SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-07
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 6151 | scientificamerican.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 188 d | |
| 6152 | scotiabank.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 84 d | |
| 6153 | scotusblog.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 78 d | |
| 6154 | screenpal.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 165 d | |
| 6155 | scribd.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 78 d | |
| 6156 | scrippsnews.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 116 d | |
| 6157 | scrmtech.com | A+ | 100 | — | – | TLS1.3 | TrustAsia DV TLS RSA CA 2025 | 38 d | |
| 6158 | scu.edu | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 81 d | |
| 6159 | scu.edu.au | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 62 d | |
| 6160 | sdstate.edu | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 133 d | |
| 6161 | sdu.edu.cn | A+ | 100 | — | – | TLS1.3 | GlobalSign GCC R3 DV TLS CA 2020 | 157 d | |
| 6162 | se.com | A+ | 100 | — | – | TLS1.3 | Thawte TLS RSA CA G1 | 78 d | |
| 6163 | seacoastonline.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 76 d | |
| 6164 | seahawks.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 83 d | |
| 6165 | searchenginejournal.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 83 d | |
| 6166 | seat61.com | A+ | 100 | — | – | TLS1.3 | GlobalSign GCC R46 DV TLS CA 2025 | 168 d | |
| 6167 | seattle.gov | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 115 d | |
| 6168 | seattletimes.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 68 d | |
| 6169 | sebrae.com.br | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 34 d | |
| 6170 | sec.gov | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 174 d | |
| 6171 | secretservice.gov | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 94 d | |
| 6172 | section508.gov | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 166 d | |
| 6173 | securelist.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 138 d | |
| 6174 | seds.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 56 d | |
| 6175 | seekingalpha.com | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R3 DV TLS CA 2025 Q4 | 64 d | |
| 6176 | segmentfault.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 58 d | |
| 6177 | segway.com | A+ | 100 | — | – | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | 50 d | |
| 6178 | selenic.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 82 d | |
| 6179 | selfgrowth.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 57 d | |
| 6180 | semianalysis.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 40 d | |
| 6181 | senate.gov | A+ | 100 | — | – | TLS1.3 | DigiCert EV RSA CA G2 | 155 d | |
| 6182 | sendpulse.com | A+ | 100 | — | – | TLS1.3 | SSL.com TLS Issuing RSA CA R1 | 160 d | |
| 6183 | sentencingproject.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 51 d | |
| 6184 | seohost.pl | A+ | 100 | — | – | TLS1.3 | Trustico RSA DV SSL CA 2 | 100 d | |
| 6185 | serpstat.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 80 d | |
| 6186 | sesameworkshop.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 32 d | |
| 6187 | seths.blog | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 57 d | |
| 6188 | setmore.com | A+ | 100 | — | – | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | 32 d | |
| 6189 | sevenrooms.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 30 d | |
| 6190 | seventeen.com | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q4 | 196 d | |
| 6191 | seznam.cz | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 52 d | |
| 6192 | seznamzpravy.cz | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 81 d | |
| 6193 | sfr.fr | A+ | 100 | — | – | TLS1.3 | Thawte TLS RSA CA G1 | 105 d | |
| 6194 | sharecare.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 61 d | |
| 6195 | sharefile.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 116 d | |
| 6196 | sharethis.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 131 d | |
| 6197 | shazam.com | A+ | 100 | — | – | TLS1.3 | Apple Public Server RSA CA 1 - G1 | 104 d | |
| 6198 | sheffield.ac.uk | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 38 d | |
| 6199 | shell.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 82 d | |
| 6200 | sherwin-williams.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 111 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.