Certificate Transparency Search

Every certificate issued for a domain and its subdomains, from public CT logs, checked against your CAA policy. Find forgotten hosts.

Every publicly trusted TLS certificate is published in public Certificate Transparency logs before browsers accept it. Searching them shows every certificate ever issued for your domain and its subdomains: forgotten servers, hostnames you didn't know were public, certificates from a CA nobody approved, or a vendor issuing in your name. Results are compared with your domain's CAA record, which lists the CAs allowed to issue.