Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

100 hosts (first page) · 464 ms

HostCertsFirst seenLast seenDNS
subway.com 7 2025-09-04 2026-08-10 ok
*.subway.com 17 2025-07-11 2026-08-10 —
api-p1.subway.com 10 2026-04-28 2026-08-24 ok
api-r1.subway.com 12 2026-04-27 2026-08-23 ok
thefeed2.subway.com 4 2026-03-14 2026-09-17 ok
cateringca.subway.com 4 2026-03-11 2026-08-14 ok
cms-emea.subway.com 3 2026-07-02 2026-09-06 ok
*.ra.subway.com 1 2026-05-27 2026-05-27 —
aws-gp.ra.subway.com 5 2026-05-09 2026-09-18 ok
subway-gp.ra.subway.com 5 2026-04-28 2026-09-07 ok
rmpbeta.subway.com 5 2026-05-19 2026-09-28 ok
thefeed.subway.com 3 2025-09-04 2026-08-05 ok
id.subway.com 1 2025-12-04 2025-12-04 ok
subid.subway.com 3 2026-02-28 2026-10-01 ok
parallel.subid.subway.com 6 2026-03-01 2026-09-25 ok
cpservice.subway.com 5 2026-05-06 2026-09-15 ok
swag.subway.com 15 2026-05-23 2026-09-18 ok
dataengineering.subway.com 3 2026-07-30 2026-10-04 ok
data.mktg.subway.com 2 2026-04-25 2026-04-25 ok
cdn.mktg.subway.com 2 2026-03-26 2026-08-26 ok
data.stagemktg.subway.com 2 2026-04-25 2026-04-25 ok
cdn.stagemktg.subway.com 2 2026-03-26 2026-08-26 ok
data.devmktg.subway.com 2 2026-04-24 2026-04-24 ok
devlanding.devmktg.subway.com 4 2025-07-10 2026-07-13 ok
cdn.devmktg.subway.com 2 2026-03-26 2026-08-26 ok
auth-stg.subway.com 13 2026-04-25 2026-09-27 ok
rewardsmerch.subway.com 12 2026-04-09 2026-10-03 ok
auth.subway.com 9 2026-04-11 2026-09-13 ok
emeaapi.subway.com 3 2026-06-24 2026-08-29 ok
smartposhostapi.subway.com 4 2025-12-04 2025-12-10 nodata
www.smartposhostapi.subway.com 4 2025-12-04 2025-12-10 nodata
m1.click.subway.com 3 2025-10-27 2026-09-27 ok
res1.click.subway.com 3 2025-10-27 2026-09-27 ok
t1.click.subway.com 3 2025-10-27 2026-09-27 ok
t2.click.subway.com 4 2026-04-16 2026-09-15 ok
m3.click.subway.com 3 2025-10-27 2026-09-27 nxdomain
res3.click.subway.com 2 2025-09-09 2026-08-10 ok
t3.click.subway.com 3 2025-10-27 2026-09-27 ok
m4.click.subway.com 3 2025-10-27 2026-09-27 ok
res4.click.subway.com 2 2025-09-09 2026-08-10 ok
t4.click.subway.com 3 2025-10-27 2026-09-27 ok
m5.click.subway.com 3 2025-10-27 2026-09-27 ok
res5.click.subway.com 2 2025-09-09 2026-08-10 ok
t5.click.subway.com 3 2025-10-27 2026-09-27 ok
web.click.subway.com 3 2025-10-27 2026-09-27 ok
monmarketinglocal.subway.com 1 2026-01-30 2026-01-30 ok
spmlocal.subway.com 3 2025-08-13 2026-10-05 nodata
emeamarketingportal.subway.com 2 2026-03-05 2026-07-21 ok
cloudopsmanual.subway.com 1 2025-12-04 2025-12-04 ok
newsroom.subway.com 16 2026-05-28 2026-09-23 ok
emea.newsroom.subway.com 13 2026-05-05 2026-08-31 ok
lac.newsroom.subway.com 20 2026-05-15 2026-09-10 ok
apac.newsroom.subway.com 10 2026-04-14 2026-08-10 ok
regional.newsroom.subway.com 10 2026-05-14 2026-09-10 ok
marketingportalmeap.subway.com 2 2026-03-05 2026-07-21 ok
mcp.subway.com 3 2026-06-26 2026-08-31 ok
amp.subway.com 1 2025-07-31 2025-07-31 nxdomain
media.amp.subway.com 4 2025-12-04 2025-12-10 nxdomain
rmp.subway.com 3 2026-06-05 2026-08-10 ok
ms-app.subway.com 1 2025-12-04 2025-12-04 ok
agent.liveiq.subway.com 8 2026-05-07 2026-09-16 ok
m3.subs.subway.com 3 2025-10-27 2026-09-27 nxdomain
res3.subs.subway.com 2 2025-09-09 2026-08-10 ok
t3.subs.subway.com 3 2025-10-27 2026-09-27 ok
m4.subs.subway.com 3 2025-10-27 2026-09-27 ok
res4.subs.subway.com 2 2025-09-09 2026-08-10 ok
t4.subs.subway.com 3 2025-10-27 2026-09-27 ok
m5.subs.subway.com 3 2025-10-27 2026-09-27 ok
res5.subs.subway.com 2 2025-09-09 2026-08-10 ok
t5.subs.subway.com 3 2025-10-27 2026-09-27 ok
web.subs.subway.com 3 2025-10-27 2026-09-27 ok
tde.subs.subway.com 3 2026-05-25 2026-08-09 ok
tfi.subs.subway.com 3 2026-05-25 2026-08-09 ok
ttuki.subs.subway.com 3 2026-05-25 2026-08-09 ok
m.subs.subway.com 3 2025-10-27 2026-09-27 ok
res.subs.subway.com 3 2025-10-27 2026-09-27 ok
t.subs.subway.com 3 2026-05-31 2026-08-15 ok
ethics.subway.com 10 2026-06-05 2026-10-01 ok
www.ethics.subway.com 14 2026-06-05 2026-10-01 ok
restaurantes.subway.com 5 2026-05-28 2026-09-26 ok
storeattributes.subway.com 3 2026-06-15 2026-08-20 ok
data.emails.subway.com 2 2026-04-25 2026-04-25 ok
cdn.emails.subway.com 2 2026-03-26 2026-08-26 ok
data.stageemails.subway.com 2 2026-04-26 2026-04-26 ok
cdn.stageemails.subway.com 2 2026-03-26 2026-08-26 ok
data.devemails.subway.com 2 2026-04-25 2026-04-25 ok
cdn.devemails.subway.com 2 2026-03-26 2026-08-26 ok
eurocomms.subway.com 1 2025-06-22 2025-06-22 ok
artistsweeps.subway.com 5 2026-05-26 2026-09-22 ok
careers.subway.com 3 2026-06-07 2026-08-08 ok
p2.partners.subway.com 2 2026-01-08 2026-01-08 ok
restaurants.subway.com 10 2026-04-22 2026-08-18 ok
prodpayments.subway.com 3 2025-07-23 2026-07-16 nxdomain
devpayments.subway.com 3 2025-07-23 2026-07-16 nxdomain
freshconnect.subway.com 1 2026-09-22 2026-09-22 nodata
ceemkt.subway.com 1 2026-01-30 2026-01-30 ok
vmt.subway.com 3 2026-05-19 2026-07-23 ok
test.subway.com 6 2025-09-01 2026-08-25 ok
*.test.subway.com 27 2025-09-01 2026-09-02 —
swqe1.test.subway.com 3 2026-06-10 2026-08-15 ok

Showing the first 100 hostnames — sign in with GitHub or Google to page the full list, or use the API with an API key: GET /v1/hosts/subway.com.

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/subway.com.