Inspect any domain's SSL/TLS certificate in real time: issuer, validity dates, Subject Alternative Names (SANs), full certificate chain, key algorithm, and Certificate Transparency log history - all in one query.
An SSL lookup inspects the SSL/TLS certificate served by a domain - returning issuer details, validity dates, Subject Alternative Names (SANs), full certificate chain, key algorithm, and TLS version. It also surfaces Certificate Transparency log entries showing every certificate ever issued for the domain pattern.
How is SSL Lookup different from checking a certificate in my browser?
Browsers show basic certificate details for the page you're currently viewing. SSL Lookup queries any domain remotely without visiting it, returns the certificate chain in full structured form, parses the complete SAN list, and cross-references Certificate Transparency logs - none of which a browser surfaces conveniently.
What are SANs (Subject Alternative Names) and why do they matter?
The SAN field of an SSL certificate lists every hostname the certificate is valid for. A single certificate often covers a primary domain plus dozens of subdomains, related domains, and CDN endpoints. For OSINT and security research, SAN fields are one of the most reliable ways to discover undocumented subdomains and related infrastructure.
What are Certificate Transparency (CT) logs?
Certificate Transparency logs are public, append-only records of every SSL certificate issued by trusted Certificate Authorities. Every legitimate CA must publish issued certificates to CT logs. Monitoring CT logs for newly-issued certificates matching your brand keywords is one of the earliest signals of an impending phishing campaign or impersonation attempt.
What does it mean when a certificate is "about to expire"?
SSL certificates have a fixed validity period - typically 90 days for Let's Encrypt, 1 year for commercial CAs. Browsers begin showing warnings 30 days before expiry; expired certificates cause HTTPS failures, broken page loads, and SEO penalties. Monitor critical certificates so renewals happen before expiry.
How do I look up SSL certificates for multiple domains at once?
For bulk SSL certificate inspection across a portfolio, use the SSL Certificate API, which supports concurrent requests and scheduled re-checks for expiry monitoring at scale.
Can I look up SSL certificates for subdomains?
Yes. Enter any subdomain (e.g., shop.example.com) to check its specific certificate. Alternatively, a wildcard certificate (*.example.com) covers all direct subdomains - SSL Lookup will show the wildcard coverage in the SAN field.
Common Namepoczta.onet.plOrganizationRingier Axel Springer Polska sp. z o.oLocality/CityWarszawaState/ProvinceWojew\C3\B3dztwo mazowieckieCountryPL
Certificate Issuer
Common NameGeoTrust TLS RSA CA G1OrganizationDigiCert IncOrganizational Unitwww.digicert.comCountryUS
Public Key
Size4096 bitAlgorithmRSA
PEM:
-----BEGIN PUBLIC KEY-----
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
-----END PUBLIC KEY-----
