Certificate Transparency Lookup (crt.sh): Certs by Domain
Pricing
from $0.10 / 1,000 certificates
Certificate Transparency Lookup (crt.sh): Certs by Domain
Look up issued TLS certificates for a domain in public Certificate Transparency logs via crt.sh: names, issuer, validity dates and serial. One polite request at a time.
Pricing
from $0.10 / 1,000 certificates
Rating
0.0
(0)
Developer
Lepi Data
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
3 hours ago
Last modified
Categories
Share
What it does. A certificate transparency lookup: for each domain, lists the publicly logged TLS certificates found on crt.sh, with the names on each certificate, the issuing CA, validity dates and serial number. Useful for certificate inventory, renewal tracking and checking which CA issued certificates for your domains.
Input (from .actor/input_schema.json)
domains: up to 10 per runincludeSubdomains(default off),excludeExpired(default on)maxItems: up to 5,000 rows
Output fields
domain, certId, commonName, names, issuerName, issuerCaId, notBefore, notAfter, serialNumber, expired, crtShUrl
Free status rows (not charged): no-results, invalid-input, api-error, free-plan-limit, charge-limit-reached.
Example (the build's prefill)
Input: {"domains":["example.com"],"excludeExpired":true,"maxItems":100}
Data source and compliance
- Source: crt.sh, a free public Certificate Transparency search service operated by Sectigo, over public CT logs. This is an independent Lepi Data tool, not affiliated with or endorsed by Sectigo or crt.sh.
- Polite by design: one request at a time, at least 3 seconds apart, each answer cached for the run, at most 10 domains and 5,000 rows per run. If crt.sh is busy you get a free
api-errorrow; try again later. - Certificates that carry e-mail addresses (personal S/MIME certificates) are left out.
- Free-plan accounts get up to 100 results per run.
Pricing. Pay per result, flat on every plan, no start fee. Free status rows are never charged.
