Certificate issuance transparency logs are public. Every time a CA issues a new certificate, it gets logged in a public log. Every time someone sets up nextcl

Certificate issuance transparency logs are public. Every time a CA issues a new certificate, it gets logged in a public log. Every time someone sets up nextcloud.example.tld, and gets an SSL cert issued by a CA, that gets logged in public. If nextcloud.example.tld resolves, and responds on tcp/80 and/or tcp/443, you’ve got yourself a potential target.