CertH certH

SSL Grade Leaderboard: Top 100 Websites

Scanned from 20,000 top global websites · Updated 2026-11-04

12,267Domains
21%A+ share (2547)
94.1Avg score
↑ 30Improved this month
#DomainGradeScore30d trendΔTLSIssuerHSTSExpires
551elinux.orgA100——TLS1.3Let's Encrypt—2 d
552eliteprospects.comA100——TLS1.3Amazon RSA 2048 M04—120 d
553elixir-lang.orgA100——TLS1.3Let's Encrypt—14 d
554elpais.comA100——TLS1.3Let's Encrypt—28 d
555eltiempo.comA100——TLS1.3GeoTrust TLS RSA CA G1—124 d
556embedded.comA100——TLS1.3DigiCert Global G3 TLS ECC SHA384 2020 CA1—8 d
557emich.eduA100——TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA1—8 d
558emirates.comA100——TLS1.3DigiCert Global G3 TLS ECC SHA384 2020 CA1—0 d
559en-gage.netA100——TLS1.3Amazon RSA 2048 M01—0 d
560engadget.comA100——TLS1.3Amazon RSA 2048 M01—8 d
561epicbrowser.comA100——TLS1.3Let's Encrypt—15 d
562epicurious.comA100——TLS1.3Amazon RSA 2048 M01—5 d
563epizy.comA100——TLS1.3Let's Encrypt—0 d
564er.ruA100——TLS1.3Let's Encrypt—0 d
565esbooks.co.jpA100——TLS1.3Let's Encrypt—0 d
566escholarship.orgA100——TLS1.3Amazon RSA 2048 M04—70 d
567espressif.comA100——TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA178 d
568estadao.com.brA100——TLS1.3DigiCert Global G3 TLS ECC SHA384 2020 CA1—11 d
569etihad.comA100——TLS1.3DigiCert Global G3 TLS ECC SHA384 2020 CA1—108 d
570etoday.co.krA100——TLS1.3Amazon RSA 2048 M01—134 d
571eu.comA100——TLS1.3Let's Encrypt—0 d
572eur-lex.europa.euA100–TLS1.3Amazon RSA 2048 M04—180 d
573evansville.eduA100——TLS1.3Sectigo Public Server Authentication CA DV R36—25 d
574eventim.deA100——TLS1.3DigiCert Global G3 TLS ECC SHA384 2020 CA1—15 d
575everyaction.comA100——TLS1.3Let's Encrypt—3 d
576evite.comA100——TLS1.3Amazon RSA 2048 M04—108 d
577evolution.comA100——TLS1.3Amazon RSA 2048 M04—72 d
578exame.comA100——TLS1.3GlobalSign RSA OV SSL CA 2018—90 d
579exceedlms.comA100——TLS1.3Amazon RSA 2048 M01—140 d
580exchangle.comA100——TLS1.3Let's Encrypt—5 d
581excite.co.jpA100——TLS1.3Amazon RSA 2048 M04—109 d
582expansion.mxA100——TLS1.3Amazon RSA 2048 M01—121 d
583expertreviews.co.ukA100——TLS1.3Let's Encrypt—0 d
584exploit-db.comA100——TLS1.3Starfield TLS Intermediate CA DV - R1v1—0 d
585exploratorium.eduA100——TLS1.3Let's Encrypt—0 d
586expressnews.comA100——TLS1.3Let's Encrypt—29 d
587expresso.ptA100——TLS1.3Amazon RSA 2048 M04128 d
588eyrolles.comA100——TLS1.3Let's Encrypt—34 d
589facer.ioA100——TLS1.3Amazon RSA 2048 M01—92 d
590fairgo-casino.ioA100——TLS1.3Encryption Everywhere DV TLS CA - G2—30 d
591fairygodboss.comA100——TLS1.3Amazon RSA 2048 M01—44 d
592famitsu.comA100——TLS1.3Amazon RSA 2048 M01—120 d
593famsf.orgA100——TLS1.3Let's Encrypt—20 d
594fanatics.comA100——TLS1.3DigiCert EV RSA CA G2—31 d
595fandango.comA100——TLS1.3DigiCert Global G3 TLS ECC SHA384 2020 CA1123 d
596fansided.comA100——TLS1.3Amazon RSA 2048 M01—132 d
597farfetch.comA100——TLS1.3DigiCert Global G3 TLS ECC SHA384 2020 CA1—114 d
598farmers.comA100——TLS1.3DigiCert Global G3 TLS ECC SHA384 2020 CA1—37 d
599fastcoexist.comA100——TLS1.3Let's Encrypt—0 d
600fastcompany.comA100——TLS1.3GlobalSign Atlas R3 DV TLS CA 2026 Q2—88 d
12 / 242

Track grade changes for your domains

Sign up free, watch your domains and get alerted the moment a grade drops.

FAQ

How often is the SSL leaderboard updated?

Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.

How is the SSL grade calculated?

Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.

What does an A+ SSL rating mean?

A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.

Methodology

CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are weighted into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.

What is an SSL grade?

An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.

Why track certificate health over time?

Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.