CertH certH

SSL Grade Leaderboard: Top 100 Websites

Scanned from 20,000 top global websites · Updated 2026-11-08

12,269Domains
32%A+ share (3944)
94.8Avg score
↑ 111Improved this month
#DomainGradeScore30d trendΔTLSIssuerHSTSExpires
9101elecfans.comA95—–TLS1.2Sectigo Public Server Authentication CA DV R36—145 d
9102electronicdesign.comA95—–TLS1.2Amazon RSA 2048 M04—123 d
9103elfinanciero.com.mxA95—–TLS1.2Amazon RSA 2048 M04114 d
9104elmostrador.clA95—–TLS1.2RapidSSL TLS RSA CA G1—111 d
9105elnuevodia.comA95—–TLS1.2Amazon RSA 2048 M04—85 d
9106elong.comA95—–TLS1.2GlobalSign RSA OV SSL CA 2018—140 d
9107elsaltodiario.comA95—–TLS1.2Let's Encrypt65 d
9108elsevier.comA95—–TLS1.2Amazon RSA 2048 M0496 d
9109eluniversal.com.mxA95—–TLS1.2Amazon RSA 2048 M04—146 d
9110eluniverso.comA95—–TLS1.2Amazon RSA 2048 M04—107 d
9111emory.eduA95—–TLS1.2Amazon RSA 2048 M01160 d
9112empireonline.comA95—–TLS1.2Amazon RSA 2048 M04—74 d
9113emsc-csem.orgA95—–TLS1.2Let's Encrypt52 d
9114enedis.frA95—–TLS1.2DigiCert G2 TLS EU RSA4096 SHA384 2022 CA162 d
9115energystar.govA95—–TLS1.2DigiCert Global G2 TLS RSA SHA256 2020 CA144 d
9116eplus.jpA95—–TLS1.2SECOM Passport for Web SR 3.0 CA—72 d
9117epson.jpA95—–TLS1.2Amazon RSA 2048 M04—123 d
9118equinenow.comA95—–TLS1.2Amazon RSA 2048 M01—139 d
9119eqxiu.comA95—–TLS1.2RapidSSL TLS RSA CA G1—57 d
9120erau.eduA95—–TLS1.2DigiCert Global G2 TLS RSA SHA256 2020 CA1—146 d
9121eso.orgA95—–TLS1.2GEANT TLS RSA 1153 d
9122espncricinfo.comA95—–TLS1.2Amazon RSA 2048 M01—75 d
9123espritgames.comA95—–TLS1.2GlobalSign GCC R46 DV TLS CA 2025—194 d
9124esri.comA95—–TLS1.2DigiCert Global G2 TLS RSA SHA256 2020 CA1123 d
9125estranky.czA95—–TLS1.2RapidSSL TLS RSA CA G1—95 d
9126etsy.comA95–TLS1.2GlobalSign Atlas R46 DV TLS CA 2026 Q4—182 d
9127eurekalert.orgA95—–TLS1.2Amazon RSA 2048 M04—130 d
9128eventim-light.comA95—–TLS1.2Let's Encrypt79 d
9129evergreen.eduA95—–TLS1.2DigiCert Global G2 TLS RSA SHA256 2020 CA1109 d
9130everydayhealth.comA95—–TLS1.2Amazon RSA 2048 M04116 d
9131everything2.comA95—–TLS1.2Amazon RSA 2048 M01—102 d
9132ewuye.vipA95—–TLS1.2Let's Encrypt—84 d
9133excelsecu.com.cnA95—–TLS1.2Encryption Everywhere DV TLS CA - G2—29 d
9134explainthatstuff.comA95—–TLS1.2Let's Encrypt79 d
9135exprealty.comA95—–TLS1.2Amazon RSA 2048 M04151 d
9136familysearch.orgA95—–TLS1.2DigiCert Global G2 TLS RSA SHA256 2020 CA1146 d
9137fapesp.brA95——TLS1.2Thawte TLS RSA CA G1—46 d
9138fast.comA95—–TLS1.2DigiCert Global G2 TLS RSA SHA256 2020 CA1160 d
9139fau.eduA95—–TLS1.2DigiCert Global G2 TLS RSA SHA256 2020 CA188 d
9140fci.beA95—–TLS1.2GeoTrust TLS RSA CA G1—61 d
9141federalnewsnetwork.comA95—–TLS1.2GlobalSign Atlas R46 DV TLS CA 2026 Q4189 d
9142femmeactuelle.frA95—–TLS1.2Amazon RSA 2048 M0135 d
9143fender.comA95—–TLS1.2Amazon RSA 2048 M01—82 d
9144ffm.bioA95—–TLS1.2Let's Encrypt—83 d
9145ffm.toA95—–TLS1.2Let's Encrypt—83 d
9146fiba.basketballA95—–TLS1.2GandiCert27 d
9147finanznachrichten.deA95—–TLS1.2RapidSSL TLS ECC CA G1—158 d
9148findresultshub.comA95—–TLS1.2ZeroSSL ECC DV SSL CA 2—86 d
9149finra.orgA95—–TLS1.2Amazon RSA 2048 M04156 d
9150firstcry.comA95—–TLS1.2Amazon RSA 2048 M04141 d
183 / 244

Track grade changes for your domains

Sign up free, watch your domains and get alerted the moment a grade drops.

FAQ

How often is the SSL leaderboard updated?

Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.

How is the SSL grade calculated?

Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.

What does an A+ SSL rating mean?

A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.

Methodology

CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.

What is an SSL grade?

An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.

Why track certificate health over time?

Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.