We are getting closer. A few months back, I pulled the Alexa Top 1M: Of those, ~550K had port 443 open and were speaking HTTPS. Of those, ~270K had valid certif

We are getting closer. A few months back, I pulled the Alexa Top 1M: Of those, ~550K had port 443 open and were speaking HTTPS. Of those, ~270K had valid certificates (not expired, not self signed, matching hostnames, etc). Planning to do a follow up to get a trend. Also some deeper analysis is needed: Many of the HTTPS sites just 301/301 to HTTP for the same domain, and often to other domains. So while those are websites that speak HTTPS, they aren't really HTTPS sites.