WebPKI Observatory — Government Risk
30 government-operated or state-owned CAs hold positions in global trust stores but collectively issue only 0.09% of certificates, concentrated primarily in Asia-Pacific jurisdictions. These CAs possess technical capability to issue certificates for any domain despite minimal legitimate market presence, creating a trust surface that extends far beyond their operational footprint. The presence of state-controlled CAs in root programs represents a persistent governance challenge where geopolitical considerations intersect with technical trust decisions.