Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

9 hosts · 318 ms

HostCertsFirst seenLast seenDNS
punchbowl.com 4 2025-06-26 2026-06-30 ok
*.punchbowl.com 5 2025-06-26 2026-06-30 —
li.punchbowl.com 2 2026-04-05 2026-09-05 ok
*.mail.punchbowl.com 2 2026-03-11 2026-07-27 —
*.email.punchbowl.com 2 2026-03-11 2026-07-27 —
mpn.punchbowl.com 5 2026-05-26 2026-09-19 ok
help.punchbowl.com 5 2026-05-03 2026-08-30 ok
shop.punchbowl.com 9 2026-04-18 2026-08-29 ok
vpn-aws.punchbowl.com 3 2026-05-25 2026-08-17 ok

Programmatic access, with DNS A records: API GET /v1/hosts/punchbowl.com (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/punchbowl.com.