SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-08
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 9251 | hihonor.com | A | 95 | — | – | TLS1.2 | Actalis Organization Validated Server CA G3 | — | 28 d |
| 9252 | hilton.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 140 d |
| 9253 | hinet.net | A | 95 | — | – | TLS1.2 | Chunghwa Telecom GCC R46 OV TLS CA 2025 | — | 69 d |
| 9254 | hit.edu.cn | A | 95 | — | – | TLS1.2 | Thawte TLS RSA CA G1 | — | 58 d |
| 9255 | hitched.co.uk | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 93 d |
| 9256 | hktdc.com | A | 95 | — | – | TLS1.2 | GlobalSign GCC R46 OV TLS CA 2025 | 167 d | |
| 9257 | hnjing.com | A | 95 | — | – | TLS1.2 | TrustAsia DV TLS RSA CA 2024 | — | 76 d |
| 9258 | hntuji.com | A | 95 | — | – | TLS1.2 | RapidSSL TLS RSA CA G1 | — | 41 d |
| 9259 | hnykxx.com | A | 95 | — | – | TLS1.2 | Xcc Trust DV SSL CA | — | 74 d |
| 9260 | hoganlovells.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 98 d |
| 9261 | hola.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 114 d | |
| 9262 | home.pl | A | 95 | — | – | TLS1.2 | Certum EV TLS G2 R39 CA | — | 144 d |
| 9263 | homes.co.jp | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 185 d |
| 9264 | honor.com | A | 95 | — | – | TLS1.2 | Actalis Organization Validated Server CA G3 | 92 d | |
| 9265 | horiba.com | A | 95 | — | – | TLS1.2 | Entrust EV TLS Issuing RSA CA 2 | 98 d | |
| 9266 | hotel-bb.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 143 d | |
| 9267 | hotpepper.jp | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 180 d | |
| 9268 | housecallpro.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 133 d |
| 9269 | houstonmethodist.org | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 97 d | |
| 9270 | hoyoverse.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 168 d |
| 9271 | hsbc.com | A | 95 | — | – | TLS1.2 | DigiCert EV RSA CA G2 | 93 d | |
| 9272 | hse.gov.uk | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 47 d |
| 9273 | hslda.org | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 66 d |
| 9274 | htcdev.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 165 d |
| 9275 | htxy.net | A | 95 | — | – | TLS1.2 | Xcc Trust DV SSL CA | — | 43 d |
| 9276 | huanghai.co | A | 95 | — | – | TLS1.2 | Encryption Everywhere DV TLS CA - G2 | — | 91 d |
| 9277 | huanqiu.com | A | 95 | — | – | TLS1.2 | GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1 | 40 d | |
| 9278 | huaweicloud.com | A | 95 | — | – | TLS1.2 | GlobalSign RSA OV SSL CA 2018 | 142 d | |
| 9279 | hubpages.com | A | 95 | — | — | TLS1.2 | Amazon RSA 2048 M01 | — | 52 d |
| 9280 | hudl.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 96 d | |
| 9281 | huffingtonpost.es | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 86 d |
| 9282 | huji.ac.il | A | 95 | — | – | TLS1.2 | GEANT TLS RSA 1 | — | 32 d |
| 9283 | hulkshare.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 39 d |
| 9284 | hunan.gov.cn | A | 95 | — | — | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | — | 100 d |
| 9285 | hupu.com | A | 95 | — | – | TLS1.2 | GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1 | — | 27 d |
| 9286 | hzgjp.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 53 d |
| 9287 | iarc.fr | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 41 d |
| 9288 | ibs.it | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 41 d |
| 9289 | icaew.com | A | 95 | — | – | TLS1.2 | GlobalSign RSA OV SSL CA 2018 | 106 d | |
| 9290 | icc-cricket.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | 56 d | |
| 9291 | icims.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | 61 d | |
| 9292 | icm.edu.pl | A | 95 | — | – | TLS1.2 | GEANT TLS RSA 1 | 91 d | |
| 9293 | icq.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | 51 d | |
| 9294 | idea.int | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 132 d | |
| 9295 | idealist.org | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 69 d |
| 9296 | identi.ca | A | 95 | — | — | TLS1.2 | Let's Encrypt | — | 29 d |
| 9297 | idp.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 144 d |
| 9298 | idrc.ca | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 33 d |
| 9299 | ifeng.com | A | 95 | — | – | TLS1.2 | TrustAsia OV TLS RSA CA 2024 | — | 141 d |
| 9300 | ifmo.ru | A | 95 | — | – | TLS1.2 | GlobalSign GCC R3 DV TLS CA 2020 | — | 35 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.