Websites with A+ SSL Ratings (2026)
Scanned from 20,000 top global websites · Updated 2026-11-06
12,269Domains
32%A+ share (3944)
94.8Avg score
↑ 115Improved this month
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 2551 | ssh.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 91 d | |
| 2552 | ssllabs.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 94 d | |
| 2553 | stackblitz.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 118 d | |
| 2554 | stadt-zuerich.ch | A+ | 100 | — | – | TLS1.3 | DigiCert QV TLS ICA G1 | 65 d | |
| 2555 | stadtradeln.de | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 72 d | |
| 2556 | stan.store | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 62 d | |
| 2557 | stanfordchildrens.org | A+ | 100 | — | – | TLS1.3 | InCommon RSA OV SSL CA 3 | 48 d | |
| 2558 | starbucks.com | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV E36 | 189 d | |
| 2559 | starfall.com | A+ | 100 | — | – | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | 48 d | |
| 2560 | starlink.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 85 d | |
| 2561 | starnewsonline.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 77 d | |
| 2562 | startpage.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 175 d | |
| 2563 | startrek.com | A+ | 100 | — | — | TLS1.3 | Let's Encrypt | 0 d | |
| 2564 | starz.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 138 d | |
| 2565 | statefarm.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 153 d | |
| 2566 | statesmanjournal.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 77 d | |
| 2567 | statista.com | A+ | 100 | – | TLS1.3 | Amazon ECDSA 384 M01 | 195 d | ||
| 2568 | statmuse.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 99 d | |
| 2569 | statueofliberty.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 88 d | |
| 2570 | steinberg.net | A+ | 100 | — | – | TLS1.3 | GlobalSign GCC R6 AlphaSSL CA 2025 | 41 d | |
| 2571 | stellantis.com | A+ | 100 | — | – | TLS1.3 | GandiCert | 155 d | |
| 2572 | stellarinfo.com | A+ | 100 | — | – | TLS1.3 | DigiCert EV RSA CA G2 | 146 d | |
| 2573 | stephenwolfram.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 80 d | |
| 2574 | stepstone.de | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 177 d | |
| 2575 | stitchfix.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 155 d | |
| 2576 | stltoday.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 87 d | |
| 2577 | stocktitan.net | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 78 d | |
| 2578 | stopbullying.gov | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 46 d | |
| 2579 | store.steampowered.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 74 d | |
| 2580 | storyblok.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 171 d | |
| 2581 | straightdope.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 114 d | |
| 2582 | straitstimes.com | A+ | 100 | — | – | TLS1.3 | Amazon ECDSA 256 M04 | 133 d | |
| 2583 | strasbourg.eu | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 48 d | |
| 2584 | stratechery.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 29 d | |
| 2585 | strategy-business.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 65 d | |
| 2586 | strikingly.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 70 d | |
| 2587 | stripe.com | A+ | 100 | – | TLS1.3 | DigiCert G5 TLS ECC SHA384 2021 CA1 | 185 d | ||
| 2588 | stryker.com | A+ | 100 | — | – | TLS1.3 | GlobalSign GCC R46 OV TLS CA 2025 | 175 d | |
| 2589 | studentaid.gov | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 157 d | |
| 2590 | studentbeans.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 116 d | |
| 2591 | studiobinder.com | A+ | 100 | — | – | TLS1.3 | SSL.com TLS Issuing RSA CA R1 | 117 d | |
| 2592 | stuff.co.nz | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 135 d | |
| 2593 | substack.com | A+ | 100 | TLS1.3 | Google Trust Services | 43 d | |||
| 2594 | success.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 78 d | |
| 2595 | sucuri.net | A+ | 100 | — | – | TLS1.3 | GoDaddy TLS Intermediate CA DV - R1v1 | 146 d | |
| 2596 | suedkurier.de | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 167 d | |
| 2597 | summitracing.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 92 d | |
| 2598 | sumup.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 85 d | |
| 2599 | sunderland.ac.uk | A+ | 100 | — | – | TLS1.3 | SSL.com TLS Issuing RSA CA R1 | 196 d | |
| 2600 | supabase.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 34 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How do I get an A+ rating?
Enable TLS 1.3 with strong ciphers, ensure full forward secrecy (PFS), deploy HSTS correctly, and use a valid certificate from a trusted CA.
Why is my score low even with a valid certificate?
The score evaluates the whole TLS configuration — legacy protocols, weak ciphers or missing HSTS all reduce it.