Unless she hosts her own cert authority or is using a self-signed cert, the wildcard cert she mentions is visible to the public on sites such as https://crt.sh/.

Yes, the wildcard cert, but not the actual hostname under that wildcard.