TLS Certificate Authorities

Intermediate CAs seen on phishing sites tracked by phishunt, with operator, root chain and current active-site counts.

Certificate Authorities
60
Active Phishing Sites
432
Certificate Operator Key type Since Root CA Active sites
Let's Encrypt Internet Security Research Group (ISRG) RSA & ECDSA 2015 ISRG Root X1, ISRG Root X2 140
Google Trust Services Google Trust Services LLC RSA & ECDSA 2017 GTS Root R1, GTS Root R4 59
WE1 Google Trust Services LLC ECDSA 2023 GTS Root R4 57
WR1 Google Trust Services LLC RSA 2022 GTS Root R1 42
R12 Internet Security Research Group (ISRG) RSA 2024 ISRG Root X1 35
WE2 Google Trust Services LLC ECDSA 2023 GTS Root R4 18
SSL Corporation SSL Corporation RSA & ECDSA 2016 SSL.com Root Certification Authority RSA, SSL.com Root Certification Authority ECC 15
YE1 Internet Security Research Group (ISRG) ECDSA 2025 ISRG Root X2 (via Root YE) 9
R13 Internet Security Research Group (ISRG) RSA 2024 ISRG Root X1 8
Sectigo Limited Sectigo Limited RSA & ECDSA 1998 USERTrust RSA Certification Authority, COMODO RSA Certification Authority 7
YR1 Internet Security Research Group (ISRG) RSA 2025 ISRG Root X1 (via Root YR) 7
YR2 Internet Security Research Group (ISRG) RSA 2025 ISRG Root X1 (via Root YR) 7
WR2 Google Trust Services LLC RSA 2023 GTS Root R1 6
DigiCert Global G2 TLS RSA SHA256 2020 CA1 DigiCert, Inc. RSA 2020 DigiCert Global Root G2 5
GlobalSign nv-sa GlobalSign nv-sa RSA & ECDSA 1996 GlobalSign Root CA, GlobalSign Atlas R3 4
YE2 Internet Security Research Group (ISRG) ECDSA 2025 ISRG Root X2 (via Root YE) 4
Amazon RSA 2048 M02 Amazon Trust Services LLC RSA 2022 Amazon Root CA 1 3
Amazon RSA 2048 M01 Amazon Trust Services LLC RSA 2022 Amazon Root CA 1 2
Amazon RSA 2048 M03 Amazon Trust Services LLC RSA 2023 Amazon Root CA 1 1
WR3 Google Trust Services LLC RSA 2023 GTS Root R1 1
ZeroSSL ECC Domain Secure Site CA ZeroSSL / Sectigo ECDSA 2020 USERTrust ECC Certification Authority 1
ZeroSSL RSA Domain Secure Site CA ZeroSSL / Sectigo RSA 2020 USERTrust RSA Certification Authority 1
AlphaSSL CA - SHA256 - G2 GlobalSign nv-sa (AlphaSSL brand) RSA 2014 GlobalSign Root CA 0
AlphaSSL CA - SHA256 - G4 GlobalSign nv-sa (AlphaSSL brand) RSA 2021 GlobalSign Root CA - R6 0
Amazon RSA 2048 M04 Amazon Trust Services LLC RSA 2024 Amazon Root CA 1 0
Apple Public EV Server RSA CA 2 - G1 Apple Inc. RSA 2020 Apple Root CA - G3 0
Apple Public Server RSA CA 12 - G1 Apple Inc. RSA 2022 Apple Root CA - G3 0
Cloudflare Inc ECC CA-3 Cloudflare, Inc. ECDSA 2019 Baltimore CyberTrust Root 0
DigiCert TLS Hybrid ECC SHA384 2020 CA1 DigiCert, Inc. ECDSA 2020 DigiCert Global Root G2 0
DigiCert TLS RSA SHA256 2020 CA1 DigiCert, Inc. RSA 2020 DigiCert Global Root CA 0
E5 Internet Security Research Group (ISRG) ECDSA 2024 ISRG Root X2 0
E6 Internet Security Research Group (ISRG) ECDSA 2024 ISRG Root X2 0
E7 Internet Security Research Group (ISRG) ECDSA 2024 ISRG Root X2 0
E8 Internet Security Research Group (ISRG) ECDSA 2024 ISRG Root X2 0
Encryption Everywhere DV TLS CA - G1 DigiCert (Encryption Everywhere program) RSA 2017 DigiCert Global Root CA 0
Entrust Certification Authority - L1K Entrust, Inc. RSA 2015 Entrust Root Certification Authority - G2 0
Entrust Certification Authority - L1M Entrust, Inc. RSA 2018 Entrust Root Certification Authority - G2 0
GTS CA 1C3 Google Trust Services LLC RSA 2020 GTS Root R1 0
GTS CA 1D4 Google Trust Services LLC RSA 2021 GTS Root R1 0
GeoTrust TLS RSA CA G1 DigiCert (GeoTrust brand) RSA 2017 DigiCert Global Root G2 0
GlobalSign Atlas R3 DV TLS CA H2 2021 GlobalSign nv-sa RSA 2021 GlobalSign Root CA - R3 0
Go Daddy Secure Certificate Authority - G2 GoDaddy.com, LLC RSA 2011 Go Daddy Root Certificate Authority - G2 0
Microsoft Azure RSA TLS Issuing CA 03 Microsoft Corporation RSA 2023 DigiCert Global Root G2 0
Microsoft Azure TLS Issuing CA 05 Microsoft Corporation RSA 2020 DigiCert Global Root G2 0
R10 Internet Security Research Group (ISRG) RSA 2024 ISRG Root X1 0
R11 Internet Security Research Group (ISRG) RSA 2024 ISRG Root X1 0
R14 Internet Security Research Group (ISRG) RSA 2024 ISRG Root X1 0
R3 Internet Security Research Group (ISRG) RSA 2020 ISRG Root X1 0
RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1 DigiCert (RapidSSL brand) RSA 2020 DigiCert Global Root G2 0
RapidSSL TLS RSA CA G1 DigiCert (RapidSSL brand) RSA 2017 DigiCert Global Root G2 0
Sectigo RSA Domain Validation Secure Server CA Sectigo Limited RSA 2018 USERTrust RSA Certification Authority 0
Sectigo RSA Organization Validation Secure Server CA Sectigo Limited RSA 2018 USERTrust RSA Certification Authority 0
Starfield Secure Certificate Authority - G2 Starfield Technologies, LLC RSA 2011 Starfield Root Certificate Authority - G2 0
Thawte TLS RSA CA G1 DigiCert (Thawte brand) RSA 2017 DigiCert Global Root G2 0
TrustAsia DV TLS RSA CA 2025 TrustAsia Technologies, Inc. RSA 2025 DigiCert Global Root G2 0
TrustAsia RSA DV TLS CA G2 TrustAsia Technologies, Inc. RSA 2021 DigiCert Global Root G2 0
TrustAsia TLS RSA CA TrustAsia Technologies, Inc. RSA 2018 DigiCert Global Root CA 0
WR4 Google Trust Services LLC RSA 2024 GTS Root R1 0
ZeroSSL GmbH ZeroSSL (apilayer GmbH) RSA & ECDSA 2018 USERTrust RSA Certification Authority 0
cPanel, Inc. Certification Authority cPanel, L.L.C. RSA 2018 Sectigo / USERTrust 0