SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-07
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 5501 | mmu.ac.uk | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 33 d | |
| 5502 | mo.gov | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | 34 d | |
| 5503 | modelcontextprotocol.io | A+ | 100 | — | — | TLS1.3 | Let's Encrypt | 0 d | |
| 5504 | modelscope.cn | A+ | 100 | — | – | TLS1.3 | GlobalSign GCC R46 OV TLS CA 2025 | 106 d | |
| 5505 | modernatx.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 44 d | |
| 5506 | mohfw.gov.in | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 81 d | |
| 5507 | mokahr.com | A+ | 100 | — | – | TLS1.3 | Encryption Everywhere DV TLS CA - G2 | 69 d | |
| 5508 | mollie.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 59 d | |
| 5509 | mom.gov.sg | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q4 | 84 d | |
| 5510 | monde-diplomatique.fr | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 86 d | |
| 5511 | mondelezinternational.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 84 d | |
| 5512 | mondoweiss.net | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 61 d | |
| 5513 | moneycontrol.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 58 d | |
| 5514 | moneygeek.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 82 d | |
| 5515 | moneyweek.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 39 d | |
| 5516 | mono-project.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 69 d | |
| 5517 | montclair.edu | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 55 d | |
| 5518 | montgomeryadvertiser.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 79 d | |
| 5519 | montgomerycountymd.gov | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 69 d | |
| 5520 | monuments-nationaux.fr | A+ | 100 | — | – | TLS1.3 | GandiCert | 60 d | |
| 5521 | monzo.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 113 d | |
| 5522 | moo.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 44 d | |
| 5523 | moovitapp.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 129 d | |
| 5524 | morrisons.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 136 d | |
| 5525 | motel-one.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 88 d | |
| 5526 | motortrend.com | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q4 | 196 d | |
| 5527 | motul.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 42 d | |
| 5528 | mountainproject.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 77 d | |
| 5529 | mozilla.org | A+ | 100 | TLS1.3 | Google Trust Services | 37 d | |||
| 5530 | mp.weixin.qq.com | A+ | 100 | – | TLS1.3 | DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1 | 169 d | ||
| 5531 | mprnews.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 68 d | |
| 5532 | mql5.com | A+ | 100 | — | – | TLS1.3 | RapidSSL TLS ECC CA G1 | 187 d | |
| 5533 | mrgreen.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 160 d | |
| 5534 | msc.com | A+ | 100 | — | – | TLS1.3 | GlobalSign GCC R46 OV TLS CA 2025 | 145 d | |
| 5535 | mskcc.org | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 64 d | |
| 5536 | msn.com | A+ | 100 | – | TLS1.3 | Microsoft TLS G2 RSA CA OCSP 02 | 76 d | ||
| 5537 | mstdn.social | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 62 d | |
| 5538 | mta.info | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 32 d | |
| 5539 | mtholyoke.edu | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 33 d | |
| 5540 | mts.ru | A+ | 100 | — | – | TLS1.3 | GlobalSign GCC R46 DV TLS CA 2025 | 178 d | |
| 5541 | mturk.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 93 d | |
| 5542 | muenchen.de | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 44 d | |
| 5543 | mulesoft.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 S24 | 195 d | |
| 5544 | muni.cz | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 79 d | |
| 5545 | munichre.com | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 56 d | |
| 5546 | murf.ai | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 129 d | |
| 5547 | muscleandfitness.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 67 d | |
| 5548 | museoreinasofia.es | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 166 d | |
| 5549 | music.apple.com | A+ | 100 | — | – | TLS1.3 | Apple Public EV Server RSA CA 1 - G1 | 62 d | |
| 5550 | musiciansfriend.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 62 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.