SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-07
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 5451 | medicalnewstoday.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 119 d | |
| 5452 | medium.com | A+ | 100 | TLS1.3 | Google Trust Services | 87 d | |||
| 5453 | medlineplus.gov | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 85 d | |
| 5454 | megabus.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 151 d | |
| 5455 | melia.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 176 d | |
| 5456 | melmagazine.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 64 d | |
| 5457 | memrise.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 121 d | |
| 5458 | menshealth.com | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q4 | 196 d | |
| 5459 | mensjournal.com | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R3 DV TLS CA 2026 Q2 | 44 d | |
| 5460 | mercari.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 180 d | |
| 5461 | mercedes-benz.de | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 98 d | |
| 5462 | mercer.com | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 56 d | |
| 5463 | merckgroup.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 55 d | |
| 5464 | messe-stuttgart.de | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 75 d | |
| 5465 | metasploit.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 145 d | |
| 5466 | metlife.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 162 d | |
| 5467 | mews.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 77 d | |
| 5468 | mhi.com | A+ | 100 | — | – | TLS1.3 | GlobalSign RSA OV SSL CA 2018 | 80 d | |
| 5469 | miamidade.gov | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 159 d | |
| 5470 | mic.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 53 d | |
| 5471 | michelin.com | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R40 | 72 d | |
| 5472 | michigandaily.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 82 d | |
| 5473 | microchip.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 114 d | |
| 5474 | microgaming.io | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 120 d | |
| 5475 | micron.com | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 34 d | |
| 5476 | middleeasteye.net | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 47 d | |
| 5477 | midi.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 65 d | |
| 5478 | migros.ch | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 61 d | |
| 5479 | mikrotik.com | A+ | 100 | — | – | TLS1.3 | DigiCert EV RSA CA G2 | 91 d | |
| 5480 | milanuncios.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 103 d | |
| 5481 | milieucentraal.nl | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 57 d | |
| 5482 | mimecast.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 175 d | |
| 5483 | mindbodygreen.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 116 d | |
| 5484 | mindbodyonline.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 139 d | |
| 5485 | mindtools.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 60 d | |
| 5486 | mines.edu | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 159 d | |
| 5487 | miniclip.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 120 d | |
| 5488 | mining-technology.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 52 d | |
| 5489 | mining.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 170 d | |
| 5490 | minneapolisfed.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 48 d | |
| 5491 | mintlify.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 37 d | |
| 5492 | miro.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 86 d | |
| 5493 | missoulian.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 49 d | |
| 5494 | missouri.edu | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 28 d | |
| 5495 | mixpanel.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 81 d | |
| 5496 | mj12bot.com | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 99 d | |
| 5497 | mjssj.com | A+ | 100 | — | – | TLS1.3 | DNSPod DV TLS RSA CA G1 | 69 d | |
| 5498 | ml.com | A+ | 100 | — | – | TLS1.3 | DigiCert EV RSA CA G2 | 96 d | |
| 5499 | mlssoccer.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 74 d | |
| 5500 | mmafighting.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 57 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.