I wonder how many of these are due to chrome 68 showing http sites as not secure.
It's probably more the other way around: the Chrome team only felt confident to show a "not secure" indicator, because so many domains are HTTPS now, and there is a good free option to get TLS certificates.
People who didn't care about https probably didn't care about Chrome behavior change announcement. I expect in new domains next few weeks.
I'd be more wondering how many were/are used for phishing campaigns.
This is phenomenal achievement in what used to be a vulture-like lucrative fees industry. THANK YOU!
I really just hope we get a letsencrypt equivalent for health insurance that is a "no-nonsense, gets the the job done" company.