cert-governance · severity high

Certificate trust

Share of certificates that are self-signed or not valid for the hostname served.

Measured every Wednesday · last updated

How it is measured

Tier 2; compare issuer/subject and check the SAN list covers the host. Denominator: has_web.

Why it matters

HTTPS is present, the port is open, TLS negotiates — and every visitor gets a browser warning, or would if they checked. Encryption without authentication.

The base rate

Two independent populations. The global, domain-anchored figure is unbiased; the company-anchored figures are built by matching company names to domains and skew toward more digitally-mature firms. Both are published, so the gap is visible.

Global (all domains) 7.72% fail · n=13,945
ok: 92.28%hostname_mismatch: 5.97%self_signed: 1.74%
France companies 13.07% fail · n=574
ok: 86.93%hostname_mismatch: 10.8%self_signed: 2.26%
UK companies 11.02% fail · n=2,041
ok: 88.98%hostname_mismatch: 8.97%self_signed: 2.06%
Norway companies 6.31% fail · n=808
ok: 93.69%hostname_mismatch: 4.83%self_signed: 1.49%
ok · 93.69%hostname_mismatch · 4.83%self_signed · 1.49%

By company size band

Company-anchored cuts (national registries with a size proxy), split by size band. Right-hand figure is the share not meeting the control.

France
micron=154
ok: 84.42%hostname_mismatch: 12.99%self_signed: 2.6%
15.58%
smalln=179
ok: 88.27%hostname_mismatch: 10.61%self_signed: 1.12%
11.73%
mediumn=130
ok: 83.85%hostname_mismatch: 11.54%self_signed: 4.62%
16.15%
largen=111
ok: 91.89%hostname_mismatch: 7.21%self_signed: 0.9%
8.11%
UK
micron=190
ok: 88.95%hostname_mismatch: 8.95%self_signed: 2.11%
11.05%
smalln=758
ok: 88.52%hostname_mismatch: 9.23%self_signed: 2.24%
11.48%
medium/largen=784
ok: 89.29%hostname_mismatch: 9.18%self_signed: 1.53%
10.71%
dormantn=150
ok: 90.67%hostname_mismatch: 6.67%self_signed: 2.67%
9.33%
no-accountsn=159
ok: 88.05%hostname_mismatch: 8.81%self_signed: 3.14%
11.95%
Norway
micron=232
ok: 90.52%hostname_mismatch: 6.47%self_signed: 3.02%
9.48%
smalln=209
ok: 94.74%hostname_mismatch: 4.31%self_signed: 0.96%
5.26%
mediumn=221
ok: 93.67%hostname_mismatch: 5.43%self_signed: 0.9%
6.33%
largen=146
ok: 97.26%hostname_mismatch: 2.05%self_signed: 0.68%
2.74%

Every segment

Pick one to see the citable answer for a company like yours, with its trend and methodology.

Show the remaining 62 segments

Slices below 100 measured members are withheld rather than shown with a wide interval — an absent country or issuer means too little data, not zero failures. Licensed CC BY 4.0. Machine-readable data per segment: append .json or .csv to its URL.