Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

19 hosts · 367 ms

HostCertsFirst seenLast seenDNS
privatemdlabs.com 17 2026-05-27 2026-09-25 ok
*.privatemdlabs.com 17 2026-05-27 2026-09-25 —
pdf.privatemdlabs.com 5 2026-05-27 2026-09-24 ok
dash.privatemdlabs.com 5 2026-04-22 2026-08-19 ok
wiki.privatemdlabs.com 5 2026-05-15 2026-09-12 ok
api.privatemdlabs.com 4 2026-04-15 2026-08-12 ok
hq-cdn.privatemdlabs.com 12 2026-04-13 2026-08-09 ok
help.privatemdlabs.com 4 2026-05-18 2026-07-16 ok
emr.privatemdlabs.com 4 2026-04-12 2026-08-09 ok
chatgpt.privatemdlabs.com 5 2026-05-14 2026-09-11 ok
api-dex-cert.privatemdlabs.com 5 2026-05-13 2026-09-11 ok
labcorp-dex-cert.privatemdlabs.com 5 2026-05-24 2026-09-22 ok
access-dex-cert.privatemdlabs.com 2 2026-05-09 2026-05-09 nxdomain
trt.privatemdlabs.com 33 2026-06-22 2026-10-02 ok
www.privatemdlabs.com 5 2026-05-03 2026-09-01 ok
api-dex.privatemdlabs.com 4 2026-04-19 2026-08-18 ok
labcorp-dex.privatemdlabs.com 5 2026-05-04 2026-09-01 ok
access-dex.privatemdlabs.com 2 2026-05-09 2026-05-09 nxdomain
daily.privatemdlabs.com 6 2026-04-29 2026-08-26 ok

Programmatic access, with DNS A records: API GET /v1/hosts/privatemdlabs.com (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/privatemdlabs.com.