WebPKI Observatory — Geographic Risk
U.S.-incorporated CAs issue 92.73% of certificates despite representing only 15 of 88 trusted authorities, while 44 European CAs collectively issue 7.18% and 17 Asia-Pacific CAs account for just 0.09%. This extreme geographic concentration means American legal jurisdiction and operational culture dominate global certificate issuance, even as websites and users span every region. The 61 non-U.S. CAs in trust stores collectively represent less than 8% of operational activity, creating a mismatch between global trust store inclusion and actual issuance footprint.