Pricing

$20.00 / 1,000 certificate searches

Try for free

Go to Apify Store

Certificate Transparency Monitor — New Certs by Domain

Try for free

Search Certificate Transparency logs for newly issued SSL/TLS certificates on a domain and its subdomains. Spot unauthorized certs or newly launched subdomains — official CT log data, no proxy, no scanning.

Pricing

$20.00 / 1,000 certificate searches

Rating

0.0

(0)

Developer

Timothy Kelvin

Actor stats

Bookmarked

Total users

Monthly active users

13 hours ago

Last modified

Input

{
  "domain": "example.com",
  "daysBack": 30,
  "maxResults": 50
}

Field	Type	Description
`domain`	string	Domain to search, without protocol or `www.`. Matches this domain and all its subdomains. Required.
`daysBack`	number	How many days back from today to include, by CT log entry timestamp. Default `30`, max `365`.
`maxResults`	number	Max unique certificates to return, most recently logged first. Default `50`, max `200`.

Output

One record per unique certificate (deduplicated by serial number — the same cert is often logged to multiple CT logs):

{
  "commonName": "affiliate.example.com",
  "subjectAlternativeNames": ["affiliate.example.com"],
  "issuerName": "C=US, O=Let's Encrypt, CN=YR2",
  "serialNumber": "053e26ba7c9f4baa4c9bc1936a9fc4f47f33",
  "notBefore": "2026-08-09T03:25:05",
  "notAfter": "2026-11-07T03:25:04",
  "entryTimestamp": "2026-08-09T04:23:36.294",
  "crtshUrl": "https://crt.sh/?id=28666584809"
}

How it works

Direct calls to crt.sh, a free public Certificate Transparency log search service. No proxy, no login, no scraping — CT logs are public by design (every publicly-trusted certificate is logged there). crt.sh is a community service that occasionally returns transient errors under load; the actor retries automatically before giving up.

Pricing note

Billed per search, not per certificate returned — one charge whether the search returns 1 certificate or 200.

Looking for other risk-monitoring signals?

Vulnerability Alert — new CVEs by product and severity
Website Tech Stack Detector — tech fingerprint per domain

Certificate Transparency Monitor — AI Agent Recon API

logiover/certificate-transparency-monitor

Keyless certificate transparency intelligence for AI agents: crt.sh CT logs. Track new TLS certs for any domain, discover subdomains via wildcard, batch domains. Issuer, validity, SAN domains and serial per row. No API key, no browser.

Logiover

Subdomain Discovery Lookup - Certificate Transparency API

accountable_eel/subdomain-discovery-lookup

Enumerate any domain's real subdomains from the free, public Certificate Transparency log API (certspotter) — no login, no scraping. Every subdomain returned had an actual TLS certificate issued for it. Pay only when subdomains are found; domains with no CT history cost nothing.

Adrian Voss

TLS Certificate Lookup — Certificate Transparency API

accountable_eel/tls-certificate-lookup

Look up any domain's TLS certificate history from public Certificate Transparency logs — issuer, validity window, and full SAN list for every certificate ever logged. No API key. Pay only for domains with certificates found.

Adrian Voss

Certificate Transparency & Subdomain Discovery Scraper

scrapers_lat/certificate-transparency-scraper

Discover subdomains and SSL/TLS certificates for any domain from public certificate transparency logs. Extract SAN hostnames, issuer, validity dates, wildcard and expiry flags. Perfect for attack-surface mapping, OSINT and asset inventory. Export to JSON, CSV or Excel.

Scrapers Lat

SSL Certificate Monitor — Expiry, CT Logs, Subdomain Discovery

gochujang/ssl-certificate-monitor

Monitor SSL certificates for expiry, chain validity, and cipher suites. Discover subdomains via Certificate Transparency logs (crt.sh). Alerts for certificates expiring within N days. No API key required.

Hojun Lee

Certificate Transparency Scraper: Subdomain Discovery

arman-bd/certificate-transparency-scraper

Query certificate transparency logs via crt.sh to enumerate subdomains, issuers, validity windows and certificate history for any domain. Passive attack-surface discovery. no login, no proxy, no browser.

Arman Hossain

SSL Certificate Transparency Scraper (crt.sh)

chrisp1211/certificate-search-scraper-max

Scrape SSL/TLS certificate transparency logs from crt.sh for any domain. Great for security audits and subdomain discovery. Returns common name, subdomains (SANs), issuer and validity. Pay per certificate; empty runs free.

Christian Pichichero

Certificate-Transparency Newly-Launched Startup Lead Extractor

ayeeyee/ct-newly-launched-startup-lead-extractor

Day-zero startup leads from Certificate Transparency: crt.sh finds domains whose FIRST TLS cert was just issued, we enrich each new site's OWN website with MX/DNS-verified emails + phones + socials + tech stack + A-D launch-readiness. Be first to a newly-launched business. Per-result, no keys.

Virtual Footprint LLC

Certificate Transparency Log Firehose

jungle_synthesizer/certificate-transparency-log-firehose-scraper

Streams newly-issued certificates from public CT logs (Google, Cloudflare, DigiCert, Sectigo, TrustAsia) with a keyword/pattern watch-list match — delta-since-last-run, not a one-domain lookup.

BowTiedRaccoon

crt.sh Certificate Transparency Scraper

parseforge/crtsh-certificate-transparency-scraper

Search crt.sh certificate transparency logs for a domain and discover subdomains. Get common name, SANs, issuer, validity dates, and serial number per certificate.