Government SSL Security Ranking 2026 — Top Websites by Grade

Name: Government SSL Leaderboard dataset
Creator: CertH

Scanned from 20,000 top global websites · Updated 2026-11-03

12,267Domains

21%A+ share (2547)

94.1Avg score

↑ 30Improved this month

#	Domain	Grade	Score	30d trend	Δ	TLS	Issuer	HSTS	Expires
1	americorps.gov	A	100	—	—	TLS1.3	GeoTrust TLS RSA CA G1	—	93 d
2	aph.gov.au	A	100	—	—	TLS1.3	GeoTrust TLS RSA CA G1	—	118 d
3	australia.gov.au	A	100	—	—	TLS1.3	GlobalSign Atlas R46 DV TLS CA 2026 Q3	—	0 d
4	azdhs.gov	A	100	—	—	TLS1.3	Amazon RSA 2048 M04	—	41 d
5	azleg.gov	A	100	—	—	TLS1.3	Go Daddy Secure Certificate Authority - G2	—	37 d
6	benefits.gov	A	100	—	—	TLS1.3	Let's Encrypt	—	7 d
7	campaign.gov.uk	A	100	—	—	TLS1.3	Let's Encrypt	—	0 d
8	cbd.int	A	100	—	—	TLS1.3	Amazon RSA 2048 M04	—	53 d
9	chicago.gov	A	100	—	—	TLS1.3	Let's Encrypt	—	6 d
10	companieshouse.gov.uk	A	100	—	—	TLS1.3	GlobalSign Atlas R3 OV TLS CA 2026 Q1	—	0 d
11	cpsc.gov	A	100	—	—	TLS1.3	GeoTrust TLS RSA CA G1	—	65 d
12	digital.go.jp	A	100	—	—	TLS1.3	GeoTrust TLS RSA CA G1	—	127 d
13	dni.gov	A	100	—	—	TLS1.3	GeoTrust TLS RSA CA G1	—	9 d
14	doleta.gov	A	100	—	—	TLS1.3	Let's Encrypt	—	0 d
15	ecfr.gov	A	100	—	—	TLS1.3	Amazon RSA 2048 M04	—	99 d
16	eia.gov	A	100	—	—	TLS1.3	Amazon RSA 2048 M01	—	82 d
17	fbo.gov	A	100	—	—	TLS1.3	DigiCert Global G2 TLS RSA SHA256 2020 CA1	—	117 d
18	federalregister.gov	A	100	—	–	TLS1.3	Amazon RSA 2048 M04	—	48 d
19	fnal.gov	A	100	—	—	TLS1.3	DigiCert Global G2 TLS RSA SHA256 2020 CA1	—	31 d
20	food.gov.uk	A	100	—	—	TLS1.3	GlobalSign Atlas R3 OV TLS CA 2026 Q2	—	68 d
21	ga.gov	A	100	—	—	TLS1.3	DigiCert Global G2 TLS RSA SHA256 2020 CA1	—	0 d
22	governo.it	A	100	—	—	TLS1.3	DigiCert Global G3 TLS ECC SHA384 2020 CA1	—	29 d
23	henan.gov.cn	A	100	—	—	TLS1.3	WoTrus RSA OV SSL CA 2	—	97 d
24	hmrc.gov.uk	A	100	—	—	TLS1.3	Amazon RSA 2048 M01	—	50 d
25	ilga.gov	A	100	—	—	TLS1.3	Sectigo Public Server Authentication CA OV R40	—	51 d
26	immi.gov.au	A	100	—	—	TLS1.3	DigiCert Global G3 TLS ECC SHA384 2020 CA1	—	125 d
27	lacity.gov	A	100	—	—	TLS1.3	DigiCert Global G3 TLS ECC SHA384 2020 CA1	—	114 d
28	malegislature.gov	A	100	—	—	TLS1.3	DigiCert Global G2 TLS RSA SHA256 2020 CA1	—	24 d
29	metoffice.gov.uk	A	100	—	—	TLS1.3	DigiCert Global G3 TLS ECC SHA384 2020 CA1		122 d
30	mi.gov	A	100	—	—	TLS1.3	GeoTrust TLS RSA CA G1	—	110 d
31	michigan.gov	A	100	—	—	TLS1.3	GeoTrust TLS RSA CA G1	—	110 d
32	msz.gov.pl	A	100	—	—	TLS1.3	GlobalSign Atlas R46 DV TLS CA 2026 Q3	—	34 d
33	nationalcrimeagency.gov.uk	A	100	—	—	TLS1.3	GeoTrust TLS RSA CA G1	—	101 d
34	nj.gov	A	100	—	—	TLS1.3	GlobalSign Atlas R46 DV TLS CA 2026 Q3	—	26 d
35	ntia.gov	A	100	—	—	TLS1.3	DigiCert Global G2 TLS RSA SHA256 2020 CA1	—	71 d
36	ny.gov	A	100	—	—	TLS1.3	GlobalSign GCC R46 OV TLS CA 2025		102 d
37	odni.gov	A	100	—	—	TLS1.3	GeoTrust TLS RSA CA G1	—	9 d
38	oecd.org	A	100	—	—	TLS1.3	DigiCert Global G2 TLS RSA SHA256 2020 CA1	—	14 d
39	ohio.gov	A	100	—	—	TLS1.3	Amazon RSA 2048 M01	—	126 d
40	ohiodnr.gov	A	100	—	—	TLS1.3	Amazon RSA 2048 M04	—	36 d
41	ornl.gov	A	100	—	—	TLS1.3	Let's Encrypt		5 d
42	phila.gov	A	100	—	—	TLS1.3	Amazon RSA 2048 M04	—	89 d
43	portland.gov	A	100	—	—	TLS1.3	Let's Encrypt		0 d
44	portlandoregon.gov	A	100	—	—	TLS1.3	GeoTrust TLS RSA CA G1	—	95 d
45	president.gov.ua	A	100	—	—	TLS1.3	Let's Encrypt	—	8 d
46	qld.gov.au	A	100	—	—	TLS1.3	Amazon RSA 2048 M01	—	104 d
47	sandiegocounty.gov	A	100	—	—	TLS1.3	DigiCert Global G2 TLS RSA SHA256 2020 CA1	—	95 d
48	scotland.gov.uk	A	100	—	—	TLS1.3	Let's Encrypt	—	0 d
49	service.gov.uk	A	100	—	—	TLS1.3	GlobalSign RSA OV SSL CA 2018	—	56 d
50	sic.gov.co	A	100	—	—	TLS1.3	GlobalSign RSA OV SSL CA 2018	—	78 d

1 / 10

Track grade changes for your domains

FAQ

How often is the SSL leaderboard updated?

Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.

How is the SSL grade calculated?

Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.

What does an A+ SSL rating mean?

A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.

Methodology

CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are weighted into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.

What is an SSL grade?

An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.

Why track certificate health over time?

Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.

SSL security in the Government industry

Government websites handle sensitive data, and TLS configuration quality directly affects user trust and compliance audits. This board ranks the industry's leading sites by daily SSL grade for benchmarking and ongoing monitoring.