~/dnsniffer/issuers/google-trust-services·rank #3
$ dnsniffer count --issuer google-trust-services --active
▸ How many domains does Google Trust Services secure?
22,615,922
active domains whose current TLS certificate was issued by Google Trust Services, as of - 9.80% of all attributed domains.
# rank #3 of all CAs# all records held: 25,600,241# subdomains: 173# intermediates: 9# United States
~/issuers/google-trust-services/history·active domains
22,615,922
domains secured by Google Trust Services on 2026-09-01 · ▲ +13,289,472 (+142.49%) since 2025-06-30
# y-axis starts at 7.7M, not zero - domain counts move by fractions of a percent a day. Dashed segments are estimated: reconstructed from certificate first-seen dates before daily snapshots began, not measured on the day.
# change over time
30 days
▼ -0.18%
-39,729 domains
90 days
▲ +6.91%
+1,462,279 domains
1 year
▲ +56.83%
+8,195,129 domains
# intermediate CAs
| intermediate | country | domains |
|---|---|---|
| WR1 | United States | 20,426,283 |
| WR3 | United States | 2,187,351 |
| WE2 | United States | 1,444 |
| WR2 | United States | 776 |
| WR4 | - | 60 |
| WE1 | United States | 7 |
| WR5 | United States | 1 |
| WE5 | United States | 0 |
| WE3 | United States | 0 |
# faq
- ? How many domains does Google Trust Services secure?
- Google Trust Services is the certificate authority for 22,615,922 active domains as of September 1, 2026 - 9.80% of every domain DNSniffer can attribute to an issuer.
- ? Is Google Trust Services gaining or losing market share?
- The number of domains secured by Google Trust Services has grown by 56.83% over the last year (+8,195,129 domains).
- ? Which intermediate CAs does Google Trust Services sign from?
- We have seen 9 intermediates under Google Trust Services, the busiest being “WR1” with 20,426,283 domains. The full list, with per-intermediate counts, is on this page.
- ? Where does this number come from?
- DNSniffer ingests Certificate Transparency logs continuously and records the issuer of the most recent certificate seen for each domain, then snapshots the per-issuer count once a day. It measures how much of the live web a CA currently secures, not how many certificates it has issued over its lifetime.