SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-07
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 6501 | timesofsandiego.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 51 d | |
| 6502 | timeweb.com | A+ | 100 | — | – | TLS1.3 | GlobalSign GCC R46 DV TLS CA 2025 | 111 d | |
| 6503 | tinder.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 101 d | |
| 6504 | tiny.cc | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 57 d | |
| 6505 | tiny.cloud | A+ | 100 | — | – | TLS1.3 | Amazon ECDSA 256 M01 | 172 d | |
| 6506 | tinypng.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 87 d | |
| 6507 | tinyurl.com | A+ | 100 | TLS1.3 | Google Trust Services | 86 d | |||
| 6508 | tirerack.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 169 d | |
| 6509 | tmall.com | A+ | 100 | — | – | TLS1.3 | GlobalSign GCC R46 OV TLS CA 2025 | 187 d | |
| 6510 | tmj4.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 116 d | |
| 6511 | toastmasters.org | A+ | 100 | — | – | TLS1.3 | Starfield TLS Intermediate CA DV - R1v1 | 160 d | |
| 6512 | tobii.com | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 51 d | |
| 6513 | todoist.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 122 d | |
| 6514 | togetter.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 141 d | |
| 6515 | toggl.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 38 d | |
| 6516 | tome.app | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 83 d | |
| 6517 | tomsguide.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 71 d | |
| 6518 | tomshardware.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 71 d | |
| 6519 | topgear.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 143 d | |
| 6520 | topgolf.com | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 96 d | |
| 6521 | topshop.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 155 d | |
| 6522 | toptenreviews.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 79 d | |
| 6523 | torontomu.ca | A+ | 100 | — | – | TLS1.3 | SSL.com TLS Issuing RSA CA R1 | 142 d | |
| 6524 | torontosun.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 49 d | |
| 6525 | torproject.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 45 d | |
| 6526 | totaljobs.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 176 d | |
| 6527 | toto.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 86 d | |
| 6528 | townandcountrymag.com | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q4 | 196 d | |
| 6529 | tp-link.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 57 d | |
| 6530 | tracxn.com | A+ | 100 | — | – | TLS1.3 | Amazon ECDSA 256 M04 | 167 d | |
| 6531 | trade.gov | A+ | 100 | — | – | TLS1.3 | Entrust DV TLS Issuing RSA CA 2 | 90 d | |
| 6532 | tradedoubler.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 43 d | |
| 6533 | tradeindia.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 120 d | |
| 6534 | trademe.co.nz | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | 132 d | |
| 6535 | tradingview.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 65 d | |
| 6536 | trains.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 90 d | |
| 6537 | trane.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 59 d | |
| 6538 | transparency.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 67 d | |
| 6539 | travelchannel.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 117 d | |
| 6540 | traveloka.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 191 d | |
| 6541 | treasury.gov.au | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 50 d | |
| 6542 | trello.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 95 d | |
| 6543 | triathlon.org | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 83 d | |
| 6544 | trib.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 76 d | |
| 6545 | tribecafilm.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 28 d | |
| 6546 | trinity.edu | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 56 d | |
| 6547 | tripadvisor.ca | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 118 d | |
| 6548 | tripadvisor.co.nz | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 118 d | |
| 6549 | tripadvisor.co.uk | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 118 d | |
| 6550 | tripadvisor.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 118 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.