Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

7 hosts · 278 ms

HostCertsFirst seenLast seenDNS
oldnavy.ca 6 2026-03-10 2026-08-18 ok
cp1.oldnavy.ca 3 2026-05-06 2026-08-22 ok
image.email.oldnavy.ca 4 2025-07-12 2026-07-30 ok
click.email.oldnavy.ca 2 2025-07-13 2026-07-06 ok
view.email.oldnavy.ca 2 2025-07-06 2026-06-23 ok
cp.oldnavy.ca 9 2026-04-09 2026-09-20 ok
www.oldnavy.ca 5 2026-03-10 2026-08-05 ok

Programmatic access, with DNS A records: API GET /v1/hosts/oldnavy.ca (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/oldnavy.ca.