---
title: "Bulk NDJSON export of a domain's certificates or subdomains"
method: GET
path: "/v1/domains/{domain}/export"
tags: ["exports"]
---

# Bulk NDJSON export of a domain's certificates or subdomains

`GET /v1/domains/{domain}/export`

## Request

- Base URL: `https://api.ctindex.io`
- URL: `https://api.ctindex.io/v1/domains/{domain}/export`
- Auth: one of:
  - API key in header `X-API-Key`
  - HTTP bearer

Streams the FULL enumeration for one domain as newline-delimited JSON — one object per line, plus a trailing `_meta` line with `{rows, truncated, complete}` and any applied filters. `dataset=certificates` (default) emits one line per certificate naming the domain, newest first; `dataset=subdomains` emits one line per unique subdomain (name ASC) with first_seen/last_seen/cert_count. Optional `since` / `first_seen_after` (aliases) filter inside the query. Gated by the `bulk_export_per_hr` rate class: not available on the free tier.

## Path parameters

- `domain` string, required

## Query parameters

- `dataset` string
- `since` string, nullable: Only include certificates / subdomains first observed at or after this ISO-8601 instant. Alias of first_seen_after.
- `first_seen_after` string, nullable: Alias of since — identical filter. Supplying both with disagreeing values returns 400.

## Cookies

- `ctix_session` string, nullable

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/ctindex/apis/certindex-api.md) · [All operations](https://skmtc.dev/ctindex/apis/certindex-api/llms.txt) · [OpenAPI document](https://skmtc.dev/ctindex/apis/certindex-api/revisions/d5bc0ec85bc9?raw)