SANbox takes a list of domains on stdin and returns any SANs associated with any certificate found on the host. It will strip wildcards (e.g. *.example.com becomes example.com) and will not print any domain where the input is identical to the output (i.e. a certificate with a single name associated with it).