SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-08
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 9301 | igvita.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 47 d |
| 9302 | iheart.com | A | 95 | — | – | TLS1.2 | GlobalSign Atlas R3 DV TLS CA 2026 Q1 | 122 d | |
| 9303 | ihs.gov | A | 95 | — | – | TLS1.2 | HydrantID Server CA O1 | 114 d | |
| 9304 | iinet.net.au | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 100 d |
| 9305 | ijs.si | A | 95 | — | – | TLS1.2 | GEANT TLS RSA 1 | 41 d | |
| 9306 | iki.fi | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 58 d |
| 9307 | ilfattoquotidiano.it | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 145 d |
| 9308 | ilgiornale.it | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 49 d |
| 9309 | ilpost.it | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 135 d |
| 9310 | imageoptim.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | 71 d | |
| 9311 | imageshack.com | A | 95 | — | – | TLS1.2 | Go Daddy Secure Certificate Authority - G2 | 121 d | |
| 9312 | imageshack.us | A | 95 | — | – | TLS1.2 | Go Daddy Secure Certificate Authority - G2 | — | 100 d |
| 9313 | imax.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 103 d |
| 9314 | imgur.com | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA DV R36 | 100 d | |
| 9315 | imyfone.com | A | 95 | — | – | TLS1.2 | RapidSSL TLS RSA CA G1 | 73 d | |
| 9316 | in.gov.br | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | — | 139 d |
| 9317 | incibe.es | A | 95 | — | — | TLS1.2 | Sectigo Public Server Authentication CA EV R36 | — | 32 d |
| 9318 | incometaxindia.gov.in | A | 95 | — | – | TLS1.2 | GlobalSign GCC R6 AlphaSSL CA 2025 | 115 d | |
| 9319 | incomplete-chain.badssl.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 51 d |
| 9320 | independent.co.uk | A | 95 | — | – | TLS1.2 | GlobalSign Atlas R3 DV TLS CA 2026 Q1 | 135 d | |
| 9321 | indexmundi.com | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA DV R36 | 146 d | |
| 9322 | industryweek.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 123 d |
| 9323 | indy100.com | A | 95 | — | – | TLS1.2 | GlobalSign Atlas R3 DV TLS CA 2026 Q1 | 135 d | |
| 9324 | ine.es | A | 95 | — | – | TLS1.2 | FNMT-RCM | — | 39 d |
| 9325 | inflibnet.ac.in | A | 95 | — | – | TLS1.2 | RapidSSL TLS RSA CA G1 | 85 d | |
| 9326 | influxdata.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 52 d | |
| 9327 | infogr.am | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 76 d |
| 9328 | infogram.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 76 d | |
| 9329 | infoq.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 143 d |
| 9330 | informaconnect.com | A | 95 | — | – | TLS1.2 | GlobalSign Atlas R3 DV TLS CA 2025 Q4 | 63 d | |
| 9331 | informatica.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | 32 d | |
| 9332 | informit.com | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | — | 174 d |
| 9333 | infosys.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 189 d | |
| 9334 | inquirer.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 116 d | |
| 9335 | insecure.org | A | 95 | — | – | TLS1.3 | Let's Encrypt | — | 39 d |
| 9336 | insider.com | A | 95 | — | – | TLS1.2 | GlobalSign Atlas R3 DV TLS CA 2025 Q4 | — | 63 d |
| 9337 | insight.com | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | 124 d | |
| 9338 | insurancejournal.com | A | 95 | — | – | TLS1.2 | SSL.com TLS Issuing RSA CA R1 | — | 185 d |
| 9339 | intechopen.com | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | 159 d | |
| 9340 | inter.it | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 66 d | |
| 9341 | interactivebrokers.com | A | 95 | — | – | TLS1.2 | DigiCert EV RSA CA G2 | 153 d | |
| 9342 | internationalwomensday.com | A | 95 | — | – | TLS1.2 | Go Daddy Secure Certificate Authority - G2 | 136 d | |
| 9343 | interpark.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 118 d |
| 9344 | invaluable.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 77 d |
| 9345 | investingnews.com | A | 95 | — | – | TLS1.2 | GlobalSign Atlas R3 DV TLS CA 2026 Q2 | — | 65 d |
| 9346 | invisalign.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 49 d |
| 9347 | iom.int | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 60 d |
| 9348 | ipb.ac.id | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 42 d |
| 9349 | ipea.gov.br | A | 95 | — | — | TLS1.2 | Sectigo Public Server Authentication CA DV R36 | 112 d | |
| 9350 | iqilu.com | A | 95 | — | – | TLS1.2 | GlobalSign RSA OV SSL CA 2018 | — | 141 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.