SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-08
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 10001 | themirror.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 98 d |
| 10002 | thenational.ae | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 95 d |
| 10003 | thenorthface.com | A | 95 | — | – | TLS1.2 | GeoTrust TLS RSA CA G1 | — | 179 d |
| 10004 | theoatmeal.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 186 d |
| 10005 | therealreal.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 53 d |
| 10006 | thewirecutter.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 84 d |
| 10007 | theworld.com | A | 95 | — | – | TLS1.2 | SSL.com TLS Issuing RSA CA R1 | — | 143 d |
| 10008 | thieme.de | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 175 d |
| 10009 | thisisinsider.com | A | 95 | — | – | TLS1.2 | GlobalSign Atlas R3 DV TLS CA 2025 Q4 | — | 63 d |
| 10010 | thomsonreuters.com | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R40 | 133 d | |
| 10011 | thoracic.org | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 137 d |
| 10012 | thriftbooks.com | A | 95 | — | – | TLS1.2 | GoDaddy TLS Intermediate CA DV - R1v1 | 167 d | |
| 10013 | tibco.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 95 d | |
| 10014 | ticaret.gov.tr | A | 95 | — | – | TLS1.2 | GeoTrust TLS RSA CA G1 | — | 102 d |
| 10015 | ticketmaster.ca | A | 95 | — | – | TLS1.2 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | — | 111 d |
| 10016 | ticketmaster.co.uk | A | 95 | — | – | TLS1.2 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | — | 111 d |
| 10017 | ticketmaster.com | A | 95 | — | – | TLS1.2 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | — | 111 d |
| 10018 | ticketweb.com | A | 95 | — | – | TLS1.2 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | — | 173 d |
| 10019 | tidelift.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 49 d |
| 10020 | timberland.com | A | 95 | — | – | TLS1.2 | GeoTrust TLS RSA CA G1 | — | 189 d |
| 10021 | timeslive.co.za | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 119 d |
| 10022 | tinkercad.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 152 d |
| 10023 | tistory.com | A | 95 | — | – | TLS1.2 | Thawte TLS RSA CA G1 | 142 d | |
| 10024 | tixr.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 167 d | |
| 10025 | tk.de | A | 95 | — | – | TLS1.2 | GeoTrust EV RSA CA G2 | 169 d | |
| 10026 | tmtpost.com | A | 95 | — | – | TLS1.2 | RapidSSL TLS RSA CA G1 | — | 57 d |
| 10027 | tntsports.co.uk | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 128 d | |
| 10028 | today.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 77 d | |
| 10029 | toei-anim.co.jp | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 119 d |
| 10030 | tokopedia.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 49 d |
| 10031 | tokyo-np.co.jp | A | 95 | — | – | TLS1.2 | Cybertrust Japan SureServer CA G4 | — | 144 d |
| 10032 | tokyuhotels.co.jp | A | 95 | — | – | TLS1.2 | Cybertrust Japan SureServer EV CA G3 | — | 108 d |
| 10033 | tom.com | A | 95 | — | – | TLS1.2 | Thawte TLS RSA CA G1 | — | 126 d |
| 10034 | toyota.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 109 d | |
| 10035 | toyota.jp | A | 95 | — | – | TLS1.2 | GlobalSign GCC R46 OV TLS CA 2025 | 131 d | |
| 10036 | tpg.com.au | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 100 d |
| 10037 | tr.ee | A | 95 | — | – | TLS1.2 | Let's Encrypt | 51 d | |
| 10038 | transparent.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 98 d | |
| 10039 | transportr.io | A | 95 | — | — | TLS1.2 | Amazon RSA 2048 M04 | — | 29 d |
| 10040 | transportstyrelsen.se | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 169 d | |
| 10041 | trb.org | A | 95 | — | – | TLS1.2 | DigiCert EV RSA CA G2 | — | 88 d |
| 10042 | treasurydirect.gov | A | 95 | — | – | TLS1.2 | Entrust OV TLS Issuing RSA CA 2 | 123 d | |
| 10043 | treccani.it | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 73 d | |
| 10044 | trekbikes.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 153 d |
| 10045 | trip.com | A | 95 | — | – | TLS1.2 | GlobalSign GCC R46 OV TLS CA 2025 | — | 97 d |
| 10046 | troweprice.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 165 d | |
| 10047 | truenas.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | 75 d | |
| 10048 | tsn.ca | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 61 d |
| 10049 | ttu.edu | A | 95 | — | – | TLS1.2 | InCommon RSA Server CA 2 | — | 101 d |
| 10050 | tu.ac.th | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA DV R36 | — | 193 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.