Top Brazil Websites SSL Security Ranking (2026) — Best Sites by Grade
Scanned from 20,000 top global websites · Updated 2026-11-03
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 1 | abril.com.br | A | 100 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 95 d |
| 2 | estadao.com.br | A | 100 | — | — | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 12 d |
| 3 | gazetadopovo.com.br | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 25 d |
| 4 | itau.com.br | A | 100 | — | — | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 11 d |
| 5 | mercadolivre.com.br | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 140 d |
| 6 | senac.br | A | 100 | — | — | TLS1.3 | Thawte TLS RSA CA G1 | — | 65 d |
| 7 | www1.folha.uol.com.br | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 51 d |
| 8 | amazon.com.br | A+ | 100 | — | — | TLS1.3 | Amazon RSA 2048 M01 | 2 d | |
| 9 | bcb.gov.br | A+ | 100 | — | — | TLS1.3 | Thawte TLS RSA CA G1 | 58 d | |
| 10 | correiobraziliense.com.br | A+ | 100 | — | — | TLS1.3 | Let's Encrypt | 21 d | |
| 11 | even3.com.br | A+ | 100 | — | — | TLS1.3 | GeoTrust TLS RSA CA G1 | 118 d | |
| 12 | otempo.com.br | A+ | 100 | — | — | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | 11 d | |
| 13 | scielo.br | A+ | 100 | — | — | TLS1.3 | GlobalSign GCC R6 AlphaSSL CA 2025 | 8 d | |
| 14 | sebrae.com.br | A+ | 100 | — | — | TLS1.3 | Let's Encrypt | 0 d | |
| 15 | sp.gov.br | A+ | 100 | — | — | TLS1.3 | GlobalSign RSA OV SSL CA 2018 | 102 d | |
| 16 | sympla.com.br | A+ | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | 128 d | |
| 17 | terra.com.br | A+ | 100 | — | — | TLS1.3 | Valid Certificadora RSA OV SSL CA 2 | 130 d | |
| 18 | tripadvisor.com.br | A+ | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | 122 d | |
| 19 | ufscar.br | A+ | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | 102 d | |
| 20 | cnnbrasil.com.br | A | 98 | — | — | TLS1.3 | Let's Encrypt | — | 0 d |
| 21 | ba.gov.br | A | 95 | — | — | TLS1.2 | RapidSSL TLS RSA CA G1 | 24 d | |
| 22 | blogspot.com.br | A | 95 | — | — | TLS1.2 | Google Trust Services | — | 0 d |
| 23 | bndes.gov.br | A | 95 | — | — | TLS1.2 | GeoTrust TLS RSA CA G1 | 7 d | |
| 24 | caixa.gov.br | A | 95 | — | — | TLS1.2 | Sectigo Public Server Authentication CA EV R36 | — | 27 d |
| 25 | camara.gov.br | A | 95 | — | — | TLS1.2 | Let's Encrypt | — | 0 d |
| 26 | capes.gov.br | A | 95 | — | — | TLS1.2 | RNP ICPEdu GR46 OV TLS CA 2025 | — | 131 d |
| 27 | ce.gov.br | A | 95 | — | — | TLS1.2 | Amazon RSA 2048 M04 | — | 0 d |
| 28 | clicrbs.com.br | A | 95 | — | — | TLS1.2 | Google Trust Services | 0 d | |
| 29 | ebc.com.br | A | 95 | — | — | TLS1.2 | GlobalSign GCC R3 DV TLS CA 2020 | — | 0 d |
| 30 | em.com.br | A | 95 | — | — | TLS1.2 | GlobalSign GCC R6 AlphaSSL CA 2025 | — | 13 d |
| 31 | embrapa.br | A | 95 | — | — | TLS1.2 | GlobalSign RSA OV SSL CA 2018 | 153 d | |
| 32 | fapesp.br | A | 95 | — | — | TLS1.2 | Thawte TLS RSA CA G1 | — | 51 d |
| 33 | fgv.br | A | 95 | — | — | TLS1.2 | GeoTrust TLS RSA CA G1 | — | 0 d |
| 34 | folha.com.br | A | 95 | — | — | TLS1.2 | GeoTrust TLS RSA CA G1 | — | 80 d |
| 35 | google.com.br | A | 95 | — | — | TLS1.2 | Google Trust Services | — | 0 d |
| 36 | ibict.br | A | 95 | — | — | TLS1.2 | GlobalSign RSA OV SSL CA 2018 | — | 158 d |
| 37 | ipea.gov.br | A | 95 | — | — | TLS1.2 | Sectigo Public Server Authentication CA DV R36 | 117 d | |
| 38 | petrobras.com.br | A | 95 | — | — | TLS1.2 | Let's Encrypt | 0 d | |
| 39 | puc-rio.br | A | 95 | — | — | TLS1.2 | RapidSSL TLS RSA CA G1 | — | 61 d |
| 40 | pucsp.br | A | 95 | — | — | TLS1.2 | Let's Encrypt | — | 27 d |
| 41 | rj.gov.br | A | 95 | — | — | TLS1.2 | RapidSSL TLS RSA CA G1 | — | 0 d |
| 42 | rs.gov.br | A | 95 | — | — | TLS1.2 | RapidSSL TLS RSA CA G1 | — | 65 d |
| 43 | saude.gov.br | A | 95 | — | — | TLS1.2 | GlobalSign RSA OV SSL CA 2018 | — | 161 d |
| 44 | sc.gov.br | A | 95 | — | — | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 52 d |
| 45 | serpro.gov.br | A | 95 | — | — | TLS1.2 | AC SERPRO AR46 OV TLS CA 2025 | — | 46 d |
| 46 | techtudo.com.br | A | 95 | — | — | TLS1.2 | Let's Encrypt | — | 0 d |
| 47 | ufba.br | A | 95 | — | — | TLS1.2 | RNP ICPEdu GR46 OV TLS CA 2025 | 11 d | |
| 48 | uff.br | A | 95 | — | — | TLS1.2 | Let's Encrypt | 31 d | |
| 49 | ufg.br | A | 95 | — | — | TLS1.2 | RNP ICPEdu GR46 OV TLS CA 2025 | 68 d | |
| 50 | ufmg.br | A | 95 | — | — | TLS1.2 | RNP ICPEdu GR46 OV TLS CA 2025 | 45 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are weighted into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.
SSL security among Brazil websites
This board ranks the Top 100 websites in Brazil (generic TLDs attributed by company HQ) by daily TLS health score.