Certificate transparency

Two modes: local index (pipeline ingesting public Certificate Transparency logs into SQLite - no crt.sh quota) or crt.sh as a fallback. Use wildcard %. for subdomain discovery; export CSV for reporting.

Source: