Websites with B SSL Ratings (2026)
Scanned from 20,000 top global websites · Updated 2026-11-04
12,267Domains
21%A+ share (2547)
94.1Avg score
↑ 30Improved this month
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 301 | 3ds.com | B | 80 | — | — | TLS1.3 | Amazon RSA 2048 M04 | 0 d | |
| 302 | amazon.science | B | 80 | — | — | TLS1.3 | Amazon RSA 2048 M04 | 0 d | |
| 303 | api.whatsapp.com | B | 80 | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 5 d | ||
| 304 | astellas.com | B | 80 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 0 d |
| 305 | autismspeaks.org | B | 80 | — | — | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q2 | — | 0 d |
| 306 | brainpop.com | B | 80 | — | — | TLS1.3 | Certainly Intermediate R1 | — | 0 d |
| 307 | ca.gov | B | 80 | — | — | TLS1.3 | GeoTrust TLS RSA CA G1 | 0 d | |
| 308 | caesars.com | B | 80 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 0 d |
| 309 | canaltech.com.br | B | 80 | — | — | TLS1.3 | Thawte TLS RSA CA G1 | 0 d | |
| 310 | canon.jp | B | 80 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 0 d |
| 311 | cartercenter.org | B | 80 | — | — | TLS1.3 | GeoTrust TLS RSA CA G1 | 0 d | |
| 312 | cdp.net | B | 80 | — | — | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 0 d |
| 313 | cofc.edu | B | 80 | — | — | TLS1.3 | InCommon RSA Server CA 2 | — | 0 d |
| 314 | containerstore.com | B | 80 | — | — | TLS1.3 | Certainly Intermediate R1 | 0 d | |
| 315 | earthhour.org | B | 80 | — | — | TLS1.3 | Let's Encrypt | 0 d | |
| 316 | escrow.com | B | 80 | — | — | TLS1.3 | Certainly Intermediate R1 | 0 d | |
| 317 | eugdpr.org | B | 80 | — | — | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | — | 0 d |
| 318 | facebook.de | B | 80 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 0 d |
| 319 | fastly.com | B | 80 | — | — | TLS1.3 | Certainly Intermediate R1 | 0 d | |
| 320 | fb.com | B | 80 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 0 d |
| 321 | fb.watch | B | 80 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 0 d |
| 322 | fbcdn.net | B | 80 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 0 d |
| 323 | flyfrontier.com | B | 80 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 0 d | |
| 324 | fontsquirrel.com | B | 80 | — | — | TLS1.3 | Let's Encrypt | — | 0 d |
| 325 | frick.org | B | 80 | — | — | TLS1.3 | Certainly Intermediate R1 | 0 d | |
| 326 | glitch.com | B | 80 | — | — | TLS1.3 | Certainly Intermediate R1 | — | 0 d |
| 327 | hyperallergic.com | B | 80 | — | — | TLS1.3 | Certainly Intermediate R1 | — | 0 d |
| 328 | iberia.com | B | 80 | — | — | TLS1.3 | GlobalSign RSA OV SSL CA 2018 | 0 d | |
| 329 | instagr.am | B | 80 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 0 d |
| 330 | instagram.com | B | 80 | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 7 d | ||
| 331 | instructure.com | B | 80 | — | — | TLS1.3 | Certainly Intermediate R1 | 0 d | |
| 332 | intcomedical.com | B | 80 | — | — | TLS1.3 | Let's Encrypt | 0 d | |
| 333 | jdsupra.com | B | 80 | — | — | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | 0 d | |
| 334 | leica-geosystems.com | B | 80 | — | — | TLS1.3 | GeoTrust TLS RSA CA G1 | 0 d | |
| 335 | m.me | B | 80 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 0 d |
| 336 | manualslib.com | B | 80 | — | — | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | — | 0 d |
| 337 | marinabaysands.com | B | 80 | — | — | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 0 d |
| 338 | messenger.com | B | 80 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 0 d | |
| 339 | meta.com | B | 80 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 0 d | |
| 340 | mgmresorts.com | B | 80 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 0 d |
| 341 | nordstrom.com | B | 80 | — | — | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 0 d | |
| 342 | nordstromrack.com | B | 80 | — | — | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 0 d | |
| 343 | nylas.com | B | 80 | — | — | TLS1.3 | Certainly Intermediate R1 | 0 d | |
| 344 | obama.org | B | 80 | — | — | TLS1.3 | GeoTrust TLS RSA CA G1 | 0 d | |
| 345 | oculus.com | B | 80 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 0 d |
| 346 | panda.org | B | 80 | — | — | TLS1.3 | Let's Encrypt | — | 0 d |
| 347 | pik-potsdam.de | B | 80 | — | — | TLS1.3 | GEANT TLS RSA 1 | — | 0 d |
| 348 | politiken.dk | B | 80 | — | — | TLS1.3 | Certainly Intermediate R1 | 0 d | |
| 349 | powtoon.com | B | 80 | — | — | TLS1.3 | Certainly Intermediate R1 | 0 d | |
| 350 | quantamagazine.org | B | 80 | — | — | TLS1.3 | Let's Encrypt | 0 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How do I get an A+ rating?
Enable TLS 1.3 with strong ciphers, ensure full forward secrecy (PFS), deploy HSTS correctly, and use a valid certificate from a trusted CA.
Why is my score low even with a valid certificate?
The score evaluates the whole TLS configuration — legacy protocols, weak ciphers or missing HSTS all reduce it.