CT / Subdomain Monitor

Certificates and subdomains –
from the outside perspective.

Certificate Transparency logs contain every certificate ever issued. Vernax reads these logs, finds all subdomains and detects unknown CAs.

Only publicly reachable domains are supported.

5Checks
crt.shData source
EUHosting

vernax.app

Example result

85

/ 100

Total certificatesOK
Unknown CAsOK
Expiring certificatesOK
Found subdomainsInfo
ReachabilityOK

What is checked

Certificates

  • Total in CT logs
  • Issuing CAs
  • Expiring certificates
  • Unknown CAs

Subdomains

  • SAN extraction
  • Subdomain enumeration
  • Detect new subdomains

Reachability

  • HTTP/HTTPS HEAD check
  • Active subdomains
  • Subdomain takeover risk

Data source

  • crt.sh API
  • Certificate Transparency
  • RFC 6962 compliant