CertH certH

Top Canada Websites SSL Security Ranking (2026) — Best Sites by Grade

Scanned from 20,000 top global websites · Updated 2026-11-03

12,267Domains
21%A+ share (2547)
94.1Avg score
↑ 30Improved this month
#DomainGradeScore30d trendΔTLSIssuerHSTSExpires
1bestbuy.caA100——TLS1.3DigiCert Global G3 TLS ECC SHA384 2020 CA1—123 d
2cancer.caA100——TLS1.3Go Daddy Secure Certificate Authority - G2144 d
3citynews.caA100——TLS1.3GeoTrust TLS RSA CA G1—129 d
4citytvplus.caA100——TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA138 d
5cps.caA100——TLS1.3Let's Encrypt—3 d
6crave.caA100——TLS1.3Entrust OV TLS Issuing ECC CA 2—131 d
7ctv.caA100——TLS1.3Entrust OV TLS Issuing ECC CA 2—131 d
8homedepot.caA100——TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA1—107 d
9huffingtonpost.caA100——TLS1.3GlobalSign Atlas R3 DV TLS CA 2025 Q4—22 d
10metronews.caA100——TLS1.3Amazon RSA 2048 M04—100 d
11nfb.caA100——TLS1.3Let's Encrypt—0 d
12ourcommons.caA100——TLS1.3Thawte TLS RSA CA G1—130 d
13parl.caA100——TLS1.3Thawte TLS RSA CA G1116 d
14pinterest.caA100——TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA1—116 d
15polymtl.caA100——TLS1.3GlobalSign Atlas R46 DV TLS CA 2026 Q3—20 d
16python.caA100——TLS1.3Let's Encrypt—30 d
17saskatchewan.caA100——TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA1—34 d
18shaw.caA100——TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA1—19 d
19thecanadianencyclopedia.caA100——TLS1.3Amazon RSA 2048 M04—15 d
20ualberta.caA100——TLS1.3GlobalSign RSA OV SSL CA 2018—39 d
21uqam.caA100——TLS1.3Amazon RSA 2048 M01—10 d
22uquebec.caA100——TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA1—137 d
23uregina.caA100——TLS1.3Let's Encrypt—1 d
24uwindsor.caA100——TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA1—129 d
25uwinnipeg.caA100——TLS1.3GlobalSign RSA OV SSL CA 2018—16 d
26yellowpages.caA100——TLS1.3Amazon RSA 2048 M04—92 d
27yorku.caA100——TLS1.3GlobalSign GCC R46 OV TLS CA 2025—136 d
28amazon.caA+100——TLS1.3Amazon RSA 2048 M0169 d
29camh.caA+100——TLS1.3DigiCert Global G3 TLS ECC SHA384 2020 CA193 d
30canadapost-postescanada.caA+100——TLS1.3Entrust OV TLS Issuing RSA CA 271 d
31canadapost.caA+100——TLS1.3Entrust OV TLS Issuing RSA CA 271 d
32cbc.caA+100——TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA180 d
33concordia.caA+100——TLS1.3GlobalSign RSA OV SSL CA 201837 d
34dal.caA+100——TLS1.3RapidSSL TLS RSA CA G141 d
35eventbrite.caA+100——TLS1.3Amazon RSA 2048 M0455 d
36exclaim.caA+100——TLS1.3Let's Encrypt7 d
37healthlinkbc.caA+100——TLS1.3Entrust EV TLS Issuing RSA CA 220 d
38novascotia.caA+100——TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA138 d
39penguinrandomhouse.caA+100——TLS1.3Let's Encrypt23 d
40quebec.caA+100——TLS1.3Amazon RSA 2048 M04110 d
41tripadvisor.caA+100——TLS1.3Amazon RSA 2048 M04122 d
42ubc.caA+100——TLS1.3Amazon RSA 2048 M04134 d
43utoronto.caA+100——TLS1.3Let's Encrypt18 d
44walmart.caA+100——TLS1.3GlobalSign GCC R46 OV TLS CA 202596 d
45yelp.caA+100——TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA12 d
46youradchoices.caA+100——TLS1.3Let's Encrypt0 d
47globalnews.caA98——TLS1.3Let's Encrypt0 d
48mcmaster.caA98——TLS1.3Sectigo Public Server Authentication CA EV R36—0 d
49ottawa.caA98——TLS1.3Entrust OV TLS Issuing RSA CA 2—0 d
50realtor.caA98——TLS1.3GoDaddy TLS Intermediate CA DV - R1v1—120 d
1 / 3

Track grade changes for your domains

Sign up free, watch your domains and get alerted the moment a grade drops.

FAQ

How often is the SSL leaderboard updated?

Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.

How is the SSL grade calculated?

Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.

What does an A+ SSL rating mean?

A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.

Methodology

CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are weighted into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.

What is an SSL grade?

An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.

Why track certificate health over time?

Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.

SSL security among Canada websites

This board ranks the Top 100 websites in Canada (generic TLDs attributed by company HQ) by daily TLS health score.