SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-07
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 6851 | wcpo.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 116 d | |
| 6852 | wcvb.com | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | 127 d | |
| 6853 | wdrmaus.de | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 90 d | |
| 6854 | wdsu.com | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | 127 d | |
| 6855 | weather.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 60 d | |
| 6856 | weather.gov | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 31 d | |
| 6857 | web.de | A+ | 100 | — | – | TLS1.3 | Telekom Security OV RSA CA 26A | 116 d | |
| 6858 | web.dev | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 54 d | |
| 6859 | webador.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 46 d | |
| 6860 | webasto.com | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 119 d | |
| 6861 | weber.edu | A+ | 100 | — | – | TLS1.3 | InCommon Intermediate CA - OVG2C | 104 d | |
| 6862 | webflow.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 99 d | |
| 6863 | webinargeek.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 71 d | |
| 6864 | webkit.org | A+ | 100 | — | – | TLS1.3 | Apple Public Server RSA CA 1 - G1 | 40 d | |
| 6865 | weblate.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 64 d | |
| 6866 | webnode.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 86 d | |
| 6867 | webroot.com | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 159 d | |
| 6868 | webster.edu | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 106 d | |
| 6869 | websupport.se | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 95 d | |
| 6870 | websupport.sk | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 83 d | |
| 6871 | webthemez.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 43 d | |
| 6872 | webtoons.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 83 d | |
| 6873 | webyourself.eu | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 50 d | |
| 6874 | wechat.com | A+ | 100 | — | – | TLS1.3 | DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1 | 147 d | |
| 6875 | weightwatchers.com | A+ | 100 | — | – | TLS1.3 | Thawte EV RSA CA G2 | 160 d | |
| 6876 | welivesecurity.com | A+ | 100 | — | – | TLS1.3 | Thawte TLS RSA CA G1 | 68 d | |
| 6877 | wellcomecollection.org | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 109 d | |
| 6878 | wellsfargo.com | A+ | 100 | — | – | TLS1.3 | Wells Fargo Public Trust Certification Authority 01 G2 | 187 d | |
| 6879 | wesh.com | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | 127 d | |
| 6880 | westerndigital.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 114 d | |
| 6881 | westernsydney.edu.au | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 160 d | |
| 6882 | westpac.com.au | A+ | 100 | — | – | TLS1.3 | DigiCert EV RSA CA G2 | 133 d | |
| 6883 | wetransfer.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 92 d | |
| 6884 | wfaa.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 32 d | |
| 6885 | wfmz.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 60 d | |
| 6886 | wgbh.org | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 127 d | |
| 6887 | wgrz.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 32 d | |
| 6888 | whas11.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 37 d | |
| 6889 | whatculture.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 76 d | |
| 6890 | whathifi.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 79 d | |
| 6891 | whatsappbusiness.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 173 d | |
| 6892 | whattoexpect.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 117 d | |
| 6893 | which.co.uk | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 53 d | |
| 6894 | whistleblowersoftware.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 80 d | |
| 6895 | who.int | A+ | 100 | TLS1.3 | Google Trust Services | 51 d | |||
| 6896 | whois.com | A+ | 100 | — | – | TLS1.3 | RapidSSL TLS RSA CA G1 | 154 d | |
| 6897 | whowhatwear.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 47 d | |
| 6898 | whu.edu.cn | A+ | 100 | — | – | TLS1.3 | WoTrus RSA OV SSL CA 2 | 131 d | |
| 6899 | wickedlocal.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 74 d | |
| 6900 | wid.world | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 162 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.