Websites with A SSL Ratings (2026)
Scanned from 20,000 top global websites · Updated 2026-11-07
12,269Domains
32%A+ share (3943)
94.8Avg score
↑ 114Improved this month
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 7001 | amadeus.com | A | 90 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 15 d | |
| 7002 | ameli.fr | A | 90 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | — | 26 d |
| 7003 | anwb.nl | A | 90 | — | – | TLS1.3 | Let's Encrypt | 22 d | |
| 7004 | aphp.fr | A | 90 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | — | 14 d |
| 7005 | baltimoresun.com | A | 90 | — | – | TLS1.3 | Let's Encrypt | — | 26 d |
| 7006 | btselem.org | A | 90 | — | – | TLS1.3 | Let's Encrypt | — | 18 d |
| 7007 | buzznet.com | A | 90 | — | – | TLS1.3 | Let's Encrypt | — | 27 d |
| 7008 | ceicdata.com | A | 90 | — | – | TLS1.3 | Corporation Service Company RSA OV SSL CA 2 | — | 26 d |
| 7009 | chicagotribune.com | A | 90 | — | – | TLS1.3 | Let's Encrypt | — | 26 d |
| 7010 | courant.com | A | 90 | — | – | TLS1.3 | Let's Encrypt | — | 26 d |
| 7011 | cowboystatedaily.com | A | 90 | — | – | TLS1.3 | Let's Encrypt | — | 20 d |
| 7012 | craphound.com | A | 90 | — | – | TLS1.3 | Let's Encrypt | 17 d | |
| 7013 | dailypress.com | A | 90 | — | – | TLS1.3 | Let's Encrypt | — | 26 d |
| 7014 | datenschutz-generator.de | A | 90 | — | – | TLS1.3 | Let's Encrypt | — | 27 d |
| 7015 | disney.com | A | 90 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | — | 14 d |
| 7016 | distrowatch.com | A | 90 | — | – | TLS1.3 | Let's Encrypt | — | 25 d |
| 7017 | edri.org | A | 90 | — | – | TLS1.3 | Let's Encrypt | — | 24 d |
| 7018 | etracker.de | A | 90 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | — | 13 d |
| 7019 | fdic.gov | A | 90 | — | – | TLS1.3 | Let's Encrypt | 27 d | |
| 7020 | financialexpress.com | A | 90 | — | – | TLS1.3 | GlobalSign RSA OV SSL CA 2018 | 20 d | |
| 7021 | folkhalsomyndigheten.se | A | 90 | — | – | TLS1.3 | Telia Server CA v3 | 21 d | |
| 7022 | freehostia.com | A | 90 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | — | 23 d |
| 7023 | gencat.cat | A | 90 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | — | 162 d |
| 7024 | geni.us | A | 90 | — | – | TLS1.3 | Let's Encrypt | — | 22 d |
| 7025 | gofile.io | A | 90 | — | – | TLS1.3 | Let's Encrypt | 21 d | |
| 7026 | haodf.com | A | 90 | — | – | TLS1.3 | GlobalSign RSA OV SSL CA 2018 | — | 21 d |
| 7027 | html.it | A | 90 | — | – | TLS1.3 | Let's Encrypt | — | 26 d |
| 7028 | humankinetics.com | A | 90 | — | – | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | — | 24 d |
| 7029 | islandnet.com | A | 90 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | — | 20 d |
| 7030 | jvc.com | A | 90 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | — | 26 d |
| 7031 | kempinski.com | A | 90 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | — | 15 d |
| 7032 | kenwood.com | A | 90 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | — | 23 d |
| 7033 | klicksafe.de | A | 90 | — | – | TLS1.3 | Starfield TLS Intermediate CA DV - R1v1 | 25 d | |
| 7034 | lnlljt.com | A | 90 | — | – | TLS1.3 | ZeroSSL ECC DV SSL CA 2 | — | 26 d |
| 7035 | mcall.com | A | 90 | — | – | TLS1.3 | Let's Encrypt | 26 d | |
| 7036 | mediatemple.net | A | 90 | — | – | TLS1.3 | Let's Encrypt | — | 27 d |
| 7037 | millenniumhotels.com | A | 90 | — | – | TLS1.3 | Entrust OV TLS Issuing RSA CA 2 | — | 26 d |
| 7038 | mindomo.com | A | 90 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 25 d | |
| 7039 | naver.com | A | 90 | — | – | TLS1.3 | Let's Encrypt | 25 d | |
| 7040 | newgrounds.com | A | 90 | — | – | TLS1.3 | Let's Encrypt | — | 13 d |
| 7041 | nydailynews.com | A | 90 | — | – | TLS1.3 | Let's Encrypt | — | 26 d |
| 7042 | obsproject.com | A | 90 | — | – | TLS1.3 | Let's Encrypt | 19 d | |
| 7043 | ocregister.com | A | 90 | — | – | TLS1.3 | Let's Encrypt | 26 d | |
| 7044 | ov24.ru | A | 90 | — | – | TLS1.3 | Let's Encrypt | — | 19 d |
| 7045 | peterlang.com | A | 90 | — | – | TLS1.3 | Let's Encrypt | — | 24 d |
| 7046 | photozou.jp | A | 90 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | — | 15 d |
| 7047 | pilotonline.com | A | 90 | — | – | TLS1.3 | Let's Encrypt | — | 26 d |
| 7048 | pluralistic.net | A | 90 | — | – | TLS1.3 | Let's Encrypt | 17 d | |
| 7049 | purevolume.com | A | 90 | — | – | TLS1.3 | Let's Encrypt | — | 27 d |
| 7050 | qemu.org | A | 90 | — | – | TLS1.3 | Let's Encrypt | — | 22 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How do I get an A+ rating?
Enable TLS 1.3 with strong ciphers, ensure full forward secrecy (PFS), deploy HSTS correctly, and use a valid certificate from a trusted CA.
Why is my score low even with a valid certificate?
The score evaluates the whole TLS configuration — legacy protocols, weak ciphers or missing HSTS all reduce it.