SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-03
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 1 | 123rf.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M01 | — | 124 d |
| 2 | 12factor.net | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M01 | — | 132 d |
| 3 | 21cn.com | A | 100 | — | — | TLS1.3 | WoTrus OV Server CA [Run by the Issuer] | — | 25 d |
| 4 | 2k.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 113 d |
| 5 | 39.net | A | 100 | — | — | TLS1.3 | Let's Encrypt | — | 0 d |
| 6 | 3dsystems.com | A | 100 | — | — | TLS1.3 | Let's Encrypt | 26 d | |
| 7 | 5-tv.ru | A | 100 | — | — | TLS1.3 | GlobalSign GCC R3 DV TLS CA 2020 | 25 d | |
| 8 | 500px.com | A | 100 | – | TLS1.3 | Amazon RSA 2048 M04 | — | 136 d | |
| 9 | 6abc.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 110 d |
| 10 | 7-eleven.com | A | 100 | — | — | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | — | 0 d |
| 11 | 7sur7.be | A | 100 | — | — | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 100 d |
| 12 | 8newsnow.com | A | 100 | — | — | TLS1.3 | Let's Encrypt | 14 d | |
| 13 | 9news.com.au | A | 100 | — | — | TLS1.3 | Let's Encrypt | — | 16 d |
| 14 | a.co | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 62 d |
| 15 | aaa.com | A | 100 | — | — | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q2 | — | 0 d |
| 16 | aaaai.org | A | 100 | — | — | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 37 d |
| 17 | aaas.org | A | 100 | — | — | TLS1.3 | Let's Encrypt | 34 d | |
| 18 | abc.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 2 d |
| 19 | abc.net.au | A | 100 | — | — | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 19 d |
| 20 | abc11.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 110 d |
| 21 | abc13.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 110 d |
| 22 | abc27.com | A | 100 | — | — | TLS1.3 | Let's Encrypt | 14 d | |
| 23 | abc30.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 110 d |
| 24 | abc4.com | A | 100 | — | — | TLS1.3 | Let's Encrypt | 14 d | |
| 25 | abc7.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 110 d |
| 26 | abc7chicago.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 110 d |
| 27 | abc7news.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 110 d |
| 28 | abc7ny.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 110 d |
| 29 | abcactionnews.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 120 d |
| 30 | abcnews.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 30 d |
| 31 | aboutamazon.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M01 | — | 83 d |
| 32 | abril.com.br | A | 100 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 95 d |
| 33 | abs-cbn.com | A | 100 | — | — | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 131 d |
| 34 | academia.edu | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M01 | — | 0 d |
| 35 | accessbet.org | A | 100 | — | — | TLS1.3 | Encryption Everywhere DV TLS CA - G2 | — | 31 d |
| 36 | accor.com | A | 100 | — | — | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | — | 22 d |
| 37 | accupass.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 39 d |
| 38 | aceee.org | A | 100 | — | — | TLS1.3 | Let's Encrypt | 14 d | |
| 39 | acer.com | A | 100 | — | — | TLS1.3 | Amazon ECDSA 384 M01 | — | 37 d |
| 40 | acfe.com | A | 100 | — | — | TLS1.3 | Let's Encrypt | — | 15 d |
| 41 | aclanthology.org | A | 100 | — | — | TLS1.3 | Let's Encrypt | — | 0 d |
| 42 | acsevents.org | A | 100 | — | — | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 44 d |
| 43 | actionnetwork.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M01 | — | 122 d |
| 44 | activerain.com | A | 100 | — | — | TLS1.3 | Let's Encrypt | — | 6 d |
| 45 | adage.com | A | 100 | — | — | TLS1.3 | Let's Encrypt | — | 16 d |
| 46 | addthis.com | A | 100 | — | — | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 69 d |
| 47 | adexchanger.com | A | 100 | — | — | TLS1.3 | Let's Encrypt | 25 d | |
| 48 | adjust.com | A | 100 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 0 d |
| 49 | adlibris.com | A | 100 | — | — | TLS1.3 | Let's Encrypt | — | 7 d |
| 50 | admiralsharkcasino.org | A | 100 | — | — | TLS1.3 | Encryption Everywhere DV TLS CA - G2 | — | 31 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are weighted into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.