# Map every subdomain a company exposes

**Use case:** 

Enumerate a domain's public subdomains from certificate transparency logs and see which still resolve. Attack surface in one run.

## Input

```json
{
  "domains": [
    "apify.com"
  ],
  "includeExpired": false,
  "includeWildcards": false,
  "maxHostsPerDomain": 50,
  "proxyConfiguration": {
    "useApifyProxy": true
  }
}
```

## Output

```json
{
  "hostname": {
    "label": "Hostname",
    "format": "text"
  },
  "domain": {
    "label": "Root domain",
    "format": "text"
  },
  "depth": {
    "label": "Depth",
    "format": "number"
  },
  "certificateActive": {
    "label": "Cert valid now",
    "format": "boolean"
  },
  "firstSeen": {
    "label": "First seen",
    "format": "text"
  },
  "lastSeen": {
    "label": "Valid until",
    "format": "text"
  },
  "certificates": {
    "label": "Certs",
    "format": "number"
  },
  "issuers": {
    "label": "Issuing CA",
    "format": "array"
  },
  "isWildcard": {
    "label": "Wildcard",
    "format": "boolean"
  },
  "error": {
    "label": "Error",
    "format": "text"
  }
}
```

## About this Actor

This example demonstrates how to use [Subdomain Finder: Certificate Transparency](https://apify.com/glitchbound/subdomain-scraper) with a specific input configuration. Visit the [Actor detail page](https://apify.com/glitchbound/subdomain-scraper) to learn more, explore other use cases, and run it yourself.