Every certificate ever issued for a domain
Certificate Transparency logs are a public, append-only record of every SSL/TLS certificate a CA issues. Search any domain to see its certificates, who issued them, what's new, and which subdomains they reveal.
Frequently asked questions
What is Certificate Transparency?
Certificate Transparency (CT) is a public, append-only system of logs that record almost every SSL/TLS certificate a Certificate Authority issues. Browsers require certificates to appear in these logs, which makes mis-issued or unexpected certificates detectable.
What can I find with a CT log search?
You can see every certificate logged for a domain, which CAs issued them, when they were issued, wildcard certificates, and the subdomains revealed in each certificate's Subject Alternative Names — a fast way to inventory a domain's certificates and hostnames.
Can Certificate Transparency reveal my subdomains?
Yes. Because hostnames in a certificate's SAN list are logged publicly, CT search can expose internal or forgotten subdomains such as staging, VPN or admin hosts. Reviewing your own CT footprint helps you find shadow IT and reduce attack surface.
How is this different from crt.sh?
Both read the same public CT logs. Our search deduplicates results, groups them by issuer, highlights recently-issued and wildcard certificates, and flags sensitive-looking hostnames, so you get an at-a-glance summary rather than a raw list.
How quickly do new certificates appear in CT logs?
Newly issued certificates usually appear within minutes to a few hours. Monitoring CT logs lets you catch a certificate you did not request quickly — an early warning of mis-issuance or compromise.
Is CT search free?
Yes, searching CT logs here is free and needs no account. Create an account if you want to be alerted automatically whenever a new certificate is logged for your domain.