Tool profile
crt.sh
Free certificate-transparency lookup for domain pivots
Claims and corrections are reviewed before public profile changes.
Live interface preview
Sectigo
Free certificate-transparency lookup for domain pivots
Best for: Certificate-transparency pivots around domains, organizations, hostnames, SAN entries, fingerprints, and historical infrastructure naming patterns.
Signal summary
Trust / disclosure
How to read this profile
Editorial line
Editorial judgment and commercial context stay separate on OSINT4ALL.
Review status
Hands-on notes or editorial review dates are attached where available.
Claims / submissions
Corrections and claim requests are reviewed before any public change is made.
Commercial context
No commercial relationship is disclosed on this profile.
Editorial verdict
Use case and fit
This is editorial guidance, not vendor copy.
Certificate-transparency pivots around domains, organizations, hostnames, SAN entries, fingerprints, and historical infrastructure naming patterns.
Excellent early pivot for domain work, but every important hostname needs timeline and ownership checks.
Best for free certificate-transparency pivots that surface subdomains, SAN entries, and historical naming clues.
Operational snapshot
Workflow, access, and coverage
Search the domain or organization, collect candidate names, filter by date and relevance, then validate with DNS, host search, archive captures, and page review.
Mostly technical fields; internationalized domains and organization names may need extra normalization.
Limits
Strengths, caveats, and risk
Fast, free, and useful for finding hostnames that may not appear in normal search results.
Raw certificate results can be noisy and can include expired, shared, or irrelevant names.
Does not prove current control, active resolution, ownership, service exposure, or attribution by itself.
Shared certificates, wildcard certificates, expired entries, and old SAN values can produce false infrastructure linkage.
Certificate transparency is public data, but sensitive infrastructure claims still require careful confirmation before publication.
Treat certificate records as historical naming evidence, not proof that a host is live or controlled by the subject today.
Alternatives
Alternatives
Maintenance
Last verified & suggest an update
Help keep this profile accurate. Update requests are reviewed and logged before publication.
Last verified: 2026-05-07
If something is outdated, please submit a correction or verified update request. Claim requests are reviewed and do not grant editorial control.
Commercial or sponsorship requests use the separate partner workflow.