ctscout research · vendor page · 2026-09-06

Which organizations run Microsoft on their own domains

Microsoft holds organization-validated certificates on 22,869 web domains that do not carry Microsoft's own brand. This page counts them, says which countries their owners are registered in where that is known, and lists 10 of the domains a DNS check confirmed.

Terms. An OV certificate (organization-validated) is a website certificate in which the issuer checked the organization's legal existence and wrote its name into it. A DNS check asks the internet's public address directory which servers a web address points to; when Microsoft's servers answer for an address, Microsoft runs it. An LEI (Legal Entity Identifier) is the 20-character code GLEIF assigns to one legal entity. An ISIN identifies one security, a share or a bond.

Note 2's domain list as of 2026-09-06 · GLEIF 2026-09-06 · ISIN mapping 2026-09-06

22,869

candidate customer domains: certified by Microsoft, not carrying its brand

39 of 43

sampled domains that could be checked were confirmed by DNS (precision 91%, note 2)

1,524

domains whose owner resolves to one legal entity (LEI); 583 of them issue securities

What the counts mean

A candidate is a domain where Microsoft's certificate sits and the domain does not carry Microsoft's brand in its name. A DNS-confirmed customer is a sampled candidate whose certified address was found pointing at Microsoft's own servers while the domain demonstrably belongs to someone else; the check ran on a fixed sample, so the confirmed figure is a sample result, not a customer count, and its precision is the best estimate of the share of candidates that are real customers. An LEI-resolved domain is one where exactly one LEI is found among the non-vendor names on its certificates; a name that matched nothing may remain beside it. Candidates and DNS-confirmed are two views of the same domains, so they are never summed. Full definitions: note 3, how it is measured.

Where the owners are registered

Shares are of the 1,524 domains whose owner could be identified. Of the 2,997 candidates carrying another organization's certificate, 142 matched several entities and 1,331 matched no GLEIF record or matched ambiguously; both groups are left out.

Country of the owner (GLEIF)	Customer domains	Share of LEI-resolved
US	582	38%
GB	150	10%
FR	71	5%
DE	66	4%
CA	62	4%
AU	58	4%
SE	48	3%
DK	45	3%
NL	45	3%
CH	34	2%
other countries	363	24%

Used together with

Also used with	Shared customer domains	Entities using both (any domain)
Salesforce	456	222
Adobe Systems	154	106
Criteo Technology	26	14
Thomson Reuters	20	14
Tessitura Network	5	3
Cdnetworks	2	3
Powerschool Group	1	0

10 confirmed customer domains

10 DNS-confirmed domains chosen by a fixed, arbitrary rule on the domain name (the lowest hash), so the list is the same on every rebuild until the confirmed set changes. Confirmed means Microsoft runs the certified address; the owner of some of these domains could not be identified, and some are addresses set up for the vendor's service rather than the owner's main site.

toblp.com
mlse.io
klshub.co.uk
ies-co.com
gouv.qc.ca
planetdepos.com
elo.com.br
plumblineconsulting.com
sempra.com
merceradvisors.com

The full table of 22,869 candidate domains, with the confirmed flag on sampled rows, is available through ctscout's data service (API and MCP), not on this page.