I'd imagine a large part of that would be because Cloudflare uses Sectigo for its "Universal SSL"