SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-07
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 6251 | smugmug.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 187 d | |
| 6252 | snap.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 72 d | |
| 6253 | snapchat.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 156 d | |
| 6254 | snapcraft.io | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 36 d | |
| 6255 | snob.ru | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 79 d | |
| 6256 | snov.io | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 126 d | |
| 6257 | snyk.io | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 32 d | |
| 6258 | soas.ac.uk | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 70 d | |
| 6259 | sodexo.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 45 d | |
| 6260 | softonic.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 81 d | |
| 6261 | solvay.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 65 d | |
| 6262 | sonicwall.com | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 177 d | |
| 6263 | sonos.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 52 d | |
| 6264 | sony.co.jp | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 119 d | |
| 6265 | sony.net | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 119 d | |
| 6266 | soompi.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 78 d | |
| 6267 | sorbonne-universite.fr | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 46 d | |
| 6268 | sortiraparis.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 29 d | |
| 6269 | soundclick.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 76 d | |
| 6270 | soundcloud.com | A+ | 100 | TLS1.3 | Amazon RSA 2048 M01 | 132 d | |||
| 6271 | soundonsound.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 76 d | |
| 6272 | sourceware.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 33 d | |
| 6273 | southbendtribune.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 76 d | |
| 6274 | space.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 71 d | |
| 6275 | spacenews.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 85 d | |
| 6276 | spaceship.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 40 d | |
| 6277 | spacex.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 45 d | |
| 6278 | spamhaus.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 40 d | |
| 6279 | sparkfun.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 61 d | |
| 6280 | spartan.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 95 d | |
| 6281 | spatial.io | A+ | 100 | — | — | TLS1.3 | Let's Encrypt | 0 d | |
| 6282 | speaker.gov | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 64 d | |
| 6283 | speedtest.net | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | 156 d | |
| 6284 | speedtestcustom.com | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | 156 d | |
| 6285 | spie.org | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | 51 d | |
| 6286 | spiedigitallibrary.org | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | 34 d | |
| 6287 | spiegel.de | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 28 d | |
| 6288 | spinninrecords.com | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | 62 d | |
| 6289 | splashthat.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 46 d | |
| 6290 | spline.design | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 68 d | |
| 6291 | spokesman.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 130 d | |
| 6292 | sport1.de | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 45 d | |
| 6293 | sportinglife.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 129 d | |
| 6294 | sports.ru | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 37 d | |
| 6295 | sports.yahoo.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 47 d | |
| 6296 | sportschau.de | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 75 d | |
| 6297 | sportsnet.ca | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 125 d | |
| 6298 | spreadshirt.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 51 d | |
| 6299 | spreadshirt.de | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 51 d | |
| 6300 | springernature.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 76 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.