SSL Toolkit Logo

CA Reputation Database

Look up Certificate Authority reputation and trust status

Results


        

About

The Certificate Authority Reputation Database maintains a comprehensive reputation profile for all major Certificate Authorities, including trust status, historical incidents, security track record, and industry rankings. It aggregates data from security research, browser trust store changes, and incident reports to provide a complete picture of CA reliability.

Choosing the right CA is critical for your organization's security posture. This database helps you evaluate CAs based on their security history, compliance record, and industry reputation. It tracks CA distrust events, security incidents, and policy changes that may affect your certificate management strategy.

How to Use

  1. 1Browse the CA database by name, trust status, or reputation score
  2. 2Click on any CA to view its complete reputation profile including history and incidents
  3. 3Compare CAs side-by-side to evaluate options for your certificate needs
  4. 4Filter by trust status to find CAs trusted by all major platforms

Use Cases

  • CA Selection:** Make informed decisions when choosing a Certificate Authority by reviewing their security track record and reputation
  • Risk Assessment:** Evaluate the risk of your current CA based on their history of security incidents and trust issues
  • Vendor Due Diligence:** Conduct due diligence on CAs as part of vendor assessment processes
  • Migration Planning:** Identify alternative CAs when your current CA experiences trust issues or is distrusted
  • Compliance Documentation:** Document CA evaluation as part of your certificate management policy for audits

Tips & Best Practices

  • Check CA reputation before signing long-term certificate contracts
  • Monitor CA reputation changes and subscribe to alerts for CAs you use
  • Consider using multiple CAs for redundancy in case one CA experiences issues
  • Review the CA's incident response history — how they handled past issues matters

Technical Details

Data Sources:** Browser trust store changes, CA/Browser Forum minutes, security researcher reports, incident disclosures
Scoring:** Weighted reputation score based on trust history, security incidents, compliance, and industry standing
Update Frequency:** Real-time for trust changes, weekly for reputation updates, monthly for full profiles
Historical Data:** Complete incident history going back to 2012

Frequently Asked Questions

The reputation score is calculated from multiple factors: trust store status across platforms (40%), history of security incidents (25%), compliance with CA/Browser Forum requirements (20%), and industry analyst assessments (15%). Scores are updated whenever new information becomes available.
When a CA is distrusted by a browser vendor, our database immediately updates their profile with the distrust event details, affected certificate ranges, and timeline. We also notify all users who monitor certificates from that CA with migration recommendations.
Yes, security researchers and organization can submit CA incident reports, trust observations, and reputation assessments through our submission portal. All submissions are reviewed by our team before being added to the database.