SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-08
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 10451 | inrae.fr | A | 93 | — | – | TLS1.2 | GEANT TLS RSA 1 | 91 d | |
| 10452 | interaction-design.org | A | 93 | — | – | TLS1.2 | Let's Encrypt | — | 59 d |
| 10453 | ioncube.com | A | 93 | — | – | TLS1.2 | Let's Encrypt | — | 63 d |
| 10454 | ionos.co.uk | A | 93 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | 152 d | |
| 10455 | ionos.com | A | 93 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | 153 d | |
| 10456 | ionos.de | A | 93 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | 35 d | |
| 10457 | ionos.es | A | 93 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | 109 d | |
| 10458 | ionos.fr | A | 93 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | 140 d | |
| 10459 | iqvia.com | A | 93 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | 47 d | |
| 10460 | irs.gov | A | 93 | — | – | TLS1.2 | Entrust OV TLS Issuing RSA CA 2 | 111 d | |
| 10461 | iza.org | A | 93 | — | – | TLS1.2 | Let's Encrypt | — | 64 d |
| 10462 | jc001.cn | A | 93 | — | – | TLS1.2 | WoTrus RSA DV SSL CA 2 | — | 165 d |
| 10463 | justanswer.com | A | 93 | — | — | TLS1.2 | Starfield TLS Intermediate CA DV - R1v1 | — | 73 d |
| 10464 | keepandshare.com | A | 93 | — | – | TLS1.2 | GoDaddy TLS Intermediate CA EV - R1v1 | 169 d | |
| 10465 | kentonline.co.uk | A | 93 | — | – | TLS1.2 | ZeroSSL ECC DV SSL CA 2 | 57 d | |
| 10466 | kenyon.edu | A | 93 | — | – | TLS1.2 | Sectigo Public Server Authentication CA DV R36 | — | 68 d |
| 10467 | ktv.jp | A | 93 | — | – | TLS1.2 | Let's Encrypt | — | 61 d |
| 10468 | kyoto-np.co.jp | A | 93 | — | – | TLS1.2 | FujiSSL RSA Organization Validation Secure Server CA 2 | 96 d | |
| 10469 | lbl.gov | A | 93 | — | – | TLS1.2 | InCommon RSA Server CA 2 | 70 d | |
| 10470 | ledauphine.com | A | 93 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 124 d |
| 10471 | leprogres.fr | A | 93 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 124 d | |
| 10472 | letour.fr | A | 93 | — | – | TLS1.2 | Let's Encrypt | 57 d | |
| 10473 | lib.ru | A | 93 | — | – | TLS1.2 | Let's Encrypt | — | 84 d |
| 10474 | lightpokies.org | A | 93 | — | – | TLS1.2 | GoDaddy TLS Intermediate CA DV - R1v1 | — | 105 d |
| 10475 | linternaute.com | A | 93 | — | – | TLS1.2 | Sectigo Public Server Authentication CA DV R36 | — | 31 d |
| 10476 | liveinternet.ru | A | 93 | — | – | TLS1.2 | Let's Encrypt | — | 76 d |
| 10477 | liveleak.com | A | 93 | — | – | TLS1.2 | Starfield TLS Intermediate CA DV - R1v1 | — | 79 d |
| 10478 | llnl.gov | A | 93 | — | – | TLS1.2 | Go Daddy Secure Certificate Authority - G2 | 135 d | |
| 10479 | lu.se | A | 93 | — | – | TLS1.2 | Let's Encrypt | — | 37 d |
| 10480 | macalester.edu | A | 93 | — | – | TLS1.2 | InCommon RSA Server CA 2 | 139 d | |
| 10481 | manchester.ac.uk | A | 93 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | 151 d | |
| 10482 | mayo.edu | A | 93 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R40 | — | 160 d |
| 10483 | mayoclinic.com | A | 93 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R40 | — | 160 d |
| 10484 | mayoclinic.org | A | 93 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R40 | — | 160 d |
| 10485 | mayoclinichealthsystem.org | A | 93 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R40 | — | 160 d |
| 10486 | mcafee.com | A | 93 | — | – | TLS1.2 | McAfee RSA Organization Validation Secure Server CA 4 | 167 d | |
| 10487 | miguvideo.com | A | 93 | — | – | TLS1.2 | sslTrus RSA OV SSL CA 2 | — | 159 d |
| 10488 | missingkids.org | A | 93 | — | – | TLS1.2 | GoDaddy TLS Intermediate CA DV - R1v1 | 154 d | |
| 10489 | mk.ru | A | 93 | — | – | TLS1.2 | GlobalSign GCC R46 AlphaSSL CA 2025 | — | 144 d |
| 10490 | morganstanley.com | A | 93 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R40 | 174 d | |
| 10491 | mplayerhq.hu | A | 93 | — | — | TLS1.2 | Let's Encrypt | 6 d | |
| 10492 | msa-alliance.cn | A | 93 | — | – | TLS1.2 | Certum DV TLS G2 R39 CA | — | 182 d |
| 10493 | mynet.com | A | 93 | — | – | TLS1.2 | GoDaddy TLS Intermediate CA DV - R1v1 | — | 125 d |
| 10494 | nanowrimo.org | A | 93 | — | – | TLS1.2 | GoDaddy TLS Intermediate CA DV - R1v1 | — | 113 d |
| 10495 | nate.com | A | 93 | — | – | TLS1.2 | GlobalSign GCC R6 AlphaSSL CA 2025 | — | 69 d |
| 10496 | ncl.com | A | 93 | — | – | TLS1.2 | Entrust DV TLS Issuing RSA CA 2 | 152 d | |
| 10497 | netpro.co.kr | A | 93 | — | – | TLS1.2 | GoGetSSL RSA DV SSL CA 2 | — | 190 d |
| 10498 | newsday.com | A | 93 | — | – | TLS1.2 | Let's Encrypt | — | 37 d |
| 10499 | newsgator.com | A | 93 | — | – | TLS1.2 | GoDaddy TLS Intermediate CA DV - R1v1 | — | 144 d |
| 10500 | newsmax.com | A | 93 | — | – | TLS1.2 | Go Daddy Secure Certificate Authority - G2 | — | 37 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.