DNS
EXPLORER.
See the main DNS records, the names and certificates logged in Certificate Transparency and which hostnames still resolve. Discovery is passive and never connects to the services it finds.
The inventory combines public DNS and Certificate Transparency. CT is historical: a name found there may no longer exist. An A, AAAA or CNAME answer only means the name resolves, not that a service is running.
Main records
Hostnames
| HOSTNAME | A | AAAA | CNAME | STATE |
|---|
Logged certificates
Certificates public authorities issued for the domain and its subdomains, as recorded in the Certificate Transparency logs. This is history: a listed certificate may already have been replaced.
| ISSUED | EXPIRES | COMMON NAME | ISSUER | NAMES |
|---|
Frequently asked questions
How does the portal find subdomains?
Passively: it looks for names in certificates logged in Certificate Transparency and checks in DNS which ones still resolve. No service it finds is ever contacted.
Why does a listed subdomain no longer exist?
Certificate Transparency is history. A name that once had a certificate stays in the logs even after it is removed from DNS.
Why are some subdomains missing?
Names covered by a wildcard certificate (*.example.com) and names that never had a public certificate do not show up individually in CT.
Does resolving in DNS mean the service is up?
No. It only means the name points to an address. To see whether something answers, use HTTP & HTTPS.
How many names are checked?
Up to 60 names per query are checked in DNS, to keep it light. The full count of CT names is shown in the summary.