Under maintenance

Pricing

Pay per usage

Try for free

Go to Apify Store

Certificate Transparency Monitor — New Certs by Domain

Under maintenance

Try for free

Search Certificate Transparency logs for newly issued SSL/TLS certificates on a domain and its subdomains. Spot unauthorized certs or newly launched subdomains — official CT log data, no proxy, no scanning.

Pricing

Pay per usage

Rating

0.0

(0)

Developer

Timothy Kelvin

Actor stats

Bookmarked

Total users

Monthly active users

11 days ago

Last modified

Input

{
  "domain": "example.com",
  "daysBack": 30,
  "maxResults": 50
}

Field	Type	Description
`domain`	string	Domain to search, without protocol or `www.`. Matches this domain and all its subdomains. Required.
`daysBack`	number	How many days back from today to include, by CT log entry timestamp. Default `30`, max `365`.
`maxResults`	number	Max unique certificates to return, most recently logged first. Default `50`, max `200`.

Output

One record per unique certificate (deduplicated by serial number — the same cert is often logged to multiple CT logs):

{
  "commonName": "affiliate.example.com",
  "subjectAlternativeNames": ["affiliate.example.com"],
  "issuerName": "C=US, O=Let's Encrypt, CN=YR2",
  "serialNumber": "053e26ba7c9f4baa4c9bc1936a9fc4f47f33",
  "notBefore": "2026-08-09T03:25:05",
  "notAfter": "2026-11-07T03:25:04",
  "entryTimestamp": "2026-08-09T04:23:36.294",
  "crtshUrl": "https://crt.sh/?id=28666584809"
}

How it works

Direct calls to crt.sh, a free public Certificate Transparency log search service. No proxy, no login, no scraping — CT logs are public by design (every publicly-trusted certificate is logged there). crt.sh is a community service that occasionally returns transient errors under load; the actor retries automatically before giving up.

Pricing note

Billed per search, not per certificate returned — one charge whether the search returns 1 certificate or 200.

Looking for other risk-monitoring signals?

Vulnerability Alert — new CVEs by product and severity
Website Tech Stack Detector — tech fingerprint per domain

Certificate Transparency Monitor — AI Agent Recon API

logiover/certificate-transparency-monitor

Keyless certificate transparency intelligence for AI agents: crt.sh CT logs. Track new TLS certs for any domain, discover subdomains via wildcard, batch domains. Issuer, validity, SAN domains and serial per row. No API key, no browser.

Logiover

Certificate Transparency & Subdomain Discovery Scraper

scrapers_lat/certificate-transparency-scraper

Discover subdomains and SSL/TLS certificates for any domain from public certificate transparency logs. Extract SAN hostnames, issuer, validity dates, wildcard and expiry flags. Perfect for attack-surface mapping, OSINT and asset inventory. Export to JSON, CSV or Excel.

Scrapers Lat

Certificate Transparency Scraper: Subdomain Discovery

arman-bd/certificate-transparency-scraper

Query certificate transparency logs via crt.sh to enumerate subdomains, issuers, validity windows and certificate history for any domain. Passive attack-surface discovery. no login, no proxy, no browser.

Arman Hossain

SSL Certificate Transparency Scraper (crt.sh)

chrisp1211/certificate-search-scraper-max

Scrape SSL/TLS certificate transparency logs from crt.sh for any domain. Great for security audits and subdomain discovery. Returns common name, subdomains (SANs), issuer and validity. Pay per certificate; empty runs free.

Christian Pichichero

Certificate Transparency Log Firehose

jungle_synthesizer/certificate-transparency-log-firehose-scraper

Streams newly-issued certificates from public CT logs (Google, Cloudflare, DigiCert, Sectigo, TrustAsia) with a keyword/pattern watch-list match — delta-since-last-run, not a one-domain lookup.

BowTiedRaccoon

🔍 Subdomain Finder & CT Log Scraper

taroyamada/subdomain-finder

Map website architectures by extracting subdomains from public Certificate Transparency logs to find unlinked staging sites.

naoki anzai

SSL Certificate Monitor — Bulk Expiry & Chain Checker

accurate_pouch/ssl-monitor

Monitor SSL/TLS certificates in bulk. Expiry dates, issuer, protocol version, key size, certificate chain, SAN list. Webhook alerts for expiring certs. 5 domains free.

Manchitt Sanan

Subdomain Finder — Certificate Transparency (crt.sh)

bgfc97/crtsh-subdomain-finder

Discover subdomains of any domain from public Certificate Transparency logs (crt.sh). Attack-surface mapping and recon with first/last-seen dates. No key, no proxy.

Bruno

SSL Certificate & Subdomain Finder for Any Website

scrapemint/ssl-subdomain-finder

Find all the subdomains of any website and check its SSL certificates. Paste a domain and get every subdomain seen in public certificate records, plus the certificate issuer, valid dates and days until expiry. Great for security checks and finding forgotten sites. No API key needed.