nationalpaints.com 3 2026-05-27 2026-09-10 ok

Programmatic access, with DNS A records: API GET /v1/hosts/nationalpaints.com (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/nationalpaints.com.