{
 "metric": "cert-trust",
 "segment": "us",
 "anchor": "domain",
 "label": "the US (domains)",
 "population": "domains in the US",
 "states": [
  "ok",
  "hostname_mismatch",
  "self_signed"
 ],
 "quiet_failure_states": [
  "hostname_mismatch",
  "self_signed"
 ],
 "measurement": "Tier 2; compare issuer/subject and check the SAN list covers the host. Denominator: `has_web`.",
 "why_it_matters": "HTTPS is present, the port is open, TLS negotiates — and every visitor gets a browser warning, or would if they checked. Encryption without authentication.",
 "limits": null,
 "data_tier": "tls",
 "population_predicate": "has_web",
 "entity_type": "domain",
 "kind": "failure",
 "latest": {
  "day": "2026-08-12",
  "n": 103,
  "qf_pct": 5.83,
  "ci": [
   2.7,
   12.13
  ],
  "dist": {
   "hostname_mismatch": 3.88,
   "ok": 94.17,
   "self_signed": 1.94
  },
  "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
 },
 "series": [
  {
   "day": "2026-08-01",
   "n": 42,
   "qf_pct": 2.38,
   "ci": [
    0.42,
    12.32
   ],
   "dist": {
    "ok": 97.62,
    "hostname_mismatch": 2.38,
    "self_signed": 0
   },
   "snapshot": "common-crawl-domain-stratified-c150-g2500-seed20260729"
  },
  {
   "day": "2026-08-03",
   "n": 42,
   "qf_pct": 2.38,
   "ci": [
    0.42,
    12.32
   ],
   "dist": {
    "ok": 97.62,
    "hostname_mismatch": 2.38,
    "self_signed": 0
   },
   "snapshot": "common-crawl-domain-stratified-c150-g2500-seed20260729"
  },
  {
   "day": "2026-08-04",
   "n": 105,
   "qf_pct": 5.71,
   "ci": [
    2.64,
    11.91
   ],
   "dist": {
    "ok": 94.29,
    "hostname_mismatch": 3.81,
    "self_signed": 1.9
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  },
  {
   "day": "2026-08-05",
   "n": 105,
   "qf_pct": 5.71,
   "ci": [
    2.64,
    11.91
   ],
   "dist": {
    "ok": 94.29,
    "hostname_mismatch": 3.81,
    "self_signed": 1.9
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  },
  {
   "day": "2026-08-12",
   "n": 103,
   "qf_pct": 5.83,
   "ci": [
    2.7,
    12.13
   ],
   "dist": {
    "hostname_mismatch": 3.88,
    "ok": 94.17,
    "self_signed": 1.94
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  }
 ],
 "license": "CC BY 4.0",
 "source": "https://quietfailures.com/datasets/cert-trust/us"
}