Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

100 hosts (first page) · 472 ms

HostCertsFirst seenLast seenDNS
sans.org 20 2026-01-22 2026-10-01 ok
*.sans.org 20 2026-01-22 2026-10-01 —
isc1.sans.org 1 2026-02-17 2026-02-17 ok
isc2.sans.org 1 2026-02-17 2026-02-17 ok
lists3.sans.org 3 2026-04-29 2026-09-29 ok
sa-cab.sans.org 5 2026-05-19 2026-09-16 ok
ssahub.sans.org 4 2026-04-15 2026-08-26 ok
cc.sans.org 2 2025-10-16 2026-09-15 ok
sic.sans.org 3 2025-10-06 2025-10-06 ok
isc.sans.org 1 2026-02-17 2026-02-17 ok
*.cyberwarriorchallenge.sans.org 19 2026-01-22 2026-10-01 —
sparkle.sans.org 1 2025-11-23 2025-11-23 ok
redmine.sans.org 4 2025-09-29 2026-09-13 ok
brochure.sans.org 1 2026-02-17 2026-02-17 ok
www.brochure.sans.org 1 2026-02-17 2026-02-17 ok
cyber-defense.sans.org 3 2025-10-06 2025-10-06 ok
sans-training.sans.org 13 2026-04-30 2026-08-26 ok
pen-testing.sans.org 2 2025-10-06 2025-10-06 ok
pentesting.sans.org 3 2025-10-06 2025-10-06 ok
ondemand-search.sans.org 1 2026-05-11 2026-05-11 ok
pre-ondemand-search.sans.org 1 2026-05-11 2026-05-11 nxdomain
phish.sans.org 5 2026-06-03 2026-10-01 ok
qa-auth.sans.org 2 2026-02-28 2026-07-16 ok
*.qa-auth.sans.org 2 2026-02-28 2026-07-16 —
uat-auth.sans.org 2 2026-04-11 2026-09-11 ok
*.uat-auth.sans.org 2 2026-04-11 2026-09-11 —
dev-auth.sans.org 2 2026-02-25 2026-07-13 ok
*.dev-auth.sans.org 2 2026-02-25 2026-07-13 —
api.sans.org 1 2025-12-25 2025-12-25 ok
integration-api.sans.org 1 2025-12-25 2025-12-25 nodata
dev-cmp-api.sans.org 1 2026-01-18 2026-01-18 ok
recordings-api.sans.org 2 2026-03-07 2026-08-07 ok
bvt-api.sans.org 1 2025-12-23 2025-12-23 nodata
*.feedback.sans.org 19 2026-01-22 2026-10-01 —
ciso-network.sans.org 4 2026-04-12 2026-08-10 ok
uk.sans.org 3 2025-10-06 2025-10-06 ok
partnerportal.sans.org 1 2026-02-17 2026-02-17 ok
mail.sans.org 3 2026-04-29 2026-09-29 ok
image.email.sans.org 4 2026-01-21 2026-08-03 ok
click.email.sans.org 1 2026-05-16 2026-05-16 ok
view.email.sans.org 3 2026-05-18 2026-05-18 ok
*.ukcyberteam.sans.org 19 2026-01-22 2026-10-01 —
securingthehuman.sans.org 3 2025-10-06 2025-10-06 ok
login.sans.org 2 2025-08-04 2026-08-26 ok
qa-login.sans.org 2 2025-08-04 2026-08-26 ok
www.qa-login.sans.org 2 2025-08-04 2026-08-26 nxdomain
uat-login.sans.org 1 2025-11-10 2025-11-10 ok
www.uat-login.sans.org 1 2025-11-10 2025-11-10 nxdomain
dev-login.sans.org 2 2025-08-04 2026-08-26 ok
www.dev-login.sans.org 2 2025-08-04 2026-08-26 nxdomain
www.login.sans.org 2 2025-08-04 2026-08-26 nxdomain
odadmin.sans.org 2 2025-08-03 2026-07-20 ok
pre-odadmin.sans.org 1 2026-01-26 2026-01-26 ok
*.innovation.sans.org 19 2026-01-22 2026-10-01 —
zeus.vpn.sans.org 2 2025-08-28 2026-08-26 ok
www.zeus.vpn.sans.org 2 2025-08-28 2026-08-26 nxdomain
info.sans.org 5 2025-06-13 2026-09-29 ok
go.sans.org 2 2025-07-25 2026-06-25 ok
idp.sans.org 3 2026-04-29 2026-09-29 ok
ep.sans.org 1 2025-08-28 2025-08-28 ok
www.ep.sans.org 1 2025-08-28 2025-08-28 nxdomain
devhq.sans.org 1 2025-12-17 2025-12-17 ok
api.devhq.sans.org 1 2025-12-17 2025-12-17 ok
develop.devhq.sans.org 1 2026-01-24 2026-01-24 ok
api.develop.devhq.sans.org 1 2026-01-24 2026-01-24 ok
sandbox.devhq.sans.org 1 2025-11-17 2025-11-17 ok
api.sandbox.devhq.sans.org 1 2025-11-17 2025-11-17 ok
labs.sans.org 2 2026-03-07 2026-07-23 ok
*.labs.sans.org 21 2026-01-22 2026-10-01 —
rundeck-prod.labs.sans.org 2 2026-04-02 2026-09-02 ok
api.labs.sans.org 2 2026-04-04 2026-09-04 ok
r2.odin.labs.sans.org 1 2025-12-04 2025-12-04 ok
*.r2.odin.labs.sans.org 1 2025-12-04 2025-12-04 —
oidc.odin.labs.sans.org 1 2025-12-29 2025-12-29 ok
api.odin.labs.sans.org 5 2026-05-08 2026-09-05 ok
fwr.odin.labs.sans.org 6 2026-05-03 2026-08-31 ok
mylabs.odin.labs.sans.org 1 2025-12-11 2025-12-11 ok
*.mylabs.odin.labs.sans.org 1 2025-12-11 2025-12-11 —
dashboards.odin.labs.sans.org 5 2026-05-08 2026-09-05 ok
thanos.odin.labs.sans.org 5 2026-05-08 2026-09-05 ok
alerts.odin.labs.sans.org 5 2026-05-08 2026-09-05 ok
oasis.labs.sans.org 1 2025-12-23 2025-12-23 nodata
*.oasis.labs.sans.org 1 2025-12-23 2025-12-23 —
api.oasis.labs.sans.org 1 2025-12-23 2025-12-23 ok
develop.oasis.labs.sans.org 1 2025-12-23 2025-12-23 nodata
*.develop.oasis.labs.sans.org 1 2025-12-23 2025-12-23 —
api.develop.oasis.labs.sans.org 1 2025-12-23 2025-12-23 ok
sandbox.oasis.labs.sans.org 1 2025-12-20 2025-12-20 nodata
*.sandbox.oasis.labs.sans.org 1 2025-12-20 2025-12-20 —
api.sandbox.oasis.labs.sans.org 1 2025-12-20 2025-12-20 ok
pywars.labs.sans.org 3 2025-10-16 2026-09-15 nodata
*.pywars.labs.sans.org 3 2025-10-16 2026-09-15 —
r2.odin.devlabs.sans.org 1 2025-12-05 2025-12-05 ok
*.r2.odin.devlabs.sans.org 1 2025-12-05 2025-12-05 —
oidc.odin.devlabs.sans.org 1 2025-12-24 2025-12-24 ok
api.odin.devlabs.sans.org 4 2026-04-17 2026-08-15 ok
fwr.odin.devlabs.sans.org 5 2026-05-04 2026-09-01 ok
mylabs.odin.devlabs.sans.org 1 2025-12-09 2025-12-09 ok
*.mylabs.odin.devlabs.sans.org 1 2025-12-09 2025-12-09 —
dashboards.odin.devlabs.sans.org 4 2026-04-17 2026-08-15 ok

Showing the first 100 hostnames — sign in with GitHub or Google to page the full list, or use the API with an API key: GET /v1/hosts/sans.org.

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/sans.org.