Pricing

from $10.00 / 1,000 subdomains

Try for free

Go to Apify Store

Subdomain Finder: Certificate Transparency Scan

Try for free

Find subdomains of any domain from Certificate Transparency (crt.sh) logs: hostnames, first and last seen, wildcard and valid-cert flags, issuer summary per domain. Export CSV, Excel, JSON. No login or API key. Example: mercadolibre.com returned 129 subdomains from 624 certificates.

Pricing

from $10.00 / 1,000 subdomains

Rating

0.0

(0)

Developer

RecordsData

Actor stats

Bookmarked

Total users

Monthly active users

9 days ago

Last modified

Categories

Developer tools

SEO tools

You can access the Subdomain Finder: Certificate Transparency Scan programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1import { ApifyClient } from 'apify-client';
2
3// Initialize the ApifyClient with your Apify API token
4// Replace the '<YOUR_API_TOKEN>' with your token
5const client = new ApifyClient({
6    token: '<YOUR_API_TOKEN>',
7});
8
9// Prepare Actor input
10const input = {
11    "domains": [
12        "example.org"
13    ],
14    "maxItems": 10
15};
16
17// Run the Actor and wait for it to finish
18const run = await client.actor("recordsdata/subdomain-finder-scraper").call(input);
19
20// Fetch and print Actor results from the run's dataset (if any)
21console.log('Results from dataset');
22console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
23const { items } = await client.dataset(run.defaultDatasetId).listItems();
24items.forEach((item) => {
25    console.dir(item);
26});
27
28// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

Subdomain Finder: Hostnames, Certs & Issuers API in JavaScript

The Apify API client for JavaScript is the official library that allows you to use Subdomain Finder: Certificate Transparency Scan API in JavaScript or TypeScript, providing convenience functions and automatic retries on errors.

Install the apify-client

$npm install apify-client

Other API clients include:

Subdomain Finder: Certificate Transparency Scan API in Python

Subdomain Finder: Certificate Transparency Scan API through CLI

Subdomain Finder: Certificate Transparency Scan OpenAPI definition

Subdomain Finder: Certificate Transparency Scan API

Subdomain Finder

happitap/subdomain-finder

Subdomain Finder is a high-speed intelligence tool that uncovers subdomains for any target domain using Certificate Transparency (CT) logs. Unlike traditional brute-force tools, it requires no heavy traffic and provides results in seconds.

HappiTap

Subdomain Finder & Reverse IP

canadesk/subdomain-finder-reverse-ip

Enumerate Subdomains and Reverse IPs with RapidDNS, Anubis, AlienVault and crt.sh! It's fast and costs little.

Canadesk Support

238

Subdomain Finder & Recon Tool

andok/subdomain-finder

Discover subdomains for any target via passive OSINT sources. Ideal for security bug bounties and attack surface mapping.

Andok

Subdomain Finder - Discover Subdomains via CT Logs

logiover/subdomain-finder

Discover every subdomain of any domain using Certificate Transparency logs (crt.sh). Fast bulk subdomain enumeration for security recon, attack-surface mapping, asset discovery and SEO. No API key — export to CSV or JSON.

Logiover

Subdomain Finder — Certificate Transparency (crt.sh)

bgfc97/crtsh-subdomain-finder

Discover subdomains of any domain from public Certificate Transparency logs (crt.sh). Attack-surface mapping and recon with first/last-seen dates. No key, no proxy.

Bruno

Bulk Email Finder with Email Verification

scalelist/email-finder

Find verified business emails using first name, last name, and company name or company domain. Email verification is included in the output.

Scalelist

263

Organization Registered Domain & Subdomain Scraper

lofomachines/organization-registered-domain-subdomain-scraper

Discover all domains registered by any organization by company domain. Find related domains, subdomains, registration dates, expiration dates, and registrar information. Perfect for brand protection, competitive analysis, M&A due diligence, and security research.

Lofomachines

Subdomain Finder - CT Log Enumeration + Live DNS Check

eliai/subdomain-finder

Enumerate a domain's subdomains from Certificate Transparency logs, with an optional live DNS resolve. All subdomains in one record. $0.005 per domain (not per subdomain), far cheaper than paid finders; failures are free.

Broke to Built

Certificate Transparency & Subdomain Discovery Scraper

scrapers_lat/certificate-transparency-scraper

Discover subdomains and SSL/TLS certificates for any domain from public certificate transparency logs. Extract SAN hostnames, issuer, validity dates, wildcard and expiry flags. Perfect for attack-surface mapping, OSINT and asset inventory. Export to JSON, CSV or Excel.

Scrapers Lat

Subdomain Finder: Certificate Transparency

glitchbound/subdomain-scraper

Subdomain discovery and subdomain lookup from Certificate Transparency logs: a certificate search over every SSL certificate ever logged, with no brute-force wordlist and no DNS hammering. One row per hostname with first seen, issuing CA and validity, for recon and asset discovery.