Free tool · Certificate Transparency
Recent certificates
Every certificate logged for a domain over the last few days, newest first. Check that a renewal went through, see which CA signed it, or spot certificates nobody on your team asked for.
Did the renewal go through?
Search the hostname and see the new certificate within minutes of the CA logging it, with its validity dates and issuer.
Which CA signed it?
The issuer breakdown shows every CA issuing for a domain, which is the quickest way to check your CAA records match reality.
Faster than crt.sh
Results come back in well under a second, newest first, with no timeouts on large domains. The same data is available from the ctlog CLI.