CT logs make CA misissuance auditable. Every cert appears in a public log within hours of issuance, which is why crt.sh subdomain enumeration works.
Certificate Transparency
Public append-only log of every TLS cert issued by a participating CA.
Public append-only log of every TLS cert issued by a participating CA.
CT logs make CA misissuance auditable. Every cert appears in a public log within hours of issuance, which is why crt.sh subdomain enumeration works.