Is there a public list of certificates granted by Let's Encrypt?
Seconds after using certbot to get a certificate on a new domain, which hasn't been linked to from anywhere, I saw requests to URLs like "/.env" and "/.git/config", and I can't think how else someone would think of trying them.