CertH certH

Websites with A+ SSL Ratings (2026)

Scanned from 20,000 top global websites · Updated 2026-11-05

12,269Domains
32%A+ share (3944)
94.8Avg score
↑ 115Improved this month
#DomainGradeScore30d trendΔTLSIssuerHSTSExpires
1951nylon.comA+100—–TLS1.3Amazon RSA 2048 M04111 d
1952nymag.comA+100—–TLS1.3GlobalSign Atlas R3 DV TLS CA 2026 Q267 d
1953nyp.orgA+100—–TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA1104 d
1954nytco.comA+100—–TLS1.3Thawte TLS RSA CA G1135 d
1955nytimes.comA+100–TLS1.3Thawte TLS RSA CA G1135 d
1956o2.co.ukA+100—–TLS1.3Thawte EV RSA CA G2154 d
1957oakley.comA+100—–TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA165 d
1958obama.orgA+100—–TLS1.3GeoTrust TLS RSA CA G1127 d
1959obdev.atA+100—–TLS1.3GeoTrust TLS RSA CA G1169 d
1960obi.deA+100—–TLS1.3Amazon RSA 2048 M01167 d
1961observer.co.ukA+100—–TLS1.3Let's Encrypt86 d
1962oceanengine.comA+100—–TLS1.3RapidSSL TLS RSA CA G175 d
1963oeamtc.atA+100—–TLS1.3Thawte TLS RSA CA G1157 d
1964oed.comA+100—–TLS1.3Amazon RSA 2048 M01151 d
1965oeko-tex.comA+100—–TLS1.3Let's Encrypt39 d
1966oetiker.chA+100—–TLS1.3Let's Encrypt45 d
1967ofgem.gov.ukA+100—–TLS1.3Let's Encrypt87 d
1968ohio.eduA+100—–TLS1.3InCommon RSA Server CA 2109 d
1969ojp.govA+100—–TLS1.3Google Trust Services52 d
1970ok.ruA+100—–TLS1.3HARICA DV TLS RSA182 d
1971oklahoma.govA+100—–TLS1.3Sectigo Public Server Authentication CA OV R3635 d
1972oklahoman.comA+100—–TLS1.3Let's Encrypt80 d
1973okmagazine.comA+100—–TLS1.3Google Trust Services82 d
1974okta.comA+100—–TLS1.3Amazon RSA 2048 M04166 d
1975oktoberfest.deA+100—–TLS1.3Let's Encrypt53 d
1976okx.comA+100—–TLS1.3GeoTrust TLS RSA CA G1175 d
1977oliverwyman.comA+100—–TLS1.3Sectigo Public Server Authentication CA OV R3687 d
1978olx.plA+100—–TLS1.3Amazon RSA 2048 M04117 d
1979olx.uaA+100—–TLS1.3Amazon RSA 2048 M01118 d
1980omgubuntu.co.ukA+100—–TLS1.3Google Trust Services65 d
1981omr.comA+100—–TLS1.3Let's Encrypt83 d
1982onb.ac.atA+100—–TLS1.3GEANT TLS RSA 1124 d
1983one.comA+100—–TLS1.3Let's Encrypt48 d
1984onefootball.comA+100—–TLS1.3GeoTrust TLS RSA CA G1116 d
1985onegreenplanet.orgA+100—–TLS1.3Google Trust Services70 d
1986onepeloton.comA+100—–TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA192 d
1987onetonline.orgA+100—–TLS1.3Sectigo Public Server Authentication CA DV R3655 d
1988online-exams.orgA+100—–TLS1.3Let's Encrypt45 d
1989onlineathens.comA+100—–TLS1.3Let's Encrypt80 d
1990onliner.byA+100—–TLS1.3GlobalSign GCC R6 AlphaSSL CA 2025108 d
1991ons.gov.ukA+100—–TLS1.3Let's Encrypt66 d
1992onsemi.comA+100—–TLS1.3GlobalSign RSA OV SSL CA 201859 d
1993onshape.comA+100—–TLS1.3Amazon RSA 2048 M0462 d
1994ontario.caA+100—–TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA1154 d
1995openai.comA+100TLS1.3Google Trust Services40 d
1996opencorporates.comA+100—–TLS1.3Google Trust Services60 d
1997openculture.comA+100—–TLS1.3SSL.com TLS Issuing RSA CA R1184 d
1998opengameart.orgA+100—–TLS1.3Let's Encrypt45 d
1999openid.netA+100—–TLS1.3Let's Encrypt59 d
2000openlearning.comA+100—–TLS1.3GeoTrust TLS RSA CA G1117 d
40 / 79

Track grade changes for your domains

Sign up free, watch your domains and get alerted the moment a grade drops.

FAQ

How do I get an A+ rating?

Enable TLS 1.3 with strong ciphers, ensure full forward secrecy (PFS), deploy HSTS correctly, and use a valid certificate from a trusted CA.

Why is my score low even with a valid certificate?

The score evaluates the whole TLS configuration — legacy protocols, weak ciphers or missing HSTS all reduce it.