Subdomain Finder

Discovers subdomains for a given root domain using certificate transparency logs (crt.sh).

Typical questions:

• Which hostnames appear on public certificates for this domain?
• Are there forgotten or legacy subdomains still covered by valid certificates?
• Which hosts should be considered in further testing or monitoring?

For request format, parameters, and examples, see the Endpoint page in this module.