big charlie
Active Member
- Joined
- Aug 20, 2013
- Messages
- 115
- Reaction score
- 30
You guys already know about this?
This may be usefully and/or scary. Enter a domain and you get a list of certs on it, incl subdomains. So if you have subdomains that you think are hidden, they can be found here.
This may be usefully and/or scary. Enter a domain and you get a list of certs on it, incl subdomains. So if you have subdomains that you think are hidden, they can be found here.
crt.sh | Certificate Search
Free CT Log Certificate Search Tool from Sectigo (formerly Comodo CA)
crt.sh
By the way, the list of SSL/TLS certificates issued to you (including subdomains) is public!
Are you comfortable with the fact that others can find out about your production environment simply by querying a public database?
medium.com