buncha/osint/ssl-cert

SSL Certificate Inspector

Include subdomains — surface phantom hostnames (staging, internal, test) that have certs in the CT logs.

Try one

How this works. Every TLS certificate issued by a public CA gets submitted to the global Certificate Transparency log network within minutes (it's been mandatory for browser-trusted certs since 2018). We query Cert Spotter's public mirror of those logs for the domain you entered and show what's been issued. Include subdomains is the OSINT setting — toggling it on surfaces internal / staging / test hostnames the domain operator probably didn't intend to publicise. CT logs are public by design, so this is observation not intrusion.

Query goes directly to api.certspotter.com from your browser. Nothing routes through our server.

Pairs well with

Email Header Analyzer

Paste raw email headers and get a phishing-investi…

Error Level Analysis

Quick image tampering check via Error Level Analys…

Image Location Finder

Find where a photo was taken. First: read the EXIF…

Reverse Image Search

Find where else an image appears online — drop a f…

About SSL Certificate Inspector

Pull a domain's TLS certificate history from the public Certificate Transparency logs. Shows the current cert in use — issuer, expiry countdown, SANs, SHA-256 fingerprint — plus the full issuance history so you can see when certs rotate and which CAs the domain uses. Toggle 'include subdomains' to surface internal / staging / test hostnames that have certs in the logs (the OSINT use case). Powered by Cert Spotter's CORS-open API, runs entirely from your browser, no API key.

Everything happens on your device. Close the tab and it's gone.