SSL Certificate Transparency Scraper (crt.sh)

SSL Certificate Transparency Scraper (crt.sh) — a fast, reliable certificate search scraper that needs no API key. You pay only for the results you get: failed or empty runs are always free.

This certificate search scraper runs on the Apify platform, so you can call it from the API, run it on a schedule, or export results to JSON, CSV, Excel, or Google Sheets.

What this scraper does

• Extracts structured certificate search data with no browser or API key required
• Returns clean JSON, one record per result — ready for sheets, databases, or apps
• Pay-per-result pricing: you are never charged for a run that returns nothing
• Runs on demand or on a schedule, and integrates with 5,000+ apps via the Apify API and webhooks

What data you get

Each result record includes fields such as:

• Cert Id (certId) — e.g. 26787376238
• Common Name (commonName) — e.g. "example.com"
• Subdomains (subdomains) — e.g. ["*.example.com", "example.com"]
• Issuer Name (issuerName) — e.g. "C=US, O=SSL Corporation, CN=Cloudflare TLS Issuing RSA C...
• Issuer Ca Id (issuerCaId) — e.g. 413864
• Not Before (notBefore) — e.g. "2026-05-31T21:39:00"
• Not After (notAfter) — e.g. "2026-08-29T21:41:26"
• Serial Number (serialNumber) — e.g. "27fd65644d90aa4763b6cfb53d6dcca3"
• Entry Timestamp (entryTimestamp) — e.g. "2026-05-31T22:13:01.653"
• Result Count (resultCount) — e.g. 3
• Domain (domain) — e.g. "example.com"
• Url (url) — e.g. "https://crt.sh/?id=26787376238"

Input

Field	Type	Description
domains	array	Domains to look up in the Certificate Transparency logs, e.g. github.com. One crt.sh query is run per domai...
includeSubdomains	boolean	When enabled, the domain is queried as %.{domain} so certificates covering subdomains are included (great f...
maxResults	integer	Maximum number of certificate records returned per domain. crt.sh can return thousands; records are de-dupe...

Example output

{
  "type": "certificate",
  "certId": 26787376238,
  "commonName": "example.com",
  "subdomains": [
    "*.example.com",
    "example.com"
  ],
  "issuerName": "C=US, O=SSL Corporation, CN=Cloudflare TLS Issuing RSA CA 3",
  "issuerCaId": 413864,
  "notBefore": "2026-05-31T21:39:00",
  "notAfter": "2026-08-29T21:41:26",
  "serialNumber": "27fd65644d90aa4763b6cfb53d6dcca3",
  "entryTimestamp": "2026-05-31T22:13:01.653",
  "resultCount": 3,
  "domain": "example.com",
  "url": "https://crt.sh/?id=26787376238",
  "scrapedAt": "2026-07-11T00:00:00Z"
}

Use cases

• Monitor packages, repos, and dependencies
• Automate security and license audits
• Build developer dashboards and alerts
• Enrich internal tools and integrations

Run it as a monitor (alerts on new certificate search)

Schedule this certificate search scraper to run automatically — hourly, daily, or on any cron schedule — with the built-in Apify Scheduler, and have results pushed to you by webhook, email, Slack, or your own app the moment they're ready. It's the easiest way to monitor certificate search for changes over time and get alerted the instant something new appears — no manual runs. Because pricing is per result, a scheduled monitor only ever charges you for the data each run actually returns.

Pricing

This actor uses pay-per-result pricing at $0.0006 per record. There is no monthly fee and no start fee — and empty or failed runs cost $0, so you only ever pay for data you actually receive.

Frequently asked questions

Do I need an API key or account for the source? No. This certificate search scraper works out of the box with no API key required.

What happens if a run returns no results? You are not charged. Billing is per result, so empty or failed runs are free.

Can I run the certificate search scraper on a schedule? Yes. Use the Apify Scheduler to run it hourly, daily, or on any cron schedule, and get results by webhook or API.

What export formats are supported? Results can be exported as JSON, CSV, Excel, HTML, or pushed to Google Sheets, a database, or your own app via the Apify API.

Is the data structured? Yes. Every certificate search result is a clean, flat JSON record you can use immediately.