Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

11 hosts · 323 ms

HostCertsFirst seenLast seenDNS
shorcan.com 5 2025-10-28 2026-09-28 ok
*.shorcan.com 4 2025-10-28 2026-09-28 —
*.qa.shorcan.com 4 2025-10-28 2026-09-28 —
web.shorcan.com 3 2026-04-21 2026-07-15 ok
htxprd.shorcan.com 6 2026-04-12 2026-09-11 ok
*.staging.shorcan.com 4 2025-10-28 2026-09-28 —
newton.shorcan.com 6 2026-04-12 2026-09-11 ok
uat.shorcan.com 6 2026-04-12 2026-09-11 ok
webu.shorcan.com 3 2026-04-21 2026-07-15 ok
*.dev.shorcan.com 4 2025-10-28 2026-09-28 —
htx.shorcan.com 6 2026-04-12 2026-09-11 ok

Programmatic access, with DNS A records: API GET /v1/hosts/shorcan.com (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/shorcan.com.