Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts and first/last seen dates.

9 hosts · 276 ms

HostCertsFirst seenLast seen
mail-esa.test.bnpparibas.com 2 2025-09-05 2026-09-01
www.mail-esa.test.bnpparibas.com 2 2025-09-05 2026-09-01
edge.test.bnpparibas.com 2 2025-09-05 2025-09-09
smtp-in-internet-usr.test.bnpparibas.com 2 2025-09-05 2026-09-01
keys.test.bnpparibas.com 20 2025-07-25 2026-08-24
www.keys.test.bnpparibas.com 2 2026-06-22 2026-06-22
autodiscover-itg-ext.test.bnpparibas.com 35 2025-08-27 2026-09-01
ews-itg-ext.test.bnpparibas.com 35 2025-08-27 2026-09-01
www.ews-itg-ext.test.bnpparibas.com 7 2026-08-19 2026-09-01

Programmatic access: API GET /v1/hosts/test.bnpparibas.com (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/test.bnpparibas.com.