Issuance and revocation controls

CAA restricts who may issue; OCSP stapling carries revocation status in the handshake.

CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% CAA adoption: 6.3% 6.3%CAA adoption62,800 of 1,000,000 websites
OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% OCSP stapling: 8.3% 8.3%OCSP stapling81,282 of 973,441 deep-scanned websites

Denominators: websites / deep-scanned websites — each measure states its own

View as table
MeasureShareSitesn
CAA adoption6.3%62,8001,000,000
OCSP stapling8.3%81,282973,441

Source: GeoTrust Research — The State of SSL/TLS, October 2026