CertH certH

Websites with A+ SSL Ratings (2026)

Scanned from 20,000 top global websites · Updated 2026-11-04

12,269Domains
32%A+ share (3944)
94.8Avg score
↑ 116Improved this month
#DomainGradeScore30d trendΔTLSIssuerHSTSExpires
751detik.comA+100—–TLS1.3Thawte TLS RSA CA G149 d
752detroitnews.comA+100—–TLS1.3Let's Encrypt56 d
753deusto.esA+100—–TLS1.3ZeroSSL ECC DV SSL CA 269 d
754deutsche-boerse.comA+100—–TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA172 d
755deutsche-digitale-bibliothek.deA+100—–TLS1.3GEANT TLS RSA 193 d
756deutschepost.deA+100—–TLS1.3DPDHL Global TLS CA - I552 d
757deutschland.deA+100—–TLS1.3RapidSSL TLS RSA CA G1180 d
758deutschlandfunk.deA+100—–TLS1.3Google Trust Services64 d
759deutschlandfunkkultur.deA+100—–TLS1.3Google Trust Services68 d
760deutschlandradio.deA+100—–TLS1.3Google Trust Services63 d
761devin.aiA+100—–TLS1.3Let's Encrypt38 d
762dewalt.comA+100—–TLS1.3Let's Encrypt44 d
763dfb.deA+100—–TLS1.3Let's Encrypt42 d
764dfds.comA+100—–TLS1.3Amazon RSA 2048 M0475 d
765dg-datenschutz.deA+100—–TLS1.3Let's Encrypt84 d
766dgb.deA+100—–TLS1.3Let's Encrypt57 d
767dgt.esA+100—–TLS1.3Let's Encrypt36 d
768dhl.deA+100—–TLS1.3DPDHL Global TLS CA - I580 d
769dhs.govA+100—–TLS1.3GeoTrust TLS RSA CA G1191 d
770di.seA+100—–TLS1.3Google Trust Services58 d
771diabetes.org.ukA+100—–TLS1.3Let's Encrypt44 d
772diamond.jpA+100—–TLS1.3GlobalSign GCC R3 DV TLS CA 2020108 d
773diariodarepublica.ptA+100—–TLS1.3Thawte TLS RSA CA G1155 d
774diba.catA+100—–TLS1.3GeoTrust TLS RSA CA G145 d
775dice.comA+100—–TLS1.3Amazon RSA 2048 M01186 d
776diepresse.comA+100—–TLS1.3Go Daddy Secure Certificate Authority - G245 d
777digg.comA+100—–TLS1.3Google Trust Services69 d
778digi24.roA+100—–TLS1.3Go Daddy Secure Certificate Authority - G246 d
779digital.govA+100—–TLS1.3Let's Encrypt58 d
780digitalcameraworld.comA+100—–TLS1.3Let's Encrypt79 d
781digitale-sammlungen.deA+100—–TLS1.3GEANT TLS ECC 1179 d
782digitalmarketinginstitute.comA+100—–TLS1.3Amazon RSA 2048 M01187 d
783digitalspy.comA+100—–TLS1.3GlobalSign Atlas R3 DV TLS CA 2025 Q492 d
784dihk.deA+100—–TLS1.3Let's Encrypt73 d
785disasterassistance.govA+100—–TLS1.3DigiCert Global G3 TLS ECC SHA384 2020 CA197 d
786discord.comA+100TLS1.3Google Trust Services82 d
787discourse.orgA+100—–TLS1.3Amazon RSA 2048 M04156 d
788discoverasr.comA+100—–TLS1.3GeoTrust TLS RSA CA G1151 d
789discoverwildlife.comA+100—–TLS1.3Let's Encrypt65 d
790discoveryplus.comA+100—–TLS1.3Amazon RSA 2048 M01119 d
791dish.comA+100—–TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA1163 d
792dispatch.comA+100—–TLS1.3Let's Encrypt85 d
793distractify.comA+100—–TLS1.3Amazon RSA 2048 M01127 d
794djangoproject.comA+100—–TLS1.3Let's Encrypt81 d
795dji.comA+100—–TLS1.3Amazon RSA 2048 M01127 d
796dkfz.deA+100—–TLS1.3Let's Encrypt31 d
797dlrg.deA+100—–TLS1.3Amazon RSA 2048 M0494 d
798dmi.dkA+100—–TLS1.3Let's Encrypt63 d
799dmv.orgA+100——TLS1.3Amazon RSA 2048 M0128 d
800dna.frA+100—–TLS1.3GlobalSign RSA OV SSL CA 201894 d
16 / 79

Track grade changes for your domains

Sign up free, watch your domains and get alerted the moment a grade drops.

FAQ

How do I get an A+ rating?

Enable TLS 1.3 with strong ciphers, ensure full forward secrecy (PFS), deploy HSTS correctly, and use a valid certificate from a trusted CA.

Why is my score low even with a valid certificate?

The score evaluates the whole TLS configuration — legacy protocols, weak ciphers or missing HSTS all reduce it.