SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-08
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 10851 | res.cloudinary.com | A | 92 | — | – | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | — | 25 d |
| 10852 | ridewithgps.com | A | 92 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 22 d |
| 10853 | rightmove.co.uk | A | 92 | — | – | TLS1.3 | Certainly Intermediate R1 | — | 25 d |
| 10854 | riksdagen.se | A | 92 | — | – | TLS1.3 | GEANT TLS RSA 1 | 20 d | |
| 10855 | riotgames.com | A | 92 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 18 d | |
| 10856 | rs-online.com | A | 92 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 16 d |
| 10857 | rspca.org.uk | A | 92 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 16 d | |
| 10858 | rssing.com | A | 92 | — | – | TLS1.3 | Let's Encrypt | 25 d | |
| 10859 | rug.nl | A | 92 | — | – | TLS1.3 | GEANT TLS ECC 1 | 23 d | |
| 10860 | rwe.com | A | 92 | — | – | TLS1.3 | GlobalSign GCC R46 OV TLS CA 2025 | 25 d | |
| 10861 | s.weibo.com | A | 92 | — | – | TLS1.3 | GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1 | — | 14 d |
| 10862 | santepubliquefrance.fr | A | 92 | — | – | TLS1.3 | Let's Encrypt | 26 d | |
| 10863 | santint.com | A | 92 | — | – | TLS1.3 | \E5\AE\9D\E5\A1\94 DV TLS RSA CA 2025 | 16 d | |
| 10864 | scu.edu.cn | A | 92 | — | – | TLS1.3 | GlobalSign RSA OV SSL CA 2018 | — | 17 d |
| 10865 | secondlife.com | A | 92 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 19 d |
| 10866 | seoul.co.kr | A | 92 | — | – | TLS1.3 | Thawte TLS RSA CA G1 | — | 145 d |
| 10867 | sephora.com | A | 92 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 16 d | |
| 10868 | service.weibo.com | A | 92 | — | – | TLS1.3 | GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1 | — | 14 d |
| 10869 | shef.ac.uk | A | 92 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | — | 25 d |
| 10870 | sixflags.com | A | 92 | — | – | TLS1.3 | Let's Encrypt | 26 d | |
| 10871 | skysports.com | A | 92 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 13 d | |
| 10872 | smotrim.ru | A | 92 | — | – | TLS1.3 | GlobalSign GCC R3 DV TLS CA 2020 | — | 20 d |
| 10873 | snf.ch | A | 92 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 22 d | |
| 10874 | societegenerale.com | A | 92 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 24 d | |
| 10875 | startpagina.nl | A | 92 | — | – | TLS1.3 | Let's Encrypt | 26 d | |
| 10876 | starwars.com | A | 92 | — | – | TLS1.3 | Let's Encrypt | — | 14 d |
| 10877 | stockstar.com | A | 92 | — | – | TLS1.3 | GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1 | — | 26 d |
| 10878 | storytel.com | A | 92 | — | – | TLS1.3 | Certainly Intermediate R1 | 14 d | |
| 10879 | subscribe.ru | A | 92 | — | – | TLS1.3 | Let's Encrypt | 16 d | |
| 10880 | t.me | A | 92 | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | — | 15 d | ||
| 10881 | t3n.de | A | 92 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 12 d |
| 10882 | tampabay.com | A | 92 | — | – | TLS1.3 | Let's Encrypt | — | 25 d |
| 10883 | tatler.com | A | 92 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 14 d |
| 10884 | teenvogue.com | A | 92 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 14 d |
| 10885 | tek.com | A | 92 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 22 d | |
| 10886 | telemadrid.es | A | 92 | — | – | TLS1.3 | Let's Encrypt | 13 d | |
| 10887 | telia.com | A | 92 | — | – | TLS1.3 | Telia Server CA v3 | — | 25 d |
| 10888 | thebump.com | A | 92 | — | – | TLS1.3 | Let's Encrypt | — | 17 d |
| 10889 | thecity.nyc | A | 92 | — | – | TLS1.3 | Google Trust Services | — | 26 d |
| 10890 | thecollector.com | A | 92 | — | – | TLS1.3 | Let's Encrypt | 25 d | |
| 10891 | thesource.com | A | 92 | — | – | TLS1.3 | Let's Encrypt | — | 25 d |
| 10892 | tiktok.com | A | 92 | TLS1.3 | RapidSSL TLS ECC CA G1 | 26 d | |||
| 10893 | time.com | A | 92 | – | TLS1.3 | Certainly Intermediate R1 | 13 d | ||
| 10894 | tno.nl | A | 92 | — | – | TLS1.3 | GEANT TLS RSA 1 | 25 d | |
| 10895 | toulouse.fr | A | 92 | — | – | TLS1.3 | Let's Encrypt | — | 24 d |
| 10896 | tripit.com | A | 92 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 17 d | |
| 10897 | trunovskiy26raion.ru | A | 92 | — | – | TLS1.3 | Let's Encrypt | — | 22 d |
| 10898 | tsu.ru | A | 92 | — | – | TLS1.3 | GlobalSign GCC R3 DV TLS CA 2020 | — | 14 d |
| 10899 | tuhh.de | A | 92 | — | – | TLS1.3 | GEANT TLS ECC 1 | 17 d | |
| 10900 | ual.es | A | 92 | — | – | TLS1.3 | GEANT TLS RSA 1 | 20 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.