SUBS
WAITINGSubdomains (CT)
Enter a domain above to run this check.
SUBDOMAINS (CT)
CHECK.
List the subdomains that appear in valid certificates in the Certificate Transparency logs and find exposed test environments and panels.
Runs only this check. For all 33 checks at once, use the full Domain X-Ray. Public lookups only; nothing is stored on the server.
What the check verifies
Lists the subdomains that appear in valid certificates in the Certificate Transparency logs.
Why it matters
This is what anyone can see of your domain: test environments, admin panels and forgotten services show up here.
What each result means
- INFO
- Lists subdomains and wildcards in certificates that are valid today and highlights names such as dev, staging, admin and vpn to review.
ERROR and TIMEOUT mean the query did not finish (the source was down or slow), not a problem with the domain: run the check again.
How to fix
Every public certificate goes to the CT logs, so these names are visible to anyone. Turn off what you no longer use and protect panels with authentication or a VPN. A wildcard certificate avoids listing each name, but it does not hide the services.
Would rather have someone else do it? Bit Happens can fix this →
More checks in Certificates
Full history in Passive Subdomains →
Full Domain X-Ray: all 33 DNS, email, HTTPS, certificate and reputation checks at once →