CertH certH

Websites with A SSL Ratings (2026)

Scanned from 20,000 top global websites · Updated 2026-11-07

12,269Domains
32%A+ share (3943)
94.8Avg score
↑ 114Improved this month
#DomainGradeScore30d trendΔTLSIssuerHSTSExpires
7001amadeus.comA90—–TLS1.3Sectigo Public Server Authentication CA OV R3615 d
7002ameli.frA90—–TLS1.3Sectigo Public Server Authentication CA OV R36—26 d
7003anwb.nlA90—–TLS1.3Let's Encrypt22 d
7004aphp.frA90—–TLS1.3Sectigo Public Server Authentication CA DV R36—14 d
7005baltimoresun.comA90—–TLS1.3Let's Encrypt—26 d
7006btselem.orgA90—–TLS1.3Let's Encrypt—18 d
7007buzznet.comA90—–TLS1.3Let's Encrypt—27 d
7008ceicdata.comA90—–TLS1.3Corporation Service Company RSA OV SSL CA 2—26 d
7009chicagotribune.comA90—–TLS1.3Let's Encrypt—26 d
7010courant.comA90—–TLS1.3Let's Encrypt—26 d
7011cowboystatedaily.comA90—–TLS1.3Let's Encrypt—20 d
7012craphound.comA90—–TLS1.3Let's Encrypt17 d
7013dailypress.comA90—–TLS1.3Let's Encrypt—26 d
7014datenschutz-generator.deA90—–TLS1.3Let's Encrypt—27 d
7015disney.comA90—–TLS1.3Sectigo Public Server Authentication CA OV R36—14 d
7016distrowatch.comA90—–TLS1.3Let's Encrypt—25 d
7017edri.orgA90—–TLS1.3Let's Encrypt—24 d
7018etracker.deA90—–TLS1.3Sectigo Public Server Authentication CA OV R36—13 d
7019fdic.govA90—–TLS1.3Let's Encrypt27 d
7020financialexpress.comA90—–TLS1.3GlobalSign RSA OV SSL CA 201820 d
7021folkhalsomyndigheten.seA90—–TLS1.3Telia Server CA v321 d
7022freehostia.comA90—–TLS1.3Sectigo Public Server Authentication CA DV R36—23 d
7023gencat.catA90—–TLS1.3Sectigo Public Server Authentication CA OV R36—162 d
7024geni.usA90—–TLS1.3Let's Encrypt—22 d
7025gofile.ioA90—–TLS1.3Let's Encrypt21 d
7026haodf.comA90—–TLS1.3GlobalSign RSA OV SSL CA 2018—21 d
7027html.itA90—–TLS1.3Let's Encrypt—26 d
7028humankinetics.comA90—–TLS1.3Go Daddy Secure Certificate Authority - G2—24 d
7029islandnet.comA90—–TLS1.3Sectigo Public Server Authentication CA DV R36—20 d
7030jvc.comA90—–TLS1.3Sectigo Public Server Authentication CA OV R36—26 d
7031kempinski.comA90—–TLS1.3Sectigo Public Server Authentication CA DV R36—15 d
7032kenwood.comA90—–TLS1.3Sectigo Public Server Authentication CA OV R36—23 d
7033klicksafe.deA90—–TLS1.3Starfield TLS Intermediate CA DV - R1v125 d
7034lnlljt.comA90—–TLS1.3ZeroSSL ECC DV SSL CA 2—26 d
7035mcall.comA90—–TLS1.3Let's Encrypt26 d
7036mediatemple.netA90—–TLS1.3Let's Encrypt—27 d
7037millenniumhotels.comA90—–TLS1.3Entrust OV TLS Issuing RSA CA 2—26 d
7038mindomo.comA90—–TLS1.3Sectigo Public Server Authentication CA DV R3625 d
7039naver.comA90—–TLS1.3Let's Encrypt25 d
7040newgrounds.comA90—–TLS1.3Let's Encrypt—13 d
7041nydailynews.comA90—–TLS1.3Let's Encrypt—26 d
7042obsproject.comA90—–TLS1.3Let's Encrypt19 d
7043ocregister.comA90—–TLS1.3Let's Encrypt26 d
7044ov24.ruA90—–TLS1.3Let's Encrypt—19 d
7045peterlang.comA90—–TLS1.3Let's Encrypt—24 d
7046photozou.jpA90—–TLS1.3Sectigo Public Server Authentication CA DV R36—15 d
7047pilotonline.comA90—–TLS1.3Let's Encrypt—26 d
7048pluralistic.netA90—–TLS1.3Let's Encrypt17 d
7049purevolume.comA90—–TLS1.3Let's Encrypt—27 d
7050qemu.orgA90—–TLS1.3Let's Encrypt—22 d
141 / 142

Track grade changes for your domains

Sign up free, watch your domains and get alerted the moment a grade drops.

FAQ

How do I get an A+ rating?

Enable TLS 1.3 with strong ciphers, ensure full forward secrecy (PFS), deploy HSTS correctly, and use a valid certificate from a trusted CA.

Why is my score low even with a valid certificate?

The score evaluates the whole TLS configuration — legacy protocols, weak ciphers or missing HSTS all reduce it.