SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-08
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 10101 | unibet.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | 74 d | |
| 10102 | unibo.it | A | 95 | — | – | TLS1.2 | GEANT TLS RSA 1 | — | 105 d |
| 10103 | unibocconi.it | A | 95 | — | – | TLS1.2 | GEANT TLS RSA 1 | 90 d | |
| 10104 | unifrance.org | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA DV R36 | — | 45 d |
| 10105 | unionesarda.it | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | — | 28 d |
| 10106 | unionleader.com | A | 95 | — | — | TLS1.2 | Google Trust Services | 29 d | |
| 10107 | unipa.it | A | 95 | — | – | TLS1.2 | GEANT TLS RSA 1 | — | 120 d |
| 10108 | unipd.it | A | 95 | — | – | TLS1.2 | GEANT TLS RSA 1 | 91 d | |
| 10109 | unipg.it | A | 95 | — | — | TLS1.2 | GEANT TLS RSA 1 | 5 d | |
| 10110 | unipi.it | A | 95 | — | – | TLS1.2 | GEANT TLS RSA 1 | — | 174 d |
| 10111 | uniqlo.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 164 d | |
| 10112 | unisa.ac.za | A | 95 | — | – | TLS1.2 | HARICA DV TLS ECC | — | 95 d |
| 10113 | univ-lyon1.fr | A | 95 | — | – | TLS1.2 | GEANT TLS RSA 1 | 151 d | |
| 10114 | universe.com | A | 95 | — | – | TLS1.2 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | 169 d | |
| 10115 | unl.edu | A | 95 | — | – | TLS1.2 | InCommon Intermediate CA - DVG2C | — | 150 d |
| 10116 | unsplash.com | A | 95 | – | TLS1.2 | GlobalSign Atlas R3 DV TLS CA 2025 Q4 | 63 d | ||
| 10117 | uoc.edu | A | 95 | — | – | TLS1.2 | GEANT TLS RSA 1 | — | 181 d |
| 10118 | uol.com.br | A | 95 | — | – | TLS1.2 | RapidSSL TLS RSA CA G1 | 122 d | |
| 10119 | uonbi.ac.ke | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | — | 173 d |
| 10120 | uow.edu.au | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 101 d | |
| 10121 | url.cn | A | 95 | — | – | TLS1.2 | GlobalSign Atlas R46 OV TLS CA 2026 Q3 | — | 97 d |
| 10122 | url.tw | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 43 d |
| 10123 | uroweb.org | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 36 d |
| 10124 | us.edu.pl | A | 95 | — | – | TLS1.2 | GEANT TLS ECC 1 | — | 188 d |
| 10125 | usajobs.gov | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 132 d | |
| 10126 | usask.ca | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 62 d | |
| 10127 | usaspending.gov | A | 95 | — | – | TLS1.2 | Entrust OV TLS Issuing RSA CA 2 | 166 d | |
| 10128 | usbr.gov | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 80 d |
| 10129 | uschamber.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | 82 d | |
| 10130 | usda.gov | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 43 d | |
| 10131 | usembassy.gov | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 158 d | |
| 10132 | usine-digitale.fr | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 181 d | |
| 10133 | usinenouvelle.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 181 d | |
| 10134 | uslegal.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 78 d | |
| 10135 | usopen.org | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 96 d |
| 10136 | usp.br | A | 95 | — | – | TLS1.2 | RNP ICPEdu GR46 OV TLS CA 2025 | — | 144 d |
| 10137 | utah.edu | A | 95 | — | – | TLS1.2 | InCommon RSA OV SSL CA 3 | 77 d | |
| 10138 | uv.mx | A | 95 | — | – | TLS1.2 | Go Daddy Secure Certificate Authority - G2 | 61 d | |
| 10139 | uwi.edu | A | 95 | — | – | TLS1.2 | SSL.com RSA SSL subCA | 113 d | |
| 10140 | va.gov | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA DV R36 | 72 d | |
| 10141 | vans.com | A | 95 | — | – | TLS1.2 | GeoTrust TLS RSA CA G1 | — | 175 d |
| 10142 | varsitytutors.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 191 d | |
| 10143 | vcu.edu | A | 95 | — | – | TLS1.2 | InCommon Intermediate CA - DVG2C | — | 133 d |
| 10144 | vedur.is | A | 95 | — | – | TLS1.2 | GlobalSign GCC R46 AlphaSSL CA 2025 | — | 160 d |
| 10145 | ventoy.net | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 58 d |
| 10146 | veoh.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 61 d |
| 10147 | verizonwireless.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 130 d |
| 10148 | vermont.gov | A | 95 | — | – | TLS1.2 | GlobalSign RSA OV SSL CA 2018 | — | 27 d |
| 10149 | vestone.com.cn | A | 95 | — | – | TLS1.2 | Encryption Everywhere DV TLS CA - G2 | — | 59 d |
| 10150 | viarail.ca | A | 95 | — | – | TLS1.2 | Entrust DV TLS Issuing RSA CA 2 | 109 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.