npm

certgraph

Crawl certificate graphs to find subdomains via SSL/TLS certificates

brewmacoslinux
Try with needOr install directly
Source

About

Crawl the graph of certificate Alternate Names

Commands

certgraph

Examples

Find all subdomains for a domain by crawling certificate alternate names$ certgraph example.com
Search certificate graph with a specific output format$ certgraph -o json example.com
Crawl certificates with depth limit to control search scope$ certgraph -d 2 example.com