SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-08
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 9701 | pearsonvue.com | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | — | 86 d |
| 9702 | pennlive.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 121 d |
| 9703 | penzu.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 101 d |
| 9704 | people.com.cn | A | 95 | — | – | TLS1.2 | WoTrus OV Server CA [Run by the Issuer] | — | 28 d |
| 9705 | periscope.tv | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 95 d | |
| 9706 | petfinder.com | A | 95 | — | – | TLS1.2 | ZeroSSL RSA DV SSL CA 2 | 57 d | |
| 9707 | pew.org | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 78 d |
| 9708 | pewtrusts.org | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 78 d |
| 9709 | pharmazeutische-zeitung.de | A | 95 | — | – | TLS1.2 | Starfield TLS Intermediate CA DV - R1v1 | — | 174 d |
| 9710 | philamuseum.org | A | 95 | — | – | TLS1.2 | Let's Encrypt | 69 d | |
| 9711 | philly.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 115 d |
| 9712 | pho.to | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA DV R36 | — | 148 d |
| 9713 | phoenix.gov | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 70 d | |
| 9714 | phpmyadmin.net | A | 95 | — | – | TLS1.2 | Let's Encrypt | 50 d | |
| 9715 | pia.jp | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 180 d |
| 9716 | piasd.org | A | 95 | — | – | TLS1.2 | GoDaddy TLS Intermediate CA DV - R1v1 | — | 36 d |
| 9717 | pimconline.com | A | 95 | — | – | TLS1.2 | DNSPod DV TLS RSA CA G1 | — | 115 d |
| 9718 | pinecone.io | A | 95 | — | – | TLS1.2 | Let's Encrypt | 57 d | |
| 9719 | pingidentity.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 104 d | |
| 9720 | pinnaclesys.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 144 d | |
| 9721 | pionline.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 186 d |
| 9722 | pirelli.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 154 d |
| 9723 | pixiv.net | A | 95 | — | – | TLS1.2 | Google Trust Services | — | 54 d |
| 9724 | playground.ru | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 28 d |
| 9725 | playstation.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 51 d | |
| 9726 | plus.com | A | 95 | — | – | TLS1.2 | GeoTrust TLS RSA CA G1 | — | 155 d |
| 9727 | pnnl.gov | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 89 d | |
| 9728 | podtrac.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 59 d |
| 9729 | pokemon.co.jp | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 156 d | |
| 9730 | pokemon.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 107 d |
| 9731 | polaris.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 163 d |
| 9732 | politico.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 118 d | |
| 9733 | pomona.edu | A | 95 | — | – | TLS1.2 | InCommon Intermediate CA - OVG2C | 159 d | |
| 9734 | porsche.com | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA DV R36 | 94 d | |
| 9735 | postech.ac.kr | A | 95 | — | – | TLS1.2 | Thawte TLS RSA CA G1 | — | 50 d |
| 9736 | powerdekor-woodfloor.com | A | 95 | — | – | TLS1.2 | TrustAsia DV TLS RSA CA 2024 | — | 146 d |
| 9737 | pp.ru | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 70 d |
| 9738 | pp.ua | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 63 d |
| 9739 | pr.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 85 d |
| 9740 | praca.gov.pl | A | 95 | — | – | TLS1.2 | Certum OV TLS G2 R39 CA | 86 d | |
| 9741 | presidencia.gov.co | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 79 d |
| 9742 | prezi.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 108 d | |
| 9743 | priceless.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 108 d | |
| 9744 | privacybadger.org | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 70 d |
| 9745 | processon.com | A | 95 | — | – | TLS1.2 | GlobalSign GCC R6 AlphaSSL CA 2025 | — | 63 d |
| 9746 | progressive.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 138 d | |
| 9747 | progressive.org | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 30 d |
| 9748 | proko.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 63 d |
| 9749 | propublica.org | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 95 d | |
| 9750 | pscp.tv | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 113 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.