Every public CA publishes the certs they issue to CT logs. Sites like crt.sh make those logs searchable, which is why our Subdomain Enumerator can find subdomains nobody publicly linked to.
CT log
Certificate Transparency log — public append-only record of every TLS cert issued.