Enumerate a domain's subdomains from public Certificate Transparency logs. Passive only — it never touches the target, just the CT record.
Enter a domain to list subdomains seen in public certificates. Only use this for domains you are authorised to assess.