Scan network for hosts ( sn means ignore ports ) nmap -sn 192.168.34.0/24
Get certificate details nmap --script=ssl-cert.nse -p 443 bbc.co.uk