Comment by alberth

This site will find any subdomain, for any domain, so long as it previously had a certificate (ssl/tls)

https://crt.sh/