Using Certificate Transparancy logs to get some OSTINT on an domain. Uses the crt.sh website.
[yoram][h1dd3n]#[~/Develop/Play/TLSenum] _ source .bashrc
[yoram][h1dd3n]#[~/Develop/Play/TLSenum] _ enumCRT randstad.nl | egrep "saml|acc|repo|dev|test"
dev.dispensario.com.ar
dev.medequipdb.com
identification-test.randstad.nl
onboarding-test.randstad.nl
sign-test.randstad.nl
test-benjijwabproof.randstad.nl