Certificate transparency search

This queries crt.sh's public JSON API from your browser; the queried domain itself is never contacted, and nothing leaves except the one request. Certificate transparency only records what certificate authorities submitted to public logs, so certificates from misissued-or-hidden private logging, and everything issued before public CT logging became the norm around 2018, will not show up. An unreachable crt.sh reads as unknown on purpose: no answer is not the same as no certificates. High-cardinality domains (wildcard hosts with thousands of unique names) are cut at 1000 distinct certificates, most recent first, and the result says so. Expiry is judged against your device clock at search time; revocation is not checked, and a currently-listed certificate can still be revoked. crt.sh is a free community service and can be slow or rate-limit; when it does, the answer stays unknown rather than empty.