SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-08
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 11501 | kh.ua | D | 65 | — | – | TLS1.3 | — | — | — |
| 11502 | kharkov.ua | D | 65 | — | – | TLS1.3 | Let's Encrypt | — | 54 d |
| 11503 | king.com | D | 65 | — | – | TLS1.3 | — | — | |
| 11504 | km.ua | D | 65 | — | – | TLS1.3 | Let's Encrypt | — | 56 d |
| 11505 | konami.com | D | 65 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 103 d |
| 11506 | ks.ua | D | 65 | — | – | TLS1.3 | Let's Encrypt | — | 55 d |
| 11507 | ksj.com.cn | D | 65 | — | – | TLS1.3 | Let's Encrypt | — | 61 d |
| 11508 | lacity.org | D | 65 | — | – | TLS1.3 | — | — | — |
| 11509 | lankunkj.com | D | 65 | — | – | TLS1.3 | \E5\AE\9D\E5\A1\94 DV TLS RSA CA 2025 | — | 190 d |
| 11510 | lariviera-casino.fr | D | 65 | — | – | TLS1.3 | TRAEFIK DEFAULT CERT | — | 347 d |
| 11511 | lenovo.com.cn | D | 65 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 85 d |
| 11512 | leuphana.de | D | 65 | — | – | TLS1.3 | GEANT TLS RSA 1 | — | 90 d |
| 11513 | livedoor.jp | D | 65 | — | – | TLS1.3 | GlobalSign RSA OV SSL CA 2018 | — | 42 d |
| 11514 | lysenzhu.cn | D | 65 | — | – | TLS1.3 | Let's Encrypt | — | 57 d |
| 11515 | ma.gov.br | D | 65 | — | – | TLS1.3 | kubernetes-ingress-ca | — | 179 d |
| 11516 | magentocommerce.com | D | 65 | — | – | TLS1.3 | — | — | — |
| 11517 | mailenable.com | D | 65 | — | – | TLS1.3 | — | — | — |
| 11518 | meyerweb.com | D | 65 | — | – | TLS1.3 | — | — | — |
| 11519 | minecraftcommand.science | D | 65 | — | – | TLS1.3 | Let's Encrypt | — | 40 d |
| 11520 | mint.com | D | 65 | — | – | TLS1.3 | — | — | — |
| 11521 | mkdocs.org | D | 65 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | — | 59 d |
| 11522 | multimap.com | D | 65 | — | – | TLS1.3 | Microsoft TLS G2 RSA CA OCSP 16 | — | 88 d |
| 11523 | mvideo.ru | D | 65 | — | – | TLS1.3 | — | — | |
| 11524 | nespresso.com | D | 65 | — | – | TLS1.3 | — | — | — |
| 11525 | netbsd.org | D | 65 | — | – | TLS1.3 | — | — | |
| 11526 | nikkansports.com | D | 65 | — | – | TLS1.3 | — | — | — |
| 11527 | nousresearch.com | D | 65 | — | – | TLS1.3 | — | — | |
| 11528 | nppa.gov.cn | D | 65 | — | – | TLS1.3 | GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1 | — | 159 d |
| 11529 | nysun.com | D | 65 | — | – | TLS1.3 | — | — | — |
| 11530 | observablehq.com | D | 65 | — | – | TLS1.3 | — | — | |
| 11531 | officelive.com | D | 65 | — | – | TLS1.3 | Microsoft TLS G2 RSA CA OCSP 02 | — | 26 d |
| 11532 | ofsted.gov.uk | D | 65 | — | – | TLS1.3 | GlobalSign RSA OV SSL CA 2018 | — | 51 d |
| 11533 | omnicalculator.com | D | 65 | — | – | TLS1.3 | — | — | — |
| 11534 | open.spotify.com | D | 65 | TLS1.3 | — | — | |||
| 11535 | openclaw.ai | D | 65 | — | – | TLS1.3 | — | — | |
| 11536 | openjsf.org | D | 65 | — | – | TLS1.3 | — | — | |
| 11537 | orgfree.com | D | 65 | — | – | TLS1.3 | Let's Encrypt | — | 40 d |
| 11538 | ourmidland.com | D | 65 | — | – | TLS1.3 | — | — | |
| 11539 | oyez.org | D | 65 | — | – | TLS1.3 | — | — | — |
| 11540 | pcrm.org | D | 65 | — | – | TLS1.3 | — | — | |
| 11541 | penn.museum | D | 65 | — | – | TLS1.3 | — | — | — |
| 11542 | planity.com | D | 65 | — | – | TLS1.3 | — | — | — |
| 11543 | playtech.com | D | 65 | — | – | TLS1.3 | — | — | — |
| 11544 | pluschem.cn | D | 65 | — | – | TLS1.3 | — | — | 3609 d |
| 11545 | plyoga.cn | D | 65 | — | – | TLS1.3 | unknown | — | 866 d |
| 11546 | police1.com | D | 65 | — | – | TLS1.3 | — | — | |
| 11547 | pond5.com | D | 65 | — | – | TLS1.3 | — | — | |
| 11548 | posterous.com | D | 65 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 185 d |
| 11549 | privacymark.jp | D | 65 | — | – | TLS1.3 | — | — | |
| 11550 | privacyshield.gov | D | 65 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 88 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.