Find every subdomain
of a domain.

Every hostname under a domain that ever appeared in a public TLS certificate — with certificate counts, first/last seen and live DNS status.

17 hosts · 261 ms

HostCertsFirst seenLast seenDNS
zatca.gov.sa 16 2025-12-18 2026-08-22 ok
*.zatca.gov.sa 10 2026-04-27 2026-08-22 —
prdexpe01.zatca.gov.sa 1 2025-12-18 2025-12-18 ok
prdexpwe01.zatca.gov.sa 1 2026-05-14 2026-05-14 ok
prdexpe02.zatca.gov.sa 1 2025-12-18 2025-12-18 ok
prdexpwe02.zatca.gov.sa 1 2026-05-14 2026-05-14 ok
prdexpe03.zatca.gov.sa 1 2025-12-18 2025-12-18 ok
prdexpwe03.zatca.gov.sa 1 2026-05-14 2026-05-14 ok
employeeexperience.zatca.gov.sa 1 2025-11-19 2025-11-19 ok
prdexpe.zatca.gov.sa 3 2025-12-18 2025-12-18 ok
prdexpwe.zatca.gov.sa 3 2026-05-14 2026-05-14 nxdomain
fatcaaeoi.zatca.gov.sa 4 2025-09-04 2026-09-10 nxdomain
join.zatca.gov.sa 6 2025-12-18 2026-05-14 ok
hackathon.zatca.gov.sa 1 2025-09-14 2025-09-14 nxdomain
careers.zatca.gov.sa 1 2026-06-01 2026-06-01 ok
dts.zatca.gov.sa 2 2025-06-30 2026-07-30 ok
dtsuat.zatca.gov.sa 2 2025-06-30 2026-07-30 ok

Programmatic access, with DNS A records: API GET /v1/hosts/zatca.gov.sa (API key for paging).

Shown here: hostnames with a certificate that is valid now or expired within the last 90 days. The full history since 2013 — hostnames whose last certificate expired earlier — is a Pro plan method: GET /v1/hosts-history/zatca.gov.sa.