Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

12 hosts · 413 ms

HostCertsFirst seenLast seenDNS
waterstones.com 2 2025-09-18 2026-09-09 ok
*.waterstones.com 2 2025-09-18 2026-09-09 —
static.waterstones.com 9 2026-05-16 2026-09-29 ok
link.waterstones.com 5 2026-05-11 2026-09-06 ok
itservicedesk.waterstones.com 12 2026-04-29 2026-08-28 ok
mail.waterstones.com 3 2026-03-03 2026-03-05 ok
cdn.waterstones.com 13 2026-05-19 2026-09-15 ok
hpp.waterstones.com 12 2026-04-27 2026-08-24 ok
autodiscover.waterstones.com 2 2026-03-04 2026-03-05 ok
static-uat.waterstones.com 1 2026-09-28 2026-09-28 ok
www.waterstones.com 8 2026-04-13 2026-08-09 servfail
legacy.waterstones.com 2 2026-03-04 2026-03-05 ok

Programmatic access, with DNS A records: API GET /v1/hosts/waterstones.com (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/waterstones.com.