SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-07
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 6051 | rice.edu | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV E36 | 33 d | |
| 6052 | richmond.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 78 d | |
| 6053 | rijksoverheid.nl | A+ | 100 | — | – | TLS1.3 | DigiCert G3 TLS EU ECC P-384 SHA384 2022 CA1 | 58 d | |
| 6054 | ring.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 61 d | |
| 6055 | ringcentral.com | A+ | 100 | — | – | TLS1.3 | Thawte TLS RSA CA G1 | 101 d | |
| 6056 | riotinto.com | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q4 | 77 d | |
| 6057 | ripe.net | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 85 d | |
| 6058 | rippling.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 81 d | |
| 6059 | riseup.net | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 75 d | |
| 6060 | rituals.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 55 d | |
| 6061 | riverisland.com | A+ | 100 | — | – | TLS1.3 | GeoTrust EV RSA CA G2 | 166 d | |
| 6062 | rivian.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 80 d | |
| 6063 | rlp.de | A+ | 100 | — | – | TLS1.3 | Telekom Security OV RSA CA 26A | 46 d | |
| 6064 | rmg.co.uk | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 49 d | |
| 6065 | roadandtrack.com | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q4 | 196 d | |
| 6066 | roadtovr.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 51 d | |
| 6067 | roanoke.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 47 d | |
| 6068 | robinhood.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 62 d | |
| 6069 | roblox.com | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 123 d | |
| 6070 | roboform.com | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 115 d | |
| 6071 | roche.com | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 101 d | |
| 6072 | rockefeller.edu | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 40 d | |
| 6073 | rocketlawyer.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 67 d | |
| 6074 | rocketmortgage.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 132 d | |
| 6075 | rockpapershotgun.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 49 d | |
| 6076 | rockstargames.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 63 d | |
| 6077 | rockylinux.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 79 d | |
| 6078 | rode.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 120 d | |
| 6079 | rohde-schwarz.com | A+ | 100 | — | – | TLS1.3 | DigiCert G5 TLS EU RSA4096 SHA384 2022 CA1 | 72 d | |
| 6080 | roland.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 61 d | |
| 6081 | rolandgarros.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 128 d | |
| 6082 | rolex.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 167 d | |
| 6083 | romper.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 85 d | |
| 6084 | roomstyler.com | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 187 d | |
| 6085 | rosalux.de | A+ | 100 | — | – | TLS1.3 | Encryption Everywhere DV TLS CA - G2 | 38 d | |
| 6086 | rottentomatoes.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 122 d | |
| 6087 | roughguides.com | A+ | 100 | — | – | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | 148 d | |
| 6088 | royalcanin.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 44 d | |
| 6089 | royalparks.org.uk | A+ | 100 | — | – | TLS1.3 | GandiCert | 166 d | |
| 6090 | royalsociety.org | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 129 d | |
| 6091 | rpp.pe | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 41 d | |
| 6092 | rsa.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 79 d | |
| 6093 | rsc.org.uk | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 126 d | |
| 6094 | rspb.org.uk | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 54 d | |
| 6095 | rthk.hk | A+ | 100 | — | – | TLS1.3 | Hongkong Post e-Cert SSL CA 3 - 17 | 29 d | |
| 6096 | rtl.de | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 58 d | |
| 6097 | rtl.lu | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 175 d | |
| 6098 | rtp.pt | A+ | 100 | — | – | TLS1.3 | GlobalSign GCC R46 AlphaSSL CA 2025 | 139 d | |
| 6099 | ru.nl | A+ | 100 | — | – | TLS1.3 | GEANT TLS ECC 1 | 164 d | |
| 6100 | rubygems.org | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R3 DV TLS CA 2026 Q1 | 123 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.