~/dnsniffer/issuers/google-trust-services·rank #3
$ dnsniffer count --issuer google-trust-services --active
▸ How many domains does Google Trust Services secure?
22,652,407
active domains whose current TLS certificate was issued by Google Trust Services, as of — 9.77% of all attributed domains.
# rank #3 of all CAs# all records held: 25,562,200# subdomains: 173# intermediates: 9# United States
~/issuers/google-trust-services/history·active domains
22,652,407
domains secured by Google Trust Services on 2026-08-31 · ▲ +13,325,957 (+142.88%) since 2025-06-30
# y-axis starts at 7.7M, not zero — domain counts move by fractions of a percent a day. Dashed segments are estimated: reconstructed from certificate first-seen dates before daily snapshots began, not measured on the day.
# change over time
30 days
▼ -0.01%
-3,244 domains
90 days
▲ +7.09%
+1,498,764 domains
1 year
▲ +57.08%
+8,231,614 domains
# intermediate CAs
| intermediate | country | domains |
|---|---|---|
| WR1 | United States | 20,459,506 |
| WR3 | United States | 2,190,611 |
| WE2 | United States | 1,445 |
| WR2 | United States | 776 |
| WR4 | — | 62 |
| WE1 | United States | 7 |
| WE5 | United States | 0 |
| WE3 | United States | 0 |
| WR5 | United States | 0 |
# faq
- ? How many domains does Google Trust Services secure?
- Google Trust Services is the certificate authority for 22,652,407 active domains as of August 31, 2026 — 9.77% of every domain DNSniffer can attribute to an issuer.
- ? Is Google Trust Services gaining or losing market share?
- The number of domains secured by Google Trust Services has grown by 57.08% over the last year (+8,231,614 domains).
- ? Which intermediate CAs does Google Trust Services sign from?
- We have seen 9 intermediates under Google Trust Services, the busiest being “WR1” with 20,459,506 domains. The full list, with per-intermediate counts, is on this page.
- ? Where does this number come from?
- DNSniffer ingests Certificate Transparency logs continuously and records the issuer of the most recent certificate seen for each domain, then snapshots the per-issuer count once a day. It measures how much of the live web a CA currently secures, not how many certificates it has issued over its lifetime.