SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-07
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 7051 | zurich.com | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q4 | 74 d | |
| 7052 | zynga.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 117 d | |
| 7053 | 12371.cn | A | 98 | — | – | TLS1.3 | GlobalSign GCC R46 OV TLS CA 2025 | — | 182 d |
| 7054 | 1c.ru | A | 98 | — | – | TLS1.3 | GlobalSign GCC R46 OV TLS CA 2025 | 158 d | |
| 7055 | 20m.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 67 d |
| 7056 | 2345.com | A | 98 | — | – | TLS1.3 | sslTrus RSA OV SSL CA 2 | 175 d | |
| 7057 | 2ip.ru | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 59 d |
| 7058 | 36kr.com | A | 98 | — | – | TLS1.3 | sslTrus RSA OV SSL CA 2 | — | 174 d |
| 7059 | 404media.co | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 68 d |
| 7060 | 4gamer.net | A | 98 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | — | 159 d |
| 7061 | 51.la | A | 98 | — | – | TLS1.3 | Keymatic Secure Domain RSA CA G1 | — | 170 d |
| 7062 | 7-zip.org | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 53 d |
| 7063 | 90min.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 71 d |
| 7064 | 91tcw.cc | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 37 d |
| 7065 | aacr.org | A | 98 | — | – | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | — | 33 d |
| 7066 | aafp.org | A | 98 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 153 d | |
| 7067 | aappublications.org | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 46 d |
| 7068 | abilitynet.org.uk | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 38 d |
| 7069 | abqjournal.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 58 d |
| 7070 | accorhotels.com | A | 98 | — | – | TLS1.3 | GlobalSign RSA OV SSL CA 2018 | — | 79 d |
| 7071 | acs.org | A | 98 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | — | 86 d |
| 7072 | ad-hoc-news.de | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 29 d |
| 7073 | advocate.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 35 d |
| 7074 | adweek.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 39 d |
| 7075 | aec.at | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 63 d |
| 7076 | aecf.org | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 38 d |
| 7077 | aflac.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 44 d |
| 7078 | afterdawn.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 78 d |
| 7079 | agilent.com | A | 98 | — | – | TLS1.3 | Entrust OV TLS Issuing RSA CA 2 | — | 165 d |
| 7080 | aktion-mensch.de | A | 98 | — | – | TLS1.3 | Certum DV TLS G2 R39 CA | — | 114 d |
| 7081 | alcoa.com | A | 98 | — | – | TLS1.3 | GoDaddy TLS Intermediate CA DV - R1v1 | 140 d | |
| 7082 | aldi.us | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 48 d |
| 7083 | alice.it | A | 98 | — | – | TLS1.3 | Telecom Italia Trust Technologies RSA OV SSL CA 2 | — | 177 d |
| 7084 | aliyundrive.com | A | 98 | — | – | TLS1.3 | GlobalSign GCC R46 OV TLS CA 2025 | — | 154 d |
| 7085 | allbusiness.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 36 d |
| 7086 | allmyfaves.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 67 d |
| 7087 | alternet.org | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 36 d |
| 7088 | alwaysdata.net | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 37 d |
| 7089 | amctv.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 72 d |
| 7090 | amnesty.org.uk | A | 98 | — | – | TLS1.3 | Let's Encrypt | 37 d | |
| 7091 | amny.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 45 d |
| 7092 | anandtech.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 70 d |
| 7093 | anda-tech.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 50 d |
| 7094 | archaeology.org | A | 98 | — | – | TLS1.3 | GoDaddy TLS Intermediate CA DV - R1v1 | — | 99 d |
| 7095 | armyrecognition.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 84 d |
| 7096 | art.com | A | 98 | — | – | TLS1.3 | Corporation Service Company RSA DV SSL CA 2 | — | 59 d |
| 7097 | artdaily.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 63 d |
| 7098 | artforum.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | 63 d | |
| 7099 | artisteer.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 52 d |
| 7100 | artscouncil.org.uk | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 61 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.