SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-07
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 5851 | pernod-ricard.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 51 d | |
| 5852 | perthnow.com.au | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 59 d | |
| 5853 | petition.parliament.uk | A+ | 100 | — | – | TLS1.3 | Entrust OV TLS Issuing RSA CA 2 | 120 d | |
| 5854 | petmd.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 160 d | |
| 5855 | petrobras.com.br | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 51 d | |
| 5856 | pfsense.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 34 d | |
| 5857 | pgpf.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 78 d | |
| 5858 | pharmaceutical-technology.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 52 d | |
| 5859 | philips-hue.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 30 d | |
| 5860 | phoca.cz | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 69 d | |
| 5861 | phoenix.edu | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 179 d | |
| 5862 | phplist.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 86 d | |
| 5863 | physicsworld.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 51 d | |
| 5864 | physiology.org | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 94 d | |
| 5865 | picmonkey.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 46 d | |
| 5866 | pidgin.im | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 45 d | |
| 5867 | piie.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 67 d | |
| 5868 | pinkvilla.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 53 d | |
| 5869 | pinsentmasons.com | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 138 d | |
| 5870 | pinterest.com | A+ | 100 | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 112 d | ||
| 5871 | pistonheads.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 118 d | |
| 5872 | pixels.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 168 d | |
| 5873 | pixlr.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 S24 | 193 d | |
| 5874 | pjstar.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 78 d | |
| 5875 | plaid.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 129 d | |
| 5876 | plainenglish.io | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 74 d | |
| 5877 | planet.com | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 34 d | |
| 5878 | planning.org | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 123 d | |
| 5879 | play.google.com | A+ | 100 | TLS1.3 | Google Trust Services | 54 d | |||
| 5880 | playwright.dev | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 73 d | |
| 5881 | plesk.com | A+ | 100 | TLS1.3 | Google Trust Services | 73 d | |||
| 5882 | plotly.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 79 d | |
| 5883 | plymouth.ac.uk | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 36 d | |
| 5884 | pm.gov.au | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | 49 d | |
| 5885 | pmi.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 62 d | |
| 5886 | pnj.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 78 d | |
| 5887 | podatki.gov.pl | A+ | 100 | — | – | TLS1.3 | GeoTrust EV RSA CA G2 | 120 d | |
| 5888 | podcast.de | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 37 d | |
| 5889 | podchaser.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 173 d | |
| 5890 | poison.org | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 84 d | |
| 5891 | polaroid.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 124 d | |
| 5892 | policia.es | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 124 d | |
| 5893 | polimi.it | A+ | 100 | — | – | TLS1.3 | GEANT TLS ECC 1 | 188 d | |
| 5894 | polisen.se | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 89 d | |
| 5895 | politie.nl | A+ | 100 | — | – | TLS1.3 | Actalis Organization Validated TLS Server RSA CA 2025 | 77 d | |
| 5896 | polsatnews.pl | A+ | 100 | — | – | TLS1.3 | RapidSSL TLS RSA CA G1 | 146 d | |
| 5897 | polskieradio.pl | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 61 d | |
| 5898 | polyu.edu.hk | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 55 d | |
| 5899 | popularmechanics.com | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q4 | 196 d | |
| 5900 | porch.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 37 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.