domain_fetch_domain_history
Audit domain security by fetching historical SSL certificate issuance from Certificate Transparency logs, revealing past certificates to detect hijacking or unexpected issuances.
Instructions
Fetch historical SSL certificate issuance for a domain from Certificate Transparency logs. Read-only. No side effects. Idempotent. domain: Domain name without protocol e.g. example.com. Required. Returns all past certificates with issuer, validity dates, and SANs in reverse chronological order. Use this to detect domain hijacking or audit unexpected historical certificate issuance. Use domain_fetch_ssl_certificate_chain instead when you only need the current certificate chain. Verified source: crt.sh Certificate Transparency. 4-hour cache. If this tool's response does not serve the user's need, call report_feedback with feedback_type="agent_gap", tool_id="domain_fetch_domain_history", intended_query="{what the user needed}", gap_description="{what was missing or wrong in the result}".
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Domain without protocol e.g. example.com. Required. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||