crt.sh - Certificate Search alternatives
6 tools in the catalogue cover the same ground as crt.sh - Certificate Search and can replace it depending on the need. Each one is reachable, re-checked daily, and listed with its pricing.
- Amass (T)freeAdvanced attack surface mapping framework for DNS and subdomain enumeration with graph correlation and extensive data-source support.
- Subfinder (T)freeFast passive subdomain discovery utility that aggregates results from many curated OSINT and API-backed sources.
- Phonebook.czfreeFree OSINT intelligence tool for enumerating subdomains, email addresses and URLs associated with a target domain by querying passive DNS and certificate data.
- DNS DumpsterfreeFree domain research tool that discovers hosts and subdomains related to a domain. Provides DNS record enumeration (MX, TXT, Host) with a visual map of discovered infrastructure.
- SecurityTrailsfreemiumComprehensive DNS and domain intelligence platform. Access historical DNS records, WHOIS data, IP neighbors, subdomain enumeration and attack surface data for any domain.
- ViewDNS.infofreeComprehensive DNS lookup and WHOIS service providing detailed DNS records, reverse IP lookups, reverse WHOIS searches, and API access for automated queries.
crt.sh - Certificate Search
Domain Name
Also written crt sh Certificate Search
CT log viewer aggregating certificate data from multiple Certificate Transparency logs. Search for all certificates ever issued to a domain to discover subdomains and detect certificate misuse.
RECOMMENDED USE
Certificate search, subdomain discovery via CT logs, detecting unauthorized certificates
Launch crt.sh - Certificate Search directly
Enter your target: the link opens with the query already filled in. Nothing is sent from this site.
Expected input: domaine
When to use this tool
crt.sh - Certificate Search comes into play at these investigation steps, depending on your starting point.
- Collectionstarting point: domain or website · step 3 of 7
Map DNS and subdomains
Subdomains expose staging, admin environments and forgotten services.
Information
Video tutorials
Learn to use crt.sh - Certificate Search
Suggested workflow
Chain these tools in order for a complete investigation
Combine with
These tools work great together
Similar tools
These tools can also help you
CertKit - Certificate Transparency Log Search
Domain NameFast Certificate Transparency log search tool using Clickhouse for sub-second queries. Discover all certificates issued to a domain, including Subject Alternative Names, to reveal hidden infrastructure.
Google's Certificate Transparency
Domain NameDirectory of all known Certificate Transparency logs monitored by Chrome and other browsers. Browse CT log records to discover issued certificates, identify unauthorized domain certificates, and monitor for certificate misuse.
CertStream
Domain NameReal-time certificate transparency log monitoring. Stream newly issued SSL/TLS certificates to discover new domains, phishing sites and infrastructure as they are created.
certgraph (T)
Domain NameCLI tool that crawls SSL certificates via Certificate Transparency logs to create a directed graph of domain relationships. Supports multiple drivers including crt.sh, Censys, HTTPS, and SMTP.
User reviews
Be the first to leave a review