In addition to crt.sh (which is often helpful but sometimes overloaded & slow), there are other services that can help you search Certificate Transparency logs and notify you about issuances:
I'm guessing you already know this, but such an action would need to have been taken by somebody (or something) with the ability to update your DNS records. Presumably (hopefully?) it was done for a good reason.