{
  "asOf": "2026-09-05",
  "_source": "census, cert-valid evidence (details.issuer/selfSigned + technicalEvidence.issues[]), raw-pass",
  "with_cert": 212160994,
  "valid": 189122975,
  "invalid": 23038019,
  "problems": {
    "self_signed": 4160496,
    "has_issues": 23038019,
    "failed_validation": 23038019
  },
  "_note": "with_cert = domains presenting a cert with an identifiable issuer. failed_validation == has_issues (a non-empty issues[] is what fails cert-valid). self_signed is a subset of failures. Counts include ~1.1% re-scan duplicates (raw-pass, not per-domain deduped); proportions/rates unaffected."
}