SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-07
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 5151 | inosmi.ru | A+ | 100 | — | – | TLS1.3 | LiteSSL ECC CA 2025 | 36 d | |
| 5152 | inps.it | A+ | 100 | — | – | TLS1.3 | TI Trust Technologies OV CA | 70 d | |
| 5153 | inria.fr | A+ | 100 | — | – | TLS1.3 | GEANT TLS RSA 1 | 177 d | |
| 5154 | inserm.fr | A+ | 100 | — | – | TLS1.3 | GEANT TLS RSA 1 | 92 d | |
| 5155 | insidehook.com | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 132 d | |
| 5156 | insidermonkey.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 88 d | |
| 5157 | insightcrime.org | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 74 d | |
| 5158 | insta360.com | A+ | 100 | — | – | TLS1.3 | GlobalSign GCC R46 OV TLS CA 2025 | 100 d | |
| 5159 | instapaper.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 106 d | |
| 5160 | institutionalinvestor.com | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 115 d | |
| 5161 | integrityline.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 141 d | |
| 5162 | intercom.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 173 d | |
| 5163 | intercontinental.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 145 d | |
| 5164 | interfax.com | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 85 d | |
| 5165 | internet2.edu | A+ | 100 | — | – | TLS1.3 | InCommon Intermediate CA - OVG2C | 149 d | |
| 5166 | interpol.int | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA EV E36 | 163 d | |
| 5167 | intesasanpaolo.com | A+ | 100 | — | – | TLS1.3 | GlobalSign GCC R46 EV TLS CA 2025 | 177 d | |
| 5168 | inverse.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 113 d | |
| 5169 | investor.gov | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 92 d | |
| 5170 | inwx.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 67 d | |
| 5171 | iop.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 77 d | |
| 5172 | ipl.org | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 159 d | |
| 5173 | ips-dc.org | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 63 d | |
| 5174 | ipsos.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 35 d | |
| 5175 | ireland.com | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 135 d | |
| 5176 | is.fi | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 115 d | |
| 5177 | isa.org | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 148 d | |
| 5178 | isc.org | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q4 | 185 d | |
| 5179 | isc2.org | A+ | 100 | — | – | TLS1.3 | DigiCert EV RSA CA G2 | 134 d | |
| 5180 | ispmanager.com | A+ | 100 | — | – | TLS1.3 | GlobalSign GCC R6 AlphaSSL CA 2025 | 80 d | |
| 5181 | ispsystem.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 112 d | |
| 5182 | isu.edu | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 132 d | |
| 5183 | it-recht-kanzlei.de | A+ | 100 | — | – | TLS1.3 | Thawte TLS RSA CA G1 | 109 d | |
| 5184 | italia.it | A+ | 100 | — | – | TLS1.3 | Actalis Organization Validated TLS Server RSA CA 2025 | 65 d | |
| 5185 | ithaca.edu | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 189 d | |
| 5186 | itpro.com | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q4 | 83 d | |
| 5187 | itu.edu.tr | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 113 d | |
| 5188 | iubenda.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 124 d | |
| 5189 | ixigua.com | A+ | 100 | — | – | TLS1.3 | RapidSSL TLS RSA CA G1 | 71 d | |
| 5190 | jacksonville.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 80 d | |
| 5191 | jagran.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 59 d | |
| 5192 | jaguar.com | A+ | 100 | — | – | TLS1.3 | GlobalSign ECC OV SSL CA 2018 | 43 d | |
| 5193 | jamesbeard.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 85 d | |
| 5194 | jamf.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 126 d | |
| 5195 | jamsadr.com | A+ | 100 | — | – | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | 91 d | |
| 5196 | jcp.org | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 89 d | |
| 5197 | jcpenney.com | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 190 d | |
| 5198 | jcrew.com | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 171 d | |
| 5199 | jenkins.io | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 67 d | |
| 5200 | jetbrains.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 67 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.