crt.sh

Domain OSINTDNS Investigation

Manual review advised
Checked 9/2/2026

crt.sh is a web interface for a distributed database called Certificate Transparency (CT). It allows you to search for certificates that have been logged by CT logs, making it an incredible tool for finding subdomains associated with a specific domain.

Open Tool Report incorrect information

Features

✓Wildcard searches
✓Historical certificate data
✓PostgreSQL access

Limitations

✗Can be slow or timeout during heavy loads
✗Only shows domains with issued certificates

Related Tools

🌍

SecurityTrails

Domain OSINT

Historical DNS data, IP history, subdomain enumeration, and WHOIS for any domain.

◆ FreemiumWEB●Intermediate

Open Tool Details →

🌐

Censys

IP Intelligence

Internet-wide scanning for hosts, certificates, and attack surface analysis.

◆ FreemiumWEB●Intermediate

Open Tool Details →

🌍

Subfinder

Domain OSINT

Discover subdomains passively through configured public sources and APIs.

✓ FreeCLI●Intermediate

Open Tool Details →

Tool Details

Interface WEB

Pricing Free

Skill Level Intermediate

Open Source Yes ✓

Maintenance Reported active

Reported Update 2024-11

Platforms

🌐 web

Accepts Input Types

domain

crt.sh

Features

Limitations

Related Tools

SecurityTrails

Censys

Subfinder

Tool Details

Platforms

Accepts Input Types

Tags