{
 "metric": "cert-trust",
 "segment": "ca",
 "anchor": "domain",
 "label": "Canada (domains)",
 "population": "domains in Canada",
 "states": [
  "ok",
  "hostname_mismatch",
  "self_signed"
 ],
 "quiet_failure_states": [
  "hostname_mismatch",
  "self_signed"
 ],
 "measurement": "Tier 2; compare issuer/subject and check the SAN list covers the host. Denominator: `has_web`.",
 "why_it_matters": "HTTPS is present, the port is open, TLS negotiates — and every visitor gets a browser warning, or would if they checked. Encryption without authentication.",
 "limits": null,
 "data_tier": "tls",
 "population_predicate": "has_web",
 "entity_type": "domain",
 "kind": "failure",
 "latest": {
  "day": "2026-08-12",
  "n": 198,
  "qf_pct": 5.56,
  "ci": [
   3.13,
   9.67
  ],
  "dist": {
   "self_signed": 0.51,
   "hostname_mismatch": 5.05,
   "ok": 94.44
  },
  "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
 },
 "series": [
  {
   "day": "2026-08-01",
   "n": 86,
   "qf_pct": 1.16,
   "ci": [
    0.21,
    6.3
   ],
   "dist": {
    "ok": 98.84,
    "hostname_mismatch": 1.16,
    "self_signed": 0
   },
   "snapshot": "common-crawl-domain-stratified-c150-g2500-seed20260729"
  },
  {
   "day": "2026-08-03",
   "n": 90,
   "qf_pct": 1.11,
   "ci": [
    0.2,
    6.03
   ],
   "dist": {
    "ok": 98.89,
    "hostname_mismatch": 1.11,
    "self_signed": 0
   },
   "snapshot": "common-crawl-domain-stratified-c150-g2500-seed20260729"
  },
  {
   "day": "2026-08-04",
   "n": 200,
   "qf_pct": 5.5,
   "ci": [
    3.1,
    9.58
   ],
   "dist": {
    "ok": 94.5,
    "hostname_mismatch": 5,
    "self_signed": 0.5
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  },
  {
   "day": "2026-08-05",
   "n": 199,
   "qf_pct": 5.53,
   "ci": [
    3.11,
    9.63
   ],
   "dist": {
    "ok": 94.47,
    "hostname_mismatch": 5.03,
    "self_signed": 0.5
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  },
  {
   "day": "2026-08-12",
   "n": 198,
   "qf_pct": 5.56,
   "ci": [
    3.13,
    9.67
   ],
   "dist": {
    "self_signed": 0.51,
    "hostname_mismatch": 5.05,
    "ok": 94.44
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  }
 ],
 "license": "CC BY 4.0",
 "source": "https://quietfailures.com/datasets/cert-trust/ca"
}