It's all TLS certs, because they show up in the Transparency Log[1]
You can watch a live stream of it here: https://bencevans.io/security/certificate-stream
[1] https://en.wikipedia.org/wiki/Certificate_Transparency
I use subdomains and a wildcard cert to partly obfuscate this.
I use subdomains and a wildcard cert to partly obfuscate this.