When a single wildcard cert covers 50+ subdomains, the entire subdomain population shares one private key. One compromise unlocks them all. These domains have the largest single-key exposure surface in the curated peer set.
| # | Domain | Score | Grade | Sector | Freshness |
|---|---|---|---|---|---|
| 1 | github.com | 6.6 | D | — | verified 30m ago |
| 2 | stripe.com | 5.8 | C | — | verified 30m ago |
| 3 | apnews.com | 5.6 | C | Global News & Media | stale (5d old) |
| 4 | cloudflare.com | 4.9 | C | — | verified 30m ago |
| 5 | google.com | 4.9 | C | — | verified 30m ago |
| 6 | facebook.com | 4.7 | C | — | verified 30m ago |
| 7 | vercel.com | 2.8 | B | — | verified 30m ago |
Run the same scan we use for this ranking. See your specific findings, get the migration steps, and track the domain so you know when your score improves.