When a single wildcard cert covers 50+ subdomains, the entire subdomain population shares one private key. One compromise unlocks them all. These domains have the largest single-key exposure surface in the curated peer set.
| # | Domain | Score | Grade | Sector | Freshness |
|---|---|---|---|---|---|
| 1 | subaru.com | 5.9 | C | Global Automakers | stale (3d old) |
| 2 | stripe.com | 5.9 | C | — | verified 2h ago |
| 3 | gm.com | 5.9 | C | — | stale (2d old) |
| 4 | github.com | 5.8 | C | — | verified 42m ago |
| 5 | propublica.org | 5.4 | C | Global News & Media | stale (3d old) |
| 6 | volkswagen.com | 5.4 | C | — | stale (2d old) |
| 7 | politico.com | 5.4 | C | Global News & Media | stale (2d old) |
| 8 | netlify.com | 5.4 | C | — | verified 2h ago |
| 9 | gitlab.com | 5.2 | C | — | verified 13h ago |
| 10 | honda.com | 5.2 | C | Global Automakers | stale (2d old) |
| 11 | hyundai.com | 5.1 | C | Global Automakers | stale (3d old) |
| 12 | ford.com | 5.0 | C | — | stale (2d old) |
| 13 | reuters.com | 5.0 | C | Global News & Media | stale (3d old) |
| 14 | bloomberg.com | 5.0 | C | Global News & Media | stale (2d old) |
| 15 | stellantis.com | 5.0 | C | Global Automakers | stale (2d old) |
| 16 | citi.com | 5.0 | C | — | verified 13h ago |
| 17 | apnews.com | 4.9 | C | Global News & Media | stale (48d old) |
| 18 | google.com | 4.9 | C | — | verified 2h ago |
| 19 | huntingtoningalls.com | 4.8 | C | — | verified 13h ago |
| 20 | cloudflare.com | 4.8 | C | — | verified 2h ago |
Run the same scan we use for this ranking. See your specific findings, get the migration steps, and track the domain so you know when your score improves.