crt.sh certificate search

crt.sh searches Certificate Transparency logs: all publicly issued TLS certificates for a domain, including its subdomains (use %.example.com). Add output=json to get the results as JSON, with issuer, names and validity dates. Useful to find forgotten subdomains or check which certificates were issued for your domains. Free, no key needed; avoid very heavy automated use.