SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-08
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 9051 | dickblick.com | A | 95 | — | – | TLS1.2 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 163 d | |
| 9052 | dietdoctor.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | 77 d | |
| 9053 | digikey.com | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | 56 d | |
| 9054 | discogs.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 86 d | |
| 9055 | discovery.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 123 d |
| 9056 | discoveryeducation.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 100 d | |
| 9057 | disneystore.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | 72 d | |
| 9058 | divephotoguide.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 67 d |
| 9059 | divisionmidway.org | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 37 d |
| 9060 | diy.com | A | 95 | — | – | TLS1.2 | GlobalSign GCC R46 DV TLS CA 2025 | 102 d | |
| 9061 | djljz.cn | A | 95 | — | – | TLS1.2 | RapidSSL TLS RSA CA G1 | 169 d | |
| 9062 | dlsite.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 138 d | |
| 9063 | dmm.co.jp | A | 95 | — | – | TLS1.2 | GlobalSign RSA OV SSL CA 2018 | — | 136 d |
| 9064 | dmm.com | A | 95 | — | – | TLS1.2 | GlobalSign RSA OV SSL CA 2018 | — | 136 d |
| 9065 | dn.pt | A | 95 | — | – | TLS1.2 | Let's Encrypt | 31 d | |
| 9066 | dnnsoftware.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 115 d |
| 9067 | dodge.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | 85 d | |
| 9068 | donga.com | A | 95 | — | – | TLS1.2 | GlobalSign GCC R46 OV TLS CA 2025 | — | 172 d |
| 9069 | dost.gov.ph | A | 95 | — | — | TLS1.2 | Let's Encrypt | — | 0 d |
| 9070 | douban.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 49 d |
| 9071 | downtoearth.org.in | A | 95 | — | – | TLS1.2 | Let's Encrypt | 27 d | |
| 9072 | drom.ru | A | 95 | — | – | TLS1.2 | GlobalSign RSA OV SSL CA 2018 | — | 91 d |
| 9073 | drupal.org | A | 95 | — | – | TLS1.2 | GlobalSign Atlas R3 DV TLS CA 2025 Q4 | — | 63 d |
| 9074 | dsw.com | A | 95 | — | — | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | — | 91 d |
| 9075 | dsyun.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 58 d |
| 9076 | dtf.ru | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 46 d |
| 9077 | duden.de | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 172 d |
| 9078 | duolingo.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 185 d |
| 9079 | duq.edu | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA DV E36 | — | 104 d |
| 9080 | dwz.cn | A | 95 | — | – | TLS1.2 | GlobalSign RSA OV SSL CA 2018 | 77 d | |
| 9081 | easeus.com | A | 95 | — | – | TLS1.2 | Encryption Everywhere DV TLS CA - G2 | — | 62 d |
| 9082 | easyspace.com | A | 95 | — | – | TLS1.2 | RapidSSL TLS RSA CA G1 | — | 153 d |
| 9083 | eatright.org | A | 95 | — | – | TLS1.2 | GoDaddy TLS Intermediate CA EV - R1v1 | — | 160 d |
| 9084 | eb.ac.cn | A | 95 | — | – | TLS1.2 | Encryption Everywhere DV TLS CA - G2 | — | 173 d |
| 9085 | eb.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 79 d |
| 9086 | ecco.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 122 d |
| 9087 | eclipse.dev | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 140 d |
| 9088 | eclipse.org | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 42 d | |
| 9089 | ecoflow.com | A | 95 | — | – | TLS1.2 | GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1 | — | 28 d |
| 9090 | ecolab.com | A | 95 | — | – | TLS1.2 | Entrust OV TLS Issuing RSA CA 2 | — | 165 d |
| 9091 | edaily.co.kr | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA DV R36 | 155 d | |
| 9092 | edgewall.org | A | 95 | — | – | TLS1.2 | Let's Encrypt | 85 d | |
| 9093 | edsurge.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 139 d |
| 9094 | edu.gov.ru | A | 95 | — | – | TLS1.2 | Russian Trusted Sub CA | — | 223 d |
| 9095 | education.gov.uk | A | 95 | — | – | TLS1.2 | GlobalSign GCC R46 OV TLS CA 2025 | — | 177 d |
| 9096 | eeoc.gov | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 60 d | |
| 9097 | efunda.com | A | 95 | — | – | TLS1.2 | SSL.com EV TLS Issuing RSA CA R1 | — | 132 d |
| 9098 | ehess.fr | A | 95 | — | – | TLS1.2 | GEANT TLS ECC 1 | 34 d | |
| 9099 | ejsino.com | A | 95 | — | – | TLS1.2 | RapidSSL TLS RSA CA G1 | — | 96 d |
| 9100 | ejsino.net | A | 95 | — | – | TLS1.2 | Xcc Trust DV SSL CA | — | 87 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.