Websites with D SSL Ratings (2026)
Scanned from 20,000 top global websites · Updated 2026-11-04
12,267Domains
21%A+ share (2547)
94.1Avg score
↑ 30Improved this month
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 301 | fl.gov | D | 58 | — | — | TLS1.2 | GoDaddy TLS Intermediate CA DV - R1v1 | — | 71 d |
| 302 | girls-day.de | D | 58 | — | — | TLS1.2 | Let's Encrypt | — | 0 d |
| 303 | hy315.cc | D | 58 | — | — | TLS1.2 | WoTrus RSA DV SSL CA 2 | — | 71 d |
| 304 | iucr.org | D | 58 | — | — | TLS1.2 | Let's Encrypt | — | 0 d |
| 305 | london2012.com | D | 58 | — | — | TLS1.2 | WoTrus RSA DV SSL CA 2 | — | 3 d |
| 306 | metinfo.cn | D | 58 | — | — | TLS1.2 | Let's Encrypt | — | 6 d |
| 307 | occ.gov | D | 58 | — | — | TLS1.2 | Entrust OV TLS Issuing RSA CA 2 | 0 d | |
| 308 | swsoft.com | D | 58 | — | — | TLS1.2 | Sectigo Public Server Authentication CA DV R36 | — | 0 d |
| 309 | uoc.gr | D | 58 | — | — | TLS1.2 | Let's Encrypt | — | 1 d |
| 310 | upv.es | D | 58 | — | — | TLS1.2 | GEANT TLS RSA 1 | — | 0 d |
| 311 | vn.ua | D | 58 | — | — | TLS1.2 | Let's Encrypt | — | 28 d |
| 312 | x10.mx | D | 58 | — | — | TLS1.2 | Let's Encrypt | — | 0 d |
| 313 | acenet.edu | D | 57 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 0 d |
| 314 | herbalife.com | D | 57 | — | — | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 0 d | |
| 315 | iospress.com | D | 57 | — | — | TLS1.3 | reject | — | 0 d |
| 316 | secureservercdn.net | D | 57 | — | — | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | — | 0 d |
| 317 | yourdomain.com | D | 57 | — | — | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | — | 0 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How do I get an A+ rating?
Enable TLS 1.3 with strong ciphers, ensure full forward secrecy (PFS), deploy HSTS correctly, and use a valid certificate from a trusted CA.
Why is my score low even with a valid certificate?
The score evaluates the whole TLS configuration — legacy protocols, weak ciphers or missing HSTS all reduce it.