Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

15 hosts · 390 ms

HostCertsFirst seenLast seenDNS
shifts.com 21 2025-09-10 2026-09-23 ok
*.shifts.com 18 2025-09-10 2026-09-23 —
www-stage.shifts.com 3 2026-06-04 2026-08-04 ok
www-intapi.shifts.com 5 2026-04-25 2026-08-27 ok
www-hotapi.shifts.com 5 2026-04-25 2026-08-27 ok
www-devapi.shifts.com 5 2026-04-25 2026-08-27 ok
resources.shifts.com 8 2026-05-20 2026-09-15 ok
webinars.shifts.com 22 2026-05-01 2026-08-27 ok
mta-sts.shifts.com 5 2026-05-13 2026-10-04 ok
www-int.shifts.com 3 2026-06-03 2026-08-04 ok
www-cint.shifts.com 5 2026-04-22 2026-08-24 ok
www-sint.shifts.com 5 2026-04-22 2026-08-24 ok
www-hot.shifts.com 3 2026-06-04 2026-08-04 ok
www-dev.shifts.com 3 2026-06-03 2026-08-04 ok
www.shifts.com 3 2026-06-08 2026-08-09 ok

Programmatic access, with DNS A records: API GET /v1/hosts/shifts.com (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/shifts.com.