Hello again! In this iteration of Cool Query of the Week, I highlight how to search for certificates that contain an eTLD+3 or greater subdomain of a given domain. In this example, I’m targeting example.com, which you should swap out for your domain-of-interest.

This query also uses regular expression (regex). In the Platform, as with Legacy Search, regex in queries is only available to paying customers. However, anyone can get access to regex on the Platform by buying Censys Credits.

cert.names=~`.*\..*\.example\.com$`

Learn more about regex in Censys Query Language in the docs.

As a reminder, you can convert any of the old queries using Censys Search Language shown in the CQOTW series using the Platform’s built-in query converter.