SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-07
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 8201 | euroweeklynews.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 79 d | |
| 8202 | eveeno.com | A+ | 98 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 140 d | |
| 8203 | evonik.com | A+ | 98 | — | – | TLS1.3 | SwissSign RSA TLS DV ICA 2022 - 1 | 109 d | |
| 8204 | expedia.co.uk | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 33 d | |
| 8205 | expedia.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 48 d | |
| 8206 | experian.com | A+ | 98 | — | – | TLS1.3 | Sectigo Public Server Authentication CA EV R36 | 82 d | |
| 8207 | f5.com | A+ | 98 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R40 | 31 d | |
| 8208 | farnell.com | A+ | 98 | — | – | TLS1.3 | Entrust OV TLS Issuing RSA CA 2 | 162 d | |
| 8209 | fas.org | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 82 d | |
| 8210 | fifa.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 81 d | |
| 8211 | financialpost.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 83 d | |
| 8212 | fiocruz.br | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 45 d | |
| 8213 | flattr.com | A+ | 98 | — | – | TLS1.3 | Google Trust Services | 60 d | |
| 8214 | flippingbook.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 75 d | |
| 8215 | floodsmart.gov | A+ | 98 | — | – | TLS1.3 | Cloudflare TLS Issuing ECC CA 3 | 38 d | |
| 8216 | flutter.dev | A+ | 98 | — | – | TLS1.3 | Google Trust Services | 42 d | |
| 8217 | foleon.com | A+ | 98 | — | – | TLS1.3 | Google Trust Services | 79 d | |
| 8218 | forcepoint.com | A+ | 98 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 79 d | |
| 8219 | fordfoundation.org | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 76 d | |
| 8220 | fourmilab.ch | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 82 d | |
| 8221 | fr.wikisource.org | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 57 d | |
| 8222 | framaforms.org | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 86 d | |
| 8223 | framagit.org | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 78 d | |
| 8224 | franceinfo.fr | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 56 d | |
| 8225 | francetravail.fr | A+ | 98 | — | – | TLS1.3 | Sectigo Public Server Authentication CA EV R36 | 28 d | |
| 8226 | freebsd.org | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 34 d | |
| 8227 | freeimage.host | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 63 d | |
| 8228 | fullstory.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 67 d | |
| 8229 | futurism.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 51 d | |
| 8230 | fws.gov | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 87 d | |
| 8231 | gamerant.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 61 d | |
| 8232 | gawker.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 78 d | |
| 8233 | gea.com | A+ | 98 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 104 d | |
| 8234 | geeksforgeeks.org | A+ | 98 | — | – | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | 46 d | |
| 8235 | geico.com | A+ | 98 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 109 d | |
| 8236 | geneve.ch | A+ | 98 | — | – | TLS1.3 | SwissSign RSA TLS OV ICA 2022 - 1 | 188 d | |
| 8237 | geo.de | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 50 d | |
| 8238 | geocaching.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 38 d | |
| 8239 | getcomposer.org | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 30 d | |
| 8240 | github.blog | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 81 d | |
| 8241 | giustizia.it | A+ | 98 | — | – | TLS1.3 | Telecom Italia Trust Technologies RSA OV SSL CA 2 | 154 d | |
| 8242 | givemesport.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 64 d | |
| 8243 | glpi-project.org | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 49 d | |
| 8244 | gohugo.io | A+ | 98 | — | — | TLS1.3 | Let's Encrypt | 17 d | |
| 8245 | gouvernement.lu | A+ | 98 | — | – | TLS1.3 | GEANT TLS RSA 1 | 121 d | |
| 8246 | gpb.org | A+ | 98 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 38 d | |
| 8247 | grantland.com | A+ | 98 | — | – | TLS1.3 | Let's Encrypt | 60 d | |
| 8248 | gravatar.com | A+ | 98 | TLS1.3 | Let's Encrypt | 60 d | |||
| 8249 | gsu.edu | A+ | 98 | — | – | TLS1.3 | InCommon RSA Server CA 2 | 149 d | |
| 8250 | gwdg.de | A+ | 98 | — | – | TLS1.3 | GEANT TLS RSA 1 | 184 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.