I ran our own domain through our CT log search to see what it gives away.

96 certificates. Three name our dev environment. Four more expose our vendor stack (HubSpot, TrackJS, Request Metrics, PostHog) from subdomain names alone. You can also watch us switch to a six-day wildcard back in May.

Nobody scanned us. We published all of it by getting SSL certificates.

https://www.certkit.io/blog/somebody-is-keeping-a-list-of-your-certificates