Search public CT logs through crt.sh to discover issued certificates, mapped hostnames, and potential exposure in your domain space. Export results quickly for reporting and investigation workflows.
Source: crt.sh (public Certificate Transparency aggregator).
Run a search - results come from crt.sh.
// use wildcard syntax like %.example.com for broad subdomain discovery
CT logs provide a public record of issued TLS certificates. Reviewing them helps defenders identify unknown hostnames, monitor certificate issuance, and detect potential misconfiguration or abuse - especially useful for external attack-surface monitoring and domain inventory.
Enter a domain or wildcard pattern.
Review returned certificate hostnames.
Export findings to CSV for analysis and sharing.
CT is a public, append-only log of TLS certificates. Certificate authorities publish certificates they issue so anyone can detect mis-issued or rogue certs for your domains.
This UI queries crt.sh, a public aggregator of CT logs. Your search terms are sent to crt.sh through this app so results match what you would get from their service.
Yes. Use the CSV export in the tool to download the hostname list for reporting or further analysis.
They match certificate names that fit the pattern, which helps discover subdomains and alternate names seen in CT logs without listing every host manually.
