Precert Issuance Rate: 390,856 certs/hr
Precert Expiry Rate: 352,931 certs/hr
The tables below count the number of currently-valid certificates signed by widely trusted CAs that use insecure or deprecated algorithms.
Signature Algorithm | # |
---|---|
SHA1-RSA | 178 |
Public-Key Algorithm | # |
---|---|
(None) |
This section shows the number of pre-certificates issued in the previous 30 days (based on the NotBefore field) per certificate authority, deduplicated across CT logs. Only pre-certificates are shown to avoid overrepresenting CAs that log both pre-certificates and their corresponding final certificates.
This section shows the number of non-expired pre-certificates in known CT logs from a few particularly large certificate authorities. Anyone can submit a pre-certificate they find in one log to another log, but this currently shows that some CAs have a clear preference for certain CT logs when they issue a certificate containing embedded SCTs, while others submit to several logs equally.