← cipherwake.io · All watchlists
Cipherwake watchlist

Largest Wildcard Cert Sprawl · Single-Key Multipliers

When a single wildcard cert covers 50+ subdomains, the entire subdomain population shares one private key. One compromise unlocks them all. These domains have the largest single-key exposure surface in the curated peer set.

# Domain Score Grade Sector Freshness
1 ford.com 5.9 C Global Automakers stale (4d old)
2 subaru.com 5.9 C — stale (6d old)
3 stripe.com 5.9 C — verified 2h ago
4 gm.com 5.9 C — stale (6d old)
5 stellantis.com 5.8 C Global Automakers stale (4d old)
6 github.com 5.8 C — verified 2h ago
7 anduril.com 5.4 C — verified 17h ago
8 propublica.org 5.4 C Global News & Media stale (7d old)
9 volkswagen.com 5.4 C — stale (6d old)
10 netlify.com 5.4 C — verified 2h ago
11 ico.org.uk 5.4 C — verified 17h ago
12 honda.com 5.3 C — stale (6d old)
13 gitlab.com 5.2 C — verified 17h ago
14 bloomberg.com 5.2 C Global News & Media stale (4d old)
15 citi.com 5.1 C — verified 17h ago
16 hyundai.com 5.1 C — stale (6d old)
17 reuters.com 5.0 C Global News & Media stale (4d old)
18 santander.co.uk 5.0 C — verified 17h ago
19 ubs.com 5.0 C — verified 17h ago
20 dwp.gov.uk 5.0 C — verified 17h ago

Don't want to be here?

Run the same scan we use for this ranking. See your specific findings, get the migration steps, and track the domain so you know when your score improves.

Updated nightly via Certificate Transparency log mining + active TLS probes. Public-surface measurements only — internal Blast Radius is typically 12–40× this score.
Methodology · Challenge a score · All sector leaderboards

Other watchlists