~/dnsniffer/issuers/china-financial-certification-authority·rank #66
$ dnsniffer count --issuer china-financial-certification-authority --active
▸ How many domains does China Financial Certification Authority secure?
2,444
active domains whose current TLS certificate was issued by China Financial Certification Authority, as of — 0.00% of all attributed domains.
# rank #66 of all CAs# all records held: 2,484# subdomains: 4# intermediates: 8# China
~/issuers/china-financial-certification-authority/history·active domains
2,444
domains secured by China Financial Certification Authority on 2026-08-31 · ▲ +1,436 (+142.46%) since 2025-06-30
# y-axis starts at 835.6800000000001, not zero — domain counts move by fractions of a percent a day. Dashed segments are estimated: reconstructed from certificate first-seen dates before daily snapshots began, not measured on the day.
# change over time
30 days
▲ +0.00%
+0 domains
90 days
▲ +1.28%
+31 domains
1 year
▲ +13.10%
+283 domains
# intermediate CAs
| intermediate | country | domains |
|---|---|---|
| CFCA OV OCA | China | 1,692 |
| CFCA TLS OV OCA | China | 650 |
| CFCA EV OCA | China | 78 |
| CFCA TLS EV OCA | China | 18 |
| CFCA EV RSA OCA G2 | China | 2 |
| CFCA OV RSA OCA G2 | China | 2 |
| CFCA OV RSA CA | China | 1 |
| CFCA DV RSA CA | China | 1 |
# faq
- ? How many domains does China Financial Certification Authority secure?
- China Financial Certification Authority is the certificate authority for 2,444 active domains as of August 31, 2026 — 0.00% of every domain DNSniffer can attribute to an issuer.
- ? Is China Financial Certification Authority gaining or losing market share?
- The number of domains secured by China Financial Certification Authority has grown by 13.10% over the last year (+283 domains).
- ? Which intermediate CAs does China Financial Certification Authority sign from?
- We have seen 8 intermediates under China Financial Certification Authority, the busiest being “CFCA OV OCA” with 1,692 domains. The full list, with per-intermediate counts, is on this page.
- ? Where does this number come from?
- DNSniffer ingests Certificate Transparency logs continuously and records the issuer of the most recent certificate seen for each domain, then snapshots the per-issuer count once a day. It measures how much of the live web a CA currently secures, not how many certificates it has issued over its lifetime.