SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-03
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 51 | adobe.io | A | 100 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 26 d |
| 52 | adobeconnect.com | A | 100 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 67 d |
| 53 | adsoftheworld.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 22 d |
| 54 | adultswim.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M01 | — | 80 d |
| 55 | advanceautoparts.com | A | 100 | — | — | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 0 d | |
| 56 | advego.com | A | 100 | — | — | TLS1.3 | GlobalSign GCC R6 AlphaSSL CA 2025 | — | 24 d |
| 57 | ae.org | A | 100 | — | — | TLS1.3 | Let's Encrypt | — | 5 d |
| 58 | aecom.com | A | 100 | — | — | TLS1.3 | Let's Encrypt | 22 d | |
| 59 | afthemes.com | A | 100 | — | — | TLS1.3 | Let's Encrypt | — | 7 d |
| 60 | agilemanifesto.org | A | 100 | — | — | TLS1.3 | Let's Encrypt | — | 25 d |
| 61 | aha.org | A | 100 | — | — | TLS1.3 | Let's Encrypt | 29 d | |
| 62 | aiche.org | A | 100 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 46 d |
| 63 | aicpa.org | A | 100 | — | — | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 45 d |
| 64 | aicrowd.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M01 | — | 81 d |
| 65 | aintitcool.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M01 | — | 45 d |
| 66 | ainvest.com | A | 100 | — | — | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | — | 31 d |
| 67 | airbus.com | A | 100 | — | — | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | 35 d | |
| 68 | airfrance.com | A | 100 | — | — | TLS1.3 | Let's Encrypt | — | 0 d |
| 69 | airfrance.fr | A | 100 | — | — | TLS1.3 | Let's Encrypt | — | 0 d |
| 70 | airindia.com | A | 100 | — | — | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 0 d |
| 71 | aizhan.com | A | 100 | — | — | TLS1.3 | DNSPod DV TLS RSA CA 2025 | 128 d | |
| 72 | ajax.nl | A | 100 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 79 d | |
| 73 | aka.ms | A | 100 | — | — | TLS1.3 | Microsoft TLS G2 RSA CA OCSP 16 | — | 76 d |
| 74 | akeo.ie | A | 100 | — | — | TLS1.3 | Let's Encrypt | — | 26 d |
| 75 | al-anon.org | A | 100 | — | — | TLS1.3 | Starfield Secure Certificate Authority - G2 | — | 0 d |
| 76 | ala.org | A | 100 | — | — | TLS1.3 | Let's Encrypt | 12 d | |
| 77 | alaraby.co.uk | A | 100 | — | — | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 8 d |
| 78 | alaskapublic.org | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 137 d |
| 79 | alcoa.com | A | 100 | — | — | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | 0 d | |
| 80 | alexa.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 18 d |
| 81 | allmende.io | A | 100 | — | — | TLS1.3 | Let's Encrypt | 30 d | |
| 82 | allthingsd.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M01 | — | 128 d |
| 83 | alltrails.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 36 d |
| 84 | allwinscasino.net | A | 100 | — | — | TLS1.3 | Encryption Everywhere DV TLS CA - G2 | — | 31 d |
| 85 | almanac.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 71 d |
| 86 | als.org | A | 100 | — | — | TLS1.3 | Let's Encrypt | — | 21 d |
| 87 | altavista.com | A | 100 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 51 d |
| 88 | altium.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M01 | — | 112 d |
| 89 | alz.org | A | 100 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 108 d | |
| 90 | amazon-adsystem.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M01 | — | 71 d |
| 91 | amazon.in | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 114 d |
| 92 | ambest.com | A | 100 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 0 d |
| 93 | ameba.jp | A | 100 | — | — | TLS1.3 | Cybertrust Japan SureServer CA G4 | — | 0 d |
| 94 | americanprogress.org | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M04 | — | 119 d |
| 95 | americanscientist.org | A | 100 | — | — | TLS1.3 | Let's Encrypt | — | 35 d |
| 96 | americorps.gov | A | 100 | — | — | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 93 d |
| 97 | amtrak.com | A | 100 | — | — | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 116 d |
| 98 | amzn.com | A | 100 | — | — | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 16 d |
| 99 | analog.com | A | 100 | — | — | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 38 d |
| 100 | animoto.com | A | 100 | — | — | TLS1.3 | Amazon RSA 2048 M01 | — | 119 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are weighted into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.