cert-governance · severity high

Certificate trust

Share of certificates that are self-signed or not valid for the hostname served.

Measured every Wednesday · last updated

How it is measured

Tier 2; compare issuer/subject and check the SAN list covers the host. Denominator: has_web.

Why it matters

HTTPS is present, the port is open, TLS negotiates — and every visitor gets a browser warning, or would if they checked. Encryption without authentication.

The base rate

Two independent populations. The global, domain-anchored figure is unbiased; the company-anchored figures are built by matching company names to domains and skew toward more digitally-mature firms. Both are published, so the gap is visible.

Global (all domains) 7.51% fail · n=13,875
valid: 92.49%hostname mismatch: 5.88%self-signed: 1.63%
France companies 10.88% fail · n=588
valid: 89.12%hostname mismatch: 10.03%self-signed: 0.85%
UK companies 10.32% fail · n=2,045
valid: 89.68%hostname mismatch: 7.43%self-signed: 2.89%
Norway companies 6.52% fail · n=828
valid: 93.48%hostname mismatch: 5.43%self-signed: 1.09%
valid · 93.48%hostname mismatch · 5.43%self-signed · 1.09%

By company size band

Company-anchored cuts (national registries with a size proxy), split by size band. Right-hand figure is the share not meeting the control.

France
micron=178
valid: 90.45%hostname mismatch: 8.43%self-signed: 1.12%
9.55%
smalln=180
valid: 88.89%hostname mismatch: 10.56%self-signed: 0.56%
11.11%
mediumn=132
valid: 87.12%hostname mismatch: 11.36%self-signed: 1.52%
12.88%
UK
micron=182
valid: 88.46%hostname mismatch: 7.69%self-signed: 3.85%
11.54%
smalln=718
valid: 89.55%hostname mismatch: 7.94%self-signed: 2.51%
10.45%
medium/largen=820
valid: 89.76%hostname mismatch: 7.32%self-signed: 2.93%
10.24%
dormantn=152
valid: 85.53%hostname mismatch: 9.87%self-signed: 4.61%
14.47%
no-accountsn=173
valid: 94.8%hostname mismatch: 3.47%self-signed: 1.73%
5.2%
Norway
micron=238
valid: 94.54%hostname mismatch: 3.36%self-signed: 2.1%
5.46%
smalln=222
valid: 94.59%hostname mismatch: 4.95%self-signed: 0.45%
5.41%
mediumn=223
valid: 92.38%hostname mismatch: 7.17%self-signed: 0.45%
7.62%
largen=145
valid: 91.72%hostname mismatch: 6.9%self-signed: 1.38%
8.28%

Every segment

Pick one to see the citable answer for a company like yours, with its trend and methodology.

Show the remaining 61 segments

Slices below 100 measured members are withheld rather than shown with a wide interval — an absent country or issuer means too little data, not zero failures. Licensed CC BY 4.0. Machine-readable data per segment: append .json or .csv to its URL.