SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-08
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 9201 | globalvoices.org | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA DV R36 | — | 173 d |
| 9202 | globalvoicesonline.org | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA DV R36 | — | 173 d |
| 9203 | globenewswire.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 57 d |
| 9204 | gls-group.com | A | 95 | — | – | TLS1.2 | Thawte TLS RSA CA G1 | 146 d | |
| 9205 | gm.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 125 d |
| 9206 | gmanetwork.com | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA DV R36 | — | 43 d |
| 9207 | gmarket.co.kr | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 139 d |
| 9208 | gmc-uk.org | A | 95 | — | – | TLS1.2 | DigiCert EV RSA CA G2 | — | 41 d |
| 9209 | gmc.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 125 d | |
| 9210 | gmw.cn | A | 95 | — | – | TLS1.2 | TrustAsia OV TLS RSA CA 2024 | — | 132 d |
| 9211 | gnavi.co.jp | A | 95 | — | – | TLS1.2 | Cybertrust Japan SureServer CA G4 | — | 64 d |
| 9212 | goal.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 163 d |
| 9213 | goarmy.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 182 d | |
| 9214 | goldbrantech.com | A | 95 | — | – | TLS1.2 | WoTrus RSA DV SSL CA 2 | — | 62 d |
| 9215 | golfdigest.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 171 d | |
| 9216 | gome.com.cn | A | 95 | — | – | TLS1.2 | GlobalSign RSA OV SSL CA 2018 | — | 78 d |
| 9217 | goodrx.com | A | 95 | — | – | TLS1.2 | GlobalSign Atlas R3 DV TLS CA 2025 Q4 | 63 d | |
| 9218 | goope.jp | A | 95 | — | – | TLS1.2 | GlobalSign GCC R3 DV TLS CA 2020 | 156 d | |
| 9219 | gorp.jp | A | 95 | — | – | TLS1.2 | GlobalSign GCC R46 OV TLS CA 2025 | — | 182 d |
| 9220 | governmentjobs.com | A | 95 | — | – | TLS1.2 | Thawte TLS RSA CA G1 | 139 d | |
| 9221 | gpo.gov | A | 95 | — | – | TLS1.2 | DigiCert EV RSA CA G2 | 40 d | |
| 9222 | grc.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 139 d | |
| 9223 | grinnell.edu | A | 95 | — | – | TLS1.2 | InCommon Intermediate CA - DVG2C | — | 50 d |
| 9224 | groupe-sncf.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 155 d |
| 9225 | guides.co | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 120 d |
| 9226 | guildwars2.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 186 d | |
| 9227 | h3c.com | A | 95 | — | – | TLS1.2 | RapidSSL TLS RSA CA G1 | 37 d | |
| 9228 | haaretz.co.il | A | 95 | — | – | TLS1.2 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | 138 d | |
| 9229 | haaretz.com | A | 95 | — | – | TLS1.2 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | 138 d | |
| 9230 | hackmd.io | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 87 d | |
| 9231 | haier.com | A | 95 | — | – | TLS1.2 | DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1 | — | 180 d |
| 9232 | hallmarkchannel.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 102 d | |
| 9233 | hanson.net | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 89 d |
| 9234 | hao123.com | A | 95 | — | – | TLS1.2 | DigiCert Secure Site Pro G2 TLS CN RSA4096 SHA256 2022 CA1 | — | 120 d |
| 9235 | haosou.com | A | 95 | — | – | TLS1.2 | WoTrus RSA DV SSL CA 2 | — | 130 d |
| 9236 | hatena.ne.jp | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 110 d |
| 9237 | haufe.de | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 126 d |
| 9238 | hawaiinewsnow.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 82 d |
| 9239 | hbgjp.cn | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 52 d |
| 9240 | hbzy.edu.cn | A | 95 | — | – | TLS1.2 | GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1 | — | 61 d |
| 9241 | hcltech.com | A | 95 | — | – | TLS1.2 | DigiCert EV RSA CA G2 | 54 d | |
| 9242 | healthday.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | 31 d | |
| 9243 | healthfinder.gov | A | 95 | — | – | TLS1.2 | HydrantID Server CA O1 | — | 97 d |
| 9244 | hellofresh.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 116 d |
| 9245 | hellomagazine.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 80 d | |
| 9246 | hemmings.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 115 d |
| 9247 | henglin.com | A | 95 | — | – | TLS1.2 | RapidSSL TLS RSA CA G1 | — | 167 d |
| 9248 | hepsiburada.com | A | 95 | — | – | TLS1.2 | DigiCert EV RSA CA G2 | 187 d | |
| 9249 | here.com | A | 95 | — | – | TLS1.2 | GlobalSign GCC R46 OV TLS CA 2025 | 193 d | |
| 9250 | hhu.de | A | 95 | — | – | TLS1.2 | GEANT TLS ECC 1 | — | 169 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.