code: def _extract_from_sans(self):
          
          self.logger.info("{} Trying to find Subdomains in SANs list".format(COLORED_COMBOS.NOTIFY))
          if self.host.naked:
              domain = self.host.naked
              tld_less = domain.split(".")[0]
          else:
              domain = self.host.target.split(".")
              tld_less = domain[1]
              domain = ".".join(domain[1:])
  
          for san in self.sans:
              if (tld_less in san or domain in san) and self.target != san and not san.startswith("*"):
                  self.logger.info("{} Subdomain detected: {}".format(COLORED_COMBOS.GOOD, san))
docs: Looks for different TLDs as well as different sub-domains in SAN list