Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

15 hosts · 478 ms

HostCertsFirst seenLast seenDNS
oldnavy.com 2 2026-02-05 2026-08-18 ok
cp1.oldnavy.com 3 2026-05-06 2026-08-22 ok
sli.oldnavy.com 2 2025-09-24 2026-08-25 ok
mi.oldnavy.com 4 2026-04-13 2026-09-02 ok
stage.api.oldnavy.com 5 2025-07-08 2026-08-27 ok
image.email.oldnavy.com 4 2025-07-10 2026-07-30 ok
click.email.oldnavy.com 2 2025-07-06 2026-06-24 ok
pages.email.oldnavy.com 2 2025-07-06 2026-06-24 ok
view.email.oldnavy.com 2 2025-07-06 2026-06-23 ok
cp.oldnavy.com 9 2026-04-09 2026-09-20 ok
jobs.oldnavy.com 2 2026-05-04 2026-08-26 ok
careers.oldnavy.com 2 2026-05-04 2026-08-26 ok
sports.oldnavy.com 5 2026-05-05 2026-09-14 ok
sport.oldnavy.com 1 2026-09-15 2026-09-15 nodata
www.oldnavy.com 1 2026-02-05 2026-02-05 ok

Programmatic access, with DNS A records: API GET /v1/hosts/oldnavy.com (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/oldnavy.com.