How are people discovering random subdomains on my server?

https://lemmy.blahaj.zone/post/36861104

Blåhaj Lemmy - Choose Your Interface

crt.sh | Certificate Search

Free CT Log Certificate Search Tool from Sectigo (formerly Comodo CA)

But this still doesn’t explain it. Like OP I also use a wildcard cert. The subdomains are never exposed.