Pricing

Pay per event

Try for free

Go to Apify Store

Certificate Transparency Subdomain Scraper

Try for free

Enumerate subdomains and audit certificate hygiene via crt.sh's public Certificate Transparency log — no API key. Get one row per certificate or unique subdomain with computed expiry, wildcard, and freshness signals, capped so a popular domain never blows your bill.

Pricing

Pay per event

Rating

0.0

(0)

Developer

DevilScrapes

Actor stats

Bookmarked

Total users

Monthly active users

a day ago

Last modified

crt.sh Certificate Transparency & Subdomain Enumeration — Changelog

0.0.1 — 2026-09-05

Initial implementation: src/crtsh_client.py (curl-cffi GET against crt.sh/?q=%25.<domain>&output=json, retry/backoff on 408/429/503 + network errors, per-domain failure never crashes the run), src/parser.py (pure filter → dedupe/split → cap → compute → ResultRow pipeline, REQ-3..REQ-6), src/main.py (validate → charge actor-start → per-domain loop → push + charge certificate-scraped).
.actor/ scaffolded: actor.json, input/output/dataset schemas, PPE (actor-start $0.20 flat, certificate-scraped $0.006/row), Dockerfile (CMD ["python", "-m", "src"] matching src/__main__.py).
Test coverage: test_models.py, test_parser.py (fixture-driven against real captured crt.sh samples), test_crtsh_client.py (mocked session), test_main_fault_isolation.py, test_charge_order.py, test_charge_no_idempotency_key.py, test_prefill_smoke.py (opt-in, live network).
Icon pending — actor-icon-designer runs as the next step.
See docs/specs/crt-sh-certificate-transparency-scraper/design.md for the full architecture.

Certificate Transparency & Subdomain Discovery Scraper

scrapers_lat/certificate-transparency-scraper

Discover subdomains and SSL/TLS certificates for any domain from public certificate transparency logs. Extract SAN hostnames, issuer, validity dates, wildcard and expiry flags. Perfect for attack-surface mapping, OSINT and asset inventory. Export to JSON, CSV or Excel.

Scrapers Lat

Certificate Transparency Scraper: Subdomain Discovery

arman-bd/certificate-transparency-scraper

Query certificate transparency logs via crt.sh to enumerate subdomains, issuers, validity windows and certificate history for any domain. Passive attack-surface discovery. no login, no proxy, no browser.

Arman Hossain

crt.sh Certificate Transparency Scraper

parseforge/crtsh-certificate-transparency-scraper

Search crt.sh certificate transparency logs for a domain and discover subdomains. Get common name, SANs, issuer, validity dates, and serial number per certificate.

ParseForge

DNS & Domain Intelligence Scraper (SPF, DMARC, DKIM, DNSSEC)

scrapers_lat/dns-domain-intelligence-scraper

Resolve full DNS records for any domain via DNS-over-HTTPS: A, AAAA, MX, NS, TXT, SOA, CAA, plus parsed SPF, DMARC, DKIM, DNSSEC and mail-provider intelligence. Ideal for OSINT, attack-surface mapping, email-security audits and KYB. Export to JSON, CSV or Excel.

Scrapers Lat

Certificate-Transparency Newly-Launched Startup Lead Extractor

ayeeyee/ct-newly-launched-startup-lead-extractor

Day-zero startup leads from Certificate Transparency: crt.sh finds domains whose FIRST TLS cert was just issued, we enrich each new site's OWN website with MX/DNS-verified emails + phones + socials + tech stack + A-D launch-readiness. Be first to a newly-launched business. Per-result, no keys.

Virtual Footprint LLC

Organization Registered Domain & Subdomain Scraper

lofomachines/organization-registered-domain-subdomain-scraper

Discover all domains registered by any organization by company domain. Find related domains, subdomains, registration dates, expiration dates, and registrar information. Perfect for brand protection, competitive analysis, M&A due diligence, and security research.

Lofomachines

Subdomain Finder: Certificate Transparency

glitchbound/subdomain-scraper

Enumerate every subdomain of a domain from public Certificate Transparency logs. No brute-force wordlist and no DNS hammering, because every TLS certificate is logged, so the hosts are already public record. Deduplicated to one row per hostname, with first seen, issuing CA and current validity.

Daniel Meshulam

Subdomain Radar — Passive OSINT Enumeration

saregaa/subdomain-scraper

Discover subdomains silently. No brute-force — pure OSINT from 5 passive sources with DNS resolve, HTTP probing & takeover detection.

Saregaa

MapQuest Leads Scraper (Emails, Phones, Socials)

dev00/mapquest-leads-scraper-api

MapQuest B2B lead extractor with verified emails, phones, WhatsApp, socials (LinkedIn, IG, FB), WHOIS contacts, PageSpeed scores, subdomains, website crawler, opening hours, tech stack, and ready-to-send AI cold outreach pitches.

dev00

🔥 $1/1k Google Maps Leads Scraper (Emails, Phones, Socials)

dev00/google-maps-leads-scraper-api

🔥 $1 / 1k Leads - Google Maps B2B lead extractor with verified emails, phones, WhatsApp, socials (LinkedIn, IG, FB), WHOIS contacts, PageSpeed scores, subdomains, website crawler, opening hours, tech stack, and ready-to-send AI cold outreach pitches.

dev00