To find the subdomains of an Angolan site, type its domain into the box above, such as example.co.ao or example.it.ao. The tool searches the public certificate transparency logs at crt.sh and lists each subdomain those certificates name. The list comes back sorted, with no duplicates.
How to find the subdomains of a .ao domain
- Type the domain you want to map, such as example.co.ao, into the box above.
- Run the search. The tool reads crt.sh and lists every subdomain named on that domain's certificates, such as www, blog, shop or staging.
- Read down the list to see the site's footprint: the public sites, the test sites and the services that have had a certificate.
Angolan domain endings
Angolan sites sit directly under .ao or under a second-level ending. Anyone can register a .it.ao name. Names under .co.ao, .ed.ao, .gv.ao, .og.ao and .pb.ao are only for entities located in Angola. .ao names use ASCII characters, so you type the domain in plain letters, digits and dashes.
From WIPO's page on the .ao country code domain, read in October 2026.
What the list won't show
The list only holds names that have appeared on a publicly trusted certificate. A subdomain that has never had one, such as a server used only inside a company, won't appear. The tool also doesn't check whether each subdomain still answers, so open the ones you care about to see if they're live.
This subdomain finder is free with no signup. SearchBlueprint, who make it, sell SEO planning for websites: which searches each page should answer.