Certificate Transparency

Every certificate
leaves a trace.

Public CT logs record every certificate an authority issues, in the open. Search a domain to surface the hostnames it exposes and the certificates behind them.