CertH certH

SSL Grade Leaderboard: Top 100 Websites

Scanned from 20,000 top global websites · Updated 2026-11-08

12,269Domains
32%A+ share (3944)
94.8Avg score
↑ 111Improved this month
#DomainGradeScore30d trendΔTLSIssuerHSTSExpires
10751inrs.frA92—–TLS1.3GEANT TLS RSA 1—25 d
10752instructure.comA92—–TLS1.3Certainly Intermediate R114 d
10753intel.comA92—–TLS1.3Sectigo Public Server Authentication CA OV R3625 d
10754intel.deA92—–TLS1.3Sectigo Public Server Authentication CA OV R3625 d
10755interfax.ruA92—–TLS1.3GlobalSign RSA OV SSL CA 2018—20 d
10756internazionale.itA92—–TLS1.3ZeroSSL ECC DV SSL CA 2—22 d
10757invesco.comA92—–TLS1.3DigiCert EV RSA CA G219 d
10758irk.ruA92—–TLS1.3Let's Encrypt—12 d
10759isciii.esA92—–TLS1.3FNMT-RCM13 d
10760ismedia.jpA92—–TLS1.3GlobalSign RSA OV SSL CA 2018—21 d
10761istanbul.edu.trA92—–TLS1.3GeoTrust TLS RSA CA G119 d
10762it168.comA92—–TLS1.3RapidSSL TLS RSA CA G1—25 d
10763itu.intA92—–TLS1.3Let's Encrypt—18 d
10764iveco.comA92—–TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA124 d
10765jku.atA92—–TLS1.3GEANT TLS RSA 1—13 d
10766joins.comA92—–TLS1.3Thawte TLS RSA CA G1—21 d
10767jpmorgan.comA92—–TLS1.3DigiCert EV RSA CA G222 d
10768jpmorganchase.comA92—–TLS1.3DigiCert EV RSA CA G222 d
10769jsjxzinc.comA92—–TLS1.3XinNet DV TLS RSA CA 2025—15 d
10770k8s.ioA92—–TLS1.3Google Trust Services—23 d
10771kansspelautoriteit.nlA92—–TLS1.3Sectigo Public Server Authentication CA DV R3626 d
10772kaust.edu.saA92—–TLS1.3GlobalSign Atlas R46 DV TLS CA 2026 Q315 d
10773kb.dkA92—–TLS1.3RapidSSL TLS RSA CA G1—26 d
10774kdocs.cnA92—–TLS1.3GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1—13 d
10775kimi.comA92—–TLS1.3RapidSSL TLS RSA CA G127 d
10776kingarthurbaking.comA92—–TLS1.3Certainly Intermediate R120 d
10777kiwi.comA92—–TLS1.3Certainly Intermediate R1—19 d
10778kmip.org.cnA92—–TLS1.3ZeroSSL RSA DV SSL CA 214 d
10779koreaherald.comA92—–TLS1.3Sectigo RSA Domain Validation Secure Server CA—90 d
10780ksbxbz.comA92—–TLS1.3LiteSSL RSA CA 2025—14 d
10781kt.comA92—–TLS1.3Sectigo RSA Organization Validation Secure Server CA—13 d
10782lafeltrinelli.itA92—–TLS1.3Let's Encrypt—21 d
10783laliga.comA92—–TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA1—20 d
10784larousse.frA92—–TLS1.3Gandi RSA Domain Validation Secure Server CA 326 d
10785lasprovincias.esA92—–TLS1.3Certainly Intermediate R116 d
10786launchpad.netA92TLS1.3Let's Encrypt25 d
10787laverdad.esA92—–TLS1.3Certainly Intermediate R116 d
10788lavoixdunord.frA92—–TLS1.3Let's Encrypt—21 d
10789lbc.co.ukA92—–TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA119 d
10790libbyapp.comA92—–TLS1.3Google Trust Services21 d
10791lip6.frA92—–TLS1.3GEANT TLS RSA 112 d
10792liputan6.comA92—–TLS1.3Let's Encrypt16 d
10793litmus.comA92—–TLS1.3Certainly Intermediate R124 d
10794livelib.ruA92—–TLS1.3GlobalSign GCC R6 AlphaSSL CA 202519 d
10795livestorm.coA92—–TLS1.3Let's Encrypt25 d
10796lucasfilm.comA92—–TLS1.3Let's Encrypt14 d
10797lynda.comA92—–TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA1—20 d
10798magnific.comA92—–TLS1.3Let's Encrypt22 d
10799maine.eduA92—–TLS1.3InCommon Intermediate CA - OVG2C—12 d
10800malegislature.govA92—–TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA1—19 d
216 / 244

Track grade changes for your domains

Sign up free, watch your domains and get alerted the moment a grade drops.

FAQ

How often is the SSL leaderboard updated?

Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.

How is the SSL grade calculated?

Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.

What does an A+ SSL rating mean?

A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.

Methodology

CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.

What is an SSL grade?

An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.

Why track certificate health over time?

Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.