WebPKI Observatory — Geographic Risk
15 US-based CAs issue 90.6% of global certificates, while 44 European CAs contribute 9.3% and 17 Asia-Pacific CAs account for just 0.08%. This extreme geographic concentration means the WebPKI's operational posture, legal exposure, and governance culture are overwhelmingly shaped by US corporate norms and regulatory frameworks. The gap between CA count and issuance share is starkest in Asia-Pacific, where 17 trusted CAs serve a minimal fraction of the global web despite the region's large internet user population.