HTTPfy

CFCA certificates on popular websites

CFCA issued 6 of the 8,208 certificates we observed on popular sites in November 2026.

0.1%of observed certificates6 of 8,208

390 daysmedian validity period

0.0%expiring within 30 daysat scan time

100.0%validated for the host name

Validity period

Days between notBefore and notAfter of the leaf certificate.

up to 100 days 0.0%

101 to 200 days 33.3%

201 to 398 days 66.7%

over 398 days 0.0%

TLS versions negotiated

On sites using CFCA (accent) and all sites (grey).

TLSv1.3 83.3%

all sites 84.9%

TLSv1.2 16.7%

all sites 15.1%

About CFCA

Issuer organisation names seen in these certificates: China Financial Certification Authority (6).

0.0% of the domains using CFCA publish a CAA record (all sites: 20.7%). A CAA record names the CAs allowed to issue for the domain; any other CA must refuse.

CA site: https://www.cfca.com.cn/

Popular sites with a CFCA certificate

mps.gov.cnwww.gov.cnchinatax.gov.cnmoe.gov.cncas.cngsxt.gov.cn

Check one yourself:

Check SSL certificate Look up CAA records HTTP headers

Source: our own scan of November 2026 (2026-11-11), 9,971 of the top 10,000 domains of the Tranco list Y895G that answered in DNS. Method and data.