SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-07
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 5101 | ici.fr | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 44 d | |
| 5102 | icloud.com | A+ | 100 | — | – | TLS1.3 | Apple Public Server ECC CA 1 - G1 | 46 d | |
| 5103 | iconfont.cn | A+ | 100 | — | – | TLS1.3 | GlobalSign GCC R3 OV TLS CA 2024 | 69 d | |
| 5104 | icrc.org | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 90 d | |
| 5105 | idealhome.co.uk | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 53 d | |
| 5106 | idealista.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 45 d | |
| 5107 | identitytheft.gov | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 123 d | |
| 5108 | idnes.cz | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV E36 | 94 d | |
| 5109 | idownloadblog.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 65 d | |
| 5110 | idtheftcenter.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 34 d | |
| 5111 | ie.edu | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 153 d | |
| 5112 | ifac.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 79 d | |
| 5113 | ifad.org | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 83 d | |
| 5114 | ifilm.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 37 d | |
| 5115 | ifixit.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 122 d | |
| 5116 | iflscience.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 187 d | |
| 5117 | ifm.com | A+ | 100 | — | – | TLS1.3 | Thawte EV RSA CA G2 | 154 d | |
| 5118 | ifpri.org | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q4 | 87 d | |
| 5119 | ifrc.org | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 125 d | |
| 5120 | ign.fr | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 58 d | |
| 5121 | ihg.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 145 d | |
| 5122 | ihmc.us | A+ | 100 | — | – | TLS1.3 | Starfield TLS Intermediate CA DV - R1v1 | 68 d | |
| 5123 | iis.net | A+ | 100 | — | – | TLS1.3 | Microsoft TLS G2 RSA CA OCSP 04 | 85 d | |
| 5124 | iitb.ac.in | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 95 d | |
| 5125 | iledefrance.fr | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 28 d | |
| 5126 | imagekit.io | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 182 d | |
| 5127 | imdb.com | A+ | 100 | – | TLS1.3 | Amazon RSA 2048 M04 | 104 d | ||
| 5128 | imf.org | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 174 d | |
| 5129 | immowelt.de | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 S19 | 196 d | |
| 5130 | imo.org | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 120 d | |
| 5131 | imore.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 68 d | |
| 5132 | imperial.ac.uk | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 77 d | |
| 5133 | imperva.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 134 d | |
| 5134 | in.gov | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 152 d | |
| 5135 | ina.fr | A+ | 100 | — | – | TLS1.3 | GlobalSign RSA OV SSL CA 2018 | 34 d | |
| 5136 | inail.it | A+ | 100 | — | – | TLS1.3 | GlobalSign RSA OV SSL CA 2018 | 123 d | |
| 5137 | indiatimes.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 60 d | |
| 5138 | indiatoday.in | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS ECC CA G1 | 91 d | |
| 5139 | indystar.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 53 d | |
| 5140 | infektionsschutz.de | A+ | 100 | — | – | TLS1.3 | GEANT TLS RSA 1 | 92 d | |
| 5141 | infobae.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 50 d | |
| 5142 | infojobs.net | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 193 d | |
| 5143 | infor.com | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 68 d | |
| 5144 | inform.kz | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 47 d | |
| 5145 | inforum.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 77 d | |
| 5146 | infosec.exchange | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 50 d | |
| 5147 | infoseek.co.jp | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 118 d | |
| 5148 | ing.com | A+ | 100 | — | – | TLS1.3 | HydrantID Server CA O1 | 56 d | |
| 5149 | inhabitat.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 61 d | |
| 5150 | inkbunny.net | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 39 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.