Queries Certificate Transparency logs via crt.sh. Shows certificates issued for a domain — not a live TLS handshake.