How to find subdomains of a domain you own: certificate transparency, passive DNS, brute force and resolution — plus what to do with the list you get.