Ask HN: Do CAs disclose domain details of all issued certificates?
Just about to launch a new website, googled the main domain to see if it'd been indexed, and discovered, to my horror, that each subdomain is shown as a result on a certificate details website, with the subdomain as the page title.
The subdomains are all 403 with an IP whitelist, with some basic authentication on top, but even having these subs listed exposes more info than I'd like.
Has anyone else experienced this? Could this be a feature peculiar to letsencrypt?
Any tips on preventing this happening again without resorting to wildcard certificates or dedicated development domains, and perhaps on removing references to subdomains from search engines?
Thanks