SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-07
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 7751 | sfwa.org | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 45 d |
| 7752 | sheknows.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | 71 d | |
| 7753 | shinyjoker.org | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 73 d |
| 7754 | shjdsx.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 47 d |
| 7755 | sho.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 57 d |
| 7756 | shochiku.co.jp | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 56 d |
| 7757 | shp.ee | A | 98 | — | – | TLS1.3 | GlobalSign GCC R6 AlphaSSL CA 2025 | — | 30 d |
| 7758 | si.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 87 d |
| 7759 | sierraclub.org | A | 98 | — | – | TLS1.3 | GoDaddy TLS Intermediate CA DV - R1v1 | — | 140 d |
| 7760 | simplybook.it | A | 98 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | — | 61 d |
| 7761 | site123.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 34 d |
| 7762 | site123.me | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 34 d |
| 7763 | siue.edu | A | 98 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | — | 184 d |
| 7764 | sjsu.edu | A | 98 | — | – | TLS1.3 | InCommon Intermediate CA - DVG2C | — | 121 d |
| 7765 | skyscanner.net | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 61 d |
| 7766 | slu.edu | A | 98 | — | – | TLS1.3 | InCommon Intermediate CA - OVG2C | 186 d | |
| 7767 | smartcompany.com.au | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 65 d |
| 7768 | snexplores.org | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 68 d |
| 7769 | socialbakers.com | A | 98 | — | – | TLS1.3 | GoDaddy TLS Intermediate CA DV - R1v1 | — | 147 d |
| 7770 | socialpilot.co | A | 98 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | — | 39 d |
| 7771 | sothebysrealty.com | A | 98 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | — | 126 d |
| 7772 | sourceforge.io | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 75 d |
| 7773 | sourceforge.net | A | 98 | TLS1.3 | Let's Encrypt | — | 81 d | ||
| 7774 | southafrica.net | A | 98 | — | – | TLS1.3 | GoDaddy TLS Intermediate CA DV - R1v1 | — | 69 d |
| 7775 | southparkstudios.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 52 d |
| 7776 | spaceref.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 44 d |
| 7777 | spainslov.ru | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 77 d |
| 7778 | spectator.co.uk | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 86 d |
| 7779 | spectator.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 74 d |
| 7780 | spike.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 43 d |
| 7781 | spinfevercasino.io | A | 98 | — | — | TLS1.3 | Let's Encrypt | — | 31 d |
| 7782 | sportico.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | 62 d | |
| 7783 | spoti.fi | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 60 d |
| 7784 | spotify.link | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 67 d |
| 7785 | sputniknews.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 38 d |
| 7786 | sputniknews.ru | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 38 d |
| 7787 | spyfu.com | A | 98 | — | – | TLS1.3 | Starfield TLS Intermediate CA DV - R1v1 | — | 88 d |
| 7788 | sqlite.org | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 81 d |
| 7789 | stackoverflow.com | A | 98 | TLS1.3 | Let's Encrypt | — | 65 d | ||
| 7790 | statsperform.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 30 d |
| 7791 | steelcase.com | A | 98 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 100 d |
| 7792 | stereogum.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 38 d |
| 7793 | stonewall.org.uk | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 65 d |
| 7794 | storables.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 82 d |
| 7795 | strava.com | A | 98 | — | – | TLS1.3 | GoDaddy TLS Intermediate CA DV - R1v1 | — | 133 d |
| 7796 | stsci.edu | A | 98 | — | – | TLS1.3 | InCommon RSA Server CA 2 | — | 81 d |
| 7797 | study.com | A | 98 | — | – | TLS1.3 | GlobalSign GCC R6 AlphaSSL CA 2025 | — | 57 d |
| 7798 | stylecaster.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | 66 d | |
| 7799 | styleshout.com | A | 98 | — | – | TLS1.3 | Let's Encrypt | — | 61 d |
| 7800 | sulekha.com | A | 98 | — | – | TLS1.3 | GoDaddy TLS Intermediate CA DV - R1v1 | 83 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.