Websites with A SSL Ratings (2026)
Scanned from 20,000 top global websites · Updated 2026-11-07
12,269Domains
32%A+ share (3943)
94.8Avg score
↑ 114Improved this month
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 5001 | citi.com | A | 95 | — | – | TLS1.2 | DigiCert EV RSA CA G2 | — | 155 d |
| 5002 | citibank.com | A | 95 | — | – | TLS1.2 | DigiCert EV RSA CA G2 | — | 155 d |
| 5003 | citigroup.com | A | 95 | — | – | TLS1.2 | DigiCert EV RSA CA G2 | — | 155 d |
| 5004 | citizensinformation.ie | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 154 d |
| 5005 | citrix.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 96 d | |
| 5006 | clan.su | A | 95 | — | – | TLS1.2 | GlobalSign GCC R6 AlphaSSL CA 2025 | — | 36 d |
| 5007 | clarks.com | A | 95 | — | – | TLS1.2 | ZeroSSL RSA DV SSL CA 2 | 58 d | |
| 5008 | clck.ru | A | 95 | — | – | TLS1.2 | GlobalSign GCC R46 DV TLS CA 2025 | — | 125 d |
| 5009 | cleveland.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 121 d |
| 5010 | cleveland19.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 84 d | |
| 5011 | clients.site | A | 95 | — | – | TLS1.2 | GlobalSign GCC R46 OV TLS CA 2025 | — | 95 d |
| 5012 | clover.com | A | 95 | — | – | TLS1.2 | RapidSSL TLS RSA CA G1 | 189 d | |
| 5013 | clubrunner.ca | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 87 d |
| 5014 | cmail19.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 110 d |
| 5015 | cmail20.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 110 d |
| 5016 | cmpassport.com | A | 95 | — | – | TLS1.2 | TrustAsia OV TLS RSA CA 2024 | — | 77 d |
| 5017 | cmu.ac.th | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA DV R36 | 177 d | |
| 5018 | cmu.edu | A | 95 | — | – | TLS1.2 | InCommon RSA Server CA 2 | 73 d | |
| 5019 | cnblogs.com | A | 95 | — | – | TLS1.2 | Encryption Everywhere DV TLS CA - G2 | 96 d | |
| 5020 | cnki.net | A | 95 | — | – | TLS1.2 | GlobalSign RSA OV SSL CA 2018 | — | 123 d |
| 5021 | cnppri.com | A | 95 | — | — | TLS1.2 | GeoTrust TLS RSA CA G1 | — | 0 d |
| 5022 | cnr.it | A | 95 | — | — | TLS1.2 | GEANT TLS RSA 1 | — | 15 d |
| 5023 | coca-cola.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 69 d | |
| 5024 | coca-colacompany.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 128 d | |
| 5025 | cochrane.org | A | 95 | — | – | TLS1.2 | GeoTrust TLS RSA CA G1 | — | 46 d |
| 5026 | coggle.it | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 153 d | |
| 5027 | colorado.gov | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 97 d |
| 5028 | coloradocollege.edu | A | 95 | — | – | TLS1.2 | InCommon Intermediate CA - OVG2C | 98 d | |
| 5029 | comcast.net | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | — | 63 d |
| 5030 | commerzbank.de | A | 95 | — | – | TLS1.2 | GlobalSign GCC R46 OV TLS CA 2025 | — | 140 d |
| 5031 | comparably.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 135 d |
| 5032 | computerra.ru | A | 95 | — | – | TLS1.2 | Let's Encrypt | 70 d | |
| 5033 | comvac-asia.com | A | 95 | — | – | TLS1.2 | Encryption Everywhere DV TLS CA - G2 | — | 86 d |
| 5034 | congreso.es | A | 95 | — | – | TLS1.2 | GEANT TLS RSA 1 | 97 d | |
| 5035 | connect.mail.ru | A | 95 | — | – | TLS1.2 | HARICA DV TLS RSA | — | 93 d |
| 5036 | control-webpanel.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | 36 d | |
| 5037 | convertkit.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 101 d |
| 5038 | cookinglight.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 137 d |
| 5039 | copyscape.com | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA DV R36 | — | 36 d |
| 5040 | corel.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 145 d | |
| 5041 | coreldraw.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 145 d | |
| 5042 | cornwalllive.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 58 d |
| 5043 | correios.com.br | A | 95 | — | – | TLS1.2 | Thawte TLS RSA CA G1 | 147 d | |
| 5044 | corriere.it | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 60 d |
| 5045 | corrieredellosport.it | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 32 d |
| 5046 | couchsurfing.org | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 120 d |
| 5047 | counseling.org | A | 95 | — | – | TLS1.2 | Let's Encrypt | 79 d | |
| 5048 | courrierinternational.com | A | 95 | — | – | TLS1.2 | GlobalSign Atlas R3 DV TLS CA 2025 Q4 | 103 d | |
| 5049 | coventrytelegraph.net | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 58 d |
| 5050 | covers.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 84 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How do I get an A+ rating?
Enable TLS 1.3 with strong ciphers, ensure full forward secrecy (PFS), deploy HSTS correctly, and use a valid certificate from a trusted CA.
Why is my score low even with a valid certificate?
The score evaluates the whole TLS configuration — legacy protocols, weak ciphers or missing HSTS all reduce it.