Security, Privacy & Compliance
ctlogs.dev
Search billions of TLS certificates from all public Certificate Transparency logs by domain, wildcard, organization, serial number or SHA-256 fingerprint
A free JSON API and web search engine indexing 28.5 billion TLS certificates from all public Certificate Transparency logs, searchable by domain, organization
Overview

A look at ctlogs.dev
ctlogs.dev continuously ingests every public Certificate Transparency log operated by Google, Cloudflare, DigiCert, Let's Encrypt, Sectigo and others into a single searchable index. The service indexes 28.5 billion certificates across 88 active logs and 111 archived logs, with 6.5 billion distinct hostnames and certificates dating back to 2013.
Users can search by domain (including wildcard searches for subdomains), organization name, certificate serial number, SHA-256 fingerprint, or public key. The web interface offers a subdomain finder showing every hostname ever certified under a domain, a BIMI brand logo browser for verified mark certificates, and a CAA record checker.
The API is free for anonymous use with fair rate limits and no key required. Signed-in users and API keys unlock higher quotas. All results come from public Certificate Transparency logs and are provided as received, with no guarantee of completeness or accuracy.
Feature notes
- Search by domain, wildcard, organization, serial number, SHA-256 fingerprint and public key (SPKI)
- Index of 28.5 billion certificates across 88 active and 111 archived CT logs
- 6.5 billion distinct hostnames with first-seen and last-seen dates, certificates back to 2013
- Fast API: domain lookup 25-30 ms, subdomains 45-50 ms
- Subdomain finder with certificate counts and first/last seen dates
- BIMI brand logos from verified mark certificate logs
- CAA record checker showing records as CAs see them and CAs that issued for a domain
- Free JSON API with cursor pagination and anonymous use
- Machine-readable documentation at llms.txt for AI agents
- Continuous ingestion of all public CT logs with live coverage metrics
Compare and explore
FAQ
- Which Certificate Transparency logs does ctlogs.dev monitor?
- ctlogs.dev monitors 117.7 billion log entries and 28.5 billion certificates across the Google and Apple CT log lists: all 88 active logs, ingested continuously, and 111 archived and read-only logs. Coverage and freshness per log are published at https://ctlogs.dev/logs.
- How fast is the ctlogs.dev API?
- The ctlogs.dev API is fast: server-side domain lookup takes 25-30 ms and subdomains 45-50 ms on real queries (measured 2026-09-03). Requests go through Cloudflare, so end-to-end latency adds the network round trip.
- How far back does the certificate history go?
- The certificate history goes back to 2013. The index contains 6.5 billion distinct hostnames with first-seen and last-seen dates.
- Can I list all subdomains of a domain?
- Yes, you can list all subdomains. The /subdomains endpoint lists every hostname that ever appeared in a certificate under a domain, with certificate counts and first/last seen dates; the full list with paging is available through the API at GET /v1/hosts/{domain}.
- Is the API free?
- Yes, the API is free. Anonymous use is free with fair rate limits and no key required; API keys raise the monthly quota. Full documentation is available at https://api.ctlogs.dev/ with machine-readable documentation at https://api.ctlogs.dev/llms.txt for AI agents.
Leave a review for ctlogs.dev
No reviews of ctlogs.dev yet. Run the first inspection.
Reviews are free and are never paid for. Open the reviews
Reviews and notes · Change log · Share the profile · Maker of this product? Claim the profile · Report a fault
ctlogs.dev has a free listing. The owner can unlock the full profile with a paid launch for $5:
- Founder story (locked)
- Milestones (locked)
- Demo video (locked)
- Dofollow website link (locked)
Comparable tools
- VigilanceDR 5 · 0 community votes
- KeyEnvDR 8 · 0 community votes
- depproofDR 14 · 0 community votes
- OrionAlertsDR 0 · 0 community votes