SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-08
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 9451 | lazada.com.ph | A | 95 | — | – | TLS1.2 | GlobalSign GCC R3 OV TLS CA 2024 | 47 d | |
| 9452 | lazada.sg | A | 95 | — | – | TLS1.2 | GlobalSign GCC R3 OV TLS CA 2024 | 47 d | |
| 9453 | lazada.vn | A | 95 | — | – | TLS1.2 | GlobalSign GCC R3 OV TLS CA 2024 | 47 d | |
| 9454 | lci.fr | A | 95 | — | – | TLS1.2 | GlobalSign RSA OV SSL CA 2018 | — | 133 d |
| 9455 | leagueoflegends.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 97 d | |
| 9456 | learningapps.org | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 74 d |
| 9457 | legislation.gov.uk | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 153 d | |
| 9458 | lehighvalleylive.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 122 d |
| 9459 | leicestermercury.co.uk | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 57 d |
| 9460 | lemoniteur.fr | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 96 d | |
| 9461 | lenta.ru | A | 95 | — | – | TLS1.2 | GlobalSign GCC R3 DV TLS CA 2020 | — | 128 d |
| 9462 | leparisien.fr | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 102 d | |
| 9463 | lepetitjournal.com | A | 95 | — | – | TLS1.2 | RapidSSL TLS RSA CA G1 | — | 60 d |
| 9464 | lepoint.fr | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 56 d |
| 9465 | levada.ru | A | 95 | — | – | TLS1.2 | Let's Encrypt | 42 d | |
| 9466 | lexilogos.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 54 d |
| 9467 | lexis.com | A | 95 | — | – | TLS1.2 | GlobalSign RSA OV SSL CA 2018 | — | 73 d |
| 9468 | lexisnexis.com | A | 95 | — | – | TLS1.2 | GlobalSign RSA OV SSL CA 2018 | 36 d | |
| 9469 | lexpress.fr | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 105 d |
| 9470 | lexus.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 109 d | |
| 9471 | lffdj.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 32 d |
| 9472 | lg.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 57 d |
| 9473 | lge.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 80 d |
| 9474 | lgmi.com | A | 95 | — | – | TLS1.2 | CATrust RSA OV SSL CA | — | 154 d |
| 9475 | libero.it | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | — | 62 d |
| 9476 | libraryjournal.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 45 d |
| 9477 | life360.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 54 d |
| 9478 | lifo.gr | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 29 d |
| 9479 | linkr.bio | A | 95 | — | — | TLS1.2 | Google Trust Services | — | 13 d |
| 9480 | linktr.ee | A | 95 | – | TLS1.2 | Let's Encrypt | — | 79 d | |
| 9481 | live5news.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 83 d | |
| 9482 | livenation.com | A | 95 | — | – | TLS1.2 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | 170 d | |
| 9483 | liverpoolecho.co.uk | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 57 d |
| 9484 | lixil.co.jp | A | 95 | — | – | TLS1.2 | Let's Encrypt | 76 d | |
| 9485 | llvm.org | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 81 d |
| 9486 | local10.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 53 d |
| 9487 | logi.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 146 d |
| 9488 | logitech.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 172 d | |
| 9489 | logitechg.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 172 d | |
| 9490 | longbeach.gov | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 67 d |
| 9491 | longbets.org | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 141 d |
| 9492 | looksmart.com | A | 95 | — | – | TLS1.2 | GlobalSign GCC R6 AlphaSSL CA 2025 | — | 91 d |
| 9493 | louisville.edu | A | 95 | — | – | TLS1.2 | InCommon RSA Server CA 2 | — | 93 d |
| 9494 | lpga.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 78 d | |
| 9495 | ltd.com | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA DV R36 | — | 27 d |
| 9496 | lto.de | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 175 d | |
| 9497 | ly.com | A | 95 | — | – | TLS1.2 | GlobalSign RSA OV SSL CA 2018 | — | 140 d |
| 9498 | lyrics.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 157 d |
| 9499 | lyricsfreak.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 42 d |
| 9500 | lyst.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 163 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.