Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

20 hosts · 343 ms

HostCertsFirst seenLast seenDNS
ns.com 18 2026-04-18 2026-08-29 ok
*.ns.com 13 2026-04-18 2026-08-19 —
alpha.ns.com 2 2026-05-29 2026-05-29 nxdomain
finance.ns.com 1 2026-04-19 2026-04-19 nxdomain
staff.ns.com 5 2026-04-28 2026-08-30 ok
api.ns.com 5 2026-05-26 2026-09-24 ok
finance-api.ns.com 1 2026-04-19 2026-04-19 nxdomain
staff-api.ns.com 5 2026-05-31 2026-09-29 ok
rides-api.ns.com 1 2026-09-15 2026-09-15 ok
int-api.ns.com 5 2026-05-19 2026-09-17 ok
internal.ns.com 3 2026-05-11 2026-08-09 ok
rides.ns.com 1 2026-09-15 2026-09-15 ok
tools.ns.com 4 2026-04-24 2026-06-24 nxdomain
forms.ns.com 5 2026-04-27 2026-08-25 ok
ops.ns.com 1 2026-08-05 2026-08-05 ok
assets.ns.com 8 2026-05-05 2026-08-31 ok
t.ns.com 10 2026-04-20 2026-08-16 ok
test.ns.com 4 2026-04-16 2026-08-18 ok
www.ns.com 5 2026-05-31 2026-09-30 ok
privy.ns.com 16 2026-04-29 2026-08-26 ok

Programmatic access, with DNS A records: API GET /v1/hosts/ns.com (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/ns.com.