DNS & domain lookup

Certificate Transparency Search

Search public Certificate Transparency logs for every TLS certificate issued for a domain and its subdomains. Free, using Certspotter and crt.sh.

Search Certificate Transparency

Enter a domain to list every TLS certificate logged for it and its subdomains.

What this CT search does

Lists every logged certificate for a domain
Includes certificates for its subdomains
Shows names, issuer and validity for each
Uses Certspotter (reliable) with crt.sh fallback
Reveals certificates you may not know about
Real public log data — no scanning

Common use cases

  1. 1Auditing every certificate issued for your domain
  2. 2Spotting an unexpected or unauthorised certificate
  3. 3Discovering subdomains via their certificates
  4. 4Tracking a CA migration over time
  5. 5Investigating certificate mis-issuance
  6. 6Reconnaissance for authorised security testing

Related tools

Subdomain FinderSSL Certificate CheckerSSL chain validatorCAA record generatorSSL expiry monitorDNS Record Lookup

About Certificate Transparency

Certificate Transparency (CT) is a public, append-only system that logs every TLS certificate a CA issues. It exists so that mis-issued or unauthorised certificates can be detected — anyone can search the logs to see what has been issued for a domain.

This search queries public CT sources and lists the certificates recorded for your domain and its subdomains, with issuer and validity. Use it to monitor for unexpected certificates (a sign of compromise or mis-issuance) and to map which subdomains have certificates. Pair it with a CAA record to restrict who may issue.

More Free Tools Where This Came From

This utility is one of dozens of free, no-login tools for DNS, email, SEO and developers — all instant and private.

See All ToolsTalk to Our Team

HostCloud.in  ·  Pune, India  ·  Serving 34,987+ Websites Since 2020

FREQUENTLY ASKED QUESTIONS

Got Questions? We Have Answers.

What is Certificate Transparency?

CT is a public, append-only log of every TLS certificate a CA issues, created so mis-issued or unauthorised certificates can be detected by anyone.

Why search CT logs?

To audit every certificate issued for your domain, spot unexpected or unauthorised ones (a sign of compromise), and discover subdomains through their certificates.

Which sources does it use?

Certspotter as the reliable primary source, with crt.sh as a fallback — both public Certificate Transparency providers.

Does it show currently valid certificates only?

No. CT logs record all issued certificates, including expired ones, so you see the full history, each with its validity dates.

How do I stop unauthorised issuance?

Publish a CAA record listing only the CAs allowed to issue for your domain, and monitor CT logs for anything unexpected.

Is this legal to use?

Yes. CT logs are public. Use it to audit your own domains or for authorised security research.