Just how many websites are vulnerable because of SHA-1?

Naughty certificate authorities are breaching agreed timelines for phasing out digital certificates signed with the insecure SHA-1 hashing algorithm.