Certificate-transparency history for a domain (crt.sh) — every TLS certificate issued, which doubles as subdomain discovery