Automated mechanisms exist to discover when new certificates are issued for organization-controlled domains.