HTTPfy

Google Trust Services certificates on popular websites

Google Trust Services issued 2174 of the 8,208 certificates we observed on popular sites in November 2026.

26.5%of observed certificates2174 of 8,208

90 daysmedian validity period

0.6%expiring within 30 daysat scan time

99.6%validated for the host name

Validity period

Days between notBefore and notAfter of the leaf certificate.

up to 100 days 100.0%

101 to 200 days 0.0%

201 to 398 days 0.0%

over 398 days 0.0%

TLS versions negotiated

On sites using Google Trust Services (accent) and all sites (grey).

TLSv1.3 97.4%

all sites 84.9%

TLSv1.2 2.6%

all sites 15.1%

About Google Trust Services

Issuer organisation names seen in these certificates: Google Trust Services (2174).

Google Trust Services issues certificates through the ACME protocol, so they are usually renewed automatically by a client such as Certbot, which explains short validity periods.

27.0% of the domains using Google Trust Services publish a CAA record (all sites: 20.7%). A CAA record names the CAs allowed to issue for the domain; any other CA must refuse.

CA site: https://pki.goog/

Popular sites with a Google Trust Services certificate

google.comcloudflare.comgoogleapis.comgstatic.comyoutube.comgooglevideo.comgoogletagmanager.comgoogleusercontent.comdoubleclick.netgooglesyndication.comyoutu.begoo.gl

Check one yourself:

Check SSL certificate Look up CAA records HTTP headers

Source: our own scan of November 2026 (2026-11-11), 9,971 of the top 10,000 domains of the Tranco list Y895G that answered in DNS. Method and data.