WebPKI Observatory — Distrust History
16 distrust events have occurred across the ecosystem, with 14 tied to compliance or operational failures and 10 following a pattern of repeated issues rather than isolated incidents. Root programs classify CA posture at distrust as negligent noncompliance in 7 cases, willful circumvention in 3, and demonstrated incompetence in 3, with just 1 accidental failure. The median runway from distrust announcement to removal is 1,185 days, reflecting browsers' cautious approach to avoid breaking legitimate certificate chains even when trust has been formally revoked.