crt.sh offers a free, key‑less JSON API that lets developers query all SSL certificates for any domain, revealing every subdomain ever issued. It’s useful for security audits, bug bounty discovery, competitive analysis, and monitoring new certificates.
Comments