SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-07
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 6601 | typecho.org | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 70 d | |
| 6602 | typescriptlang.org | A+ | 100 | — | – | TLS1.3 | Microsoft TLS G2 RSA CA OCSP 02 | 85 d | |
| 6603 | typo3.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 66 d | |
| 6604 | ub.ac.id | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 76 d | |
| 6605 | ubc.ca | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 130 d | |
| 6606 | uber.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 102 d | |
| 6607 | ubuntu.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 38 d | |
| 6608 | ucanr.edu | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 68 d | |
| 6609 | ucf.edu | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 34 d | |
| 6610 | uchile.cl | A+ | 100 | — | – | TLS1.3 | RapidSSL TLS RSA CA G1 | 176 d | |
| 6611 | uconn.edu | A+ | 100 | — | – | TLS1.3 | InCommon Intermediate CA - OVG2C | 189 d | |
| 6612 | udacity.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 88 d | |
| 6613 | udg.edu | A+ | 100 | — | – | TLS1.3 | GEANT TLS RSA 1 | 168 d | |
| 6614 | udiscovermusic.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 184 d | |
| 6615 | uea.ac.uk | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 183 d | |
| 6616 | uefa.com | A+ | 100 | — | – | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | 92 d | |
| 6617 | ufc.br | A+ | 100 | — | – | TLS1.3 | RNP ICPEdu GR46 OV TLS CA 2025 | 149 d | |
| 6618 | uff.br | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 28 d | |
| 6619 | ufrj.br | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 75 d | |
| 6620 | ufscar.br | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 98 d | |
| 6621 | uga.edu | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 165 d | |
| 6622 | ugent.be | A+ | 100 | — | – | TLS1.3 | GEANT TLS RSA 1 | 94 d | |
| 6623 | ugm.ac.id | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 132 d | |
| 6624 | uhhospitals.org | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 92 d | |
| 6625 | ui.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 96 d | |
| 6626 | uibe.edu.cn | A+ | 100 | — | – | TLS1.3 | Certum OV TLS G2 R39 CA | 145 d | |
| 6627 | uibk.ac.at | A+ | 100 | — | – | TLS1.3 | GEANT TLS ECC 1 | 92 d | |
| 6628 | uidaho.edu | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 46 d | |
| 6629 | uisdc.com | A+ | 100 | — | – | TLS1.3 | GlobalSign GCC R46 AlphaSSL CA 2025 | 176 d | |
| 6630 | ukm.my | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 59 d | |
| 6631 | ukri.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 83 d | |
| 6632 | ukrinform.net | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 69 d | |
| 6633 | ukrinform.ua | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 69 d | |
| 6634 | ul.ie | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 39 d | |
| 6635 | ulb.be | A+ | 100 | — | – | TLS1.3 | GEANT TLS ECC 1 | 98 d | |
| 6636 | uliege.be | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 33 d | |
| 6637 | umaryland.edu | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 132 d | |
| 6638 | umb.edu | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 174 d | |
| 6639 | umbc.edu | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 76 d | |
| 6640 | umh.es | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 158 d | |
| 6641 | umk.pl | A+ | 100 | — | – | TLS1.3 | GEANT TLS ECC 1 | 92 d | |
| 6642 | umkc.edu | A+ | 100 | — | – | TLS1.3 | InCommon RSA OV SSL CA 3 | 28 d | |
| 6643 | uml.edu | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 106 d | |
| 6644 | umontpellier.fr | A+ | 100 | — | – | TLS1.3 | GEANT TLS RSA 1 | 106 d | |
| 6645 | unb.br | A+ | 100 | — | – | TLS1.3 | RNP ICPEdu GR46 OV TLS CA 2025 | 191 d | |
| 6646 | unc.edu.ar | A+ | 100 | — | – | TLS1.3 | ZeroSSL ECC DV SSL CA 2 | 74 d | |
| 6647 | undp.org | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 92 d | |
| 6648 | unf.edu | A+ | 100 | — | – | TLS1.3 | InCommon RSA Server CA 2 | 107 d | |
| 6649 | unfccc.int | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q4 | 74 d | |
| 6650 | unfpa.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 72 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.