Is the Facebook source dead, or am I doing it wrong?

[PontusLindblom]

Hi,

I'm having some issues getting the Facebook source to work, and while troubleshooting, I found that Meta no longer supports their Certificate Transparency Monitoring Tool (https://developers.facebook.com/docs/certificate-transparency/):

According to Wayback Machine, the new page was scraped on 29th November, 2025 (https://web.archive.org/web/20250801000000*/https://developers.facebook.com/docs/certificate-transparency)

I added this to my provider-config.yaml:
facebook:
- <app_id>:<app_secret>

And when I run "subfinder -d hackerone.com -s facebook -t 1 -rl 1 -v", I get this error:
[DBG] Response for failed request against https://graph.facebook.com/certificates?fields=domains&access_token=<app_id>|<some_hash>&query=hackerone.com&limit=1000:
{
"error": {
"message": "Unsupported get request. Object with ID 'certificates' does not exist, cannot be loaded due to missing permissions, or does not support this operation. Please read the Graph API documentation at https://developers.facebook.com/docs/graph-api",
"type": "GraphMethodException",
"code": 100,
"error_subcode": 33,
"fbtrace_id": "A6oB2EH8rm7l1Ik8He4RY9m"
}
}
[WRN] Encountered an error with source facebook: unexpected status code 400 received from https://graph.facebook.com/certificates?fields=domains&access_token=<app_id>|<some_hash>&query=hackerone.com&limit=1000

Can someone confirm whether I'm doing something wrong or if this source is dead?

[bad-antics]

You are correct - the Facebook Certificate Transparency source is dead. Meta discontinued their CT monitoring tool in late 2025.

The source should be removed from subfinder or marked as deprecated. Until then, you can exclude it:

subfinder -d hackerone.com -all -es facebook

The -es flag excludes specific sources.

Alternatively, dont include it in your provider-config.yaml at all.

For CT-based subdomain enumeration, these sources still work well:

• crtsh (no API key needed)
• certspotter
• google (CT logs)

You might want to open an issue to have the Facebook source removed from the codebase since the upstream API no longer exists.

[PontusLindblom]

Issue has been created: #1727