SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-08
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 11701 | electrek.co | D | 63 | — | – | TLS1.3 | — | — | — |
| 11702 | ellenmacarthurfoundation.org | D | 63 | — | – | TLS1.3 | — | — | — |
| 11703 | enlightenment.org | D | 63 | — | – | TLS1.3 | Let's Encrypt | — | 83 d |
| 11704 | esa.int | D | 63 | — | – | TLS1.3 | — | — | |
| 11705 | fca.org.uk | D | 63 | — | – | TLS1.3 | — | — | |
| 11706 | ferrari.com | D | 63 | — | – | TLS1.3 | — | — | |
| 11707 | filippo.io | D | 63 | — | – | TLS1.3 | — | — | |
| 11708 | fl.gov | D | 63 | — | – | TLS1.3 | GoDaddy TLS Intermediate CA DV - R1v1 | — | 66 d |
| 11709 | flagcounter.com | D | 63 | — | – | TLS1.3 | — | — | — |
| 11710 | footprintnetwork.org | D | 63 | — | – | TLS1.3 | — | — | — |
| 11711 | fox13news.com | D | 63 | — | – | TLS1.3 | — | — | |
| 11712 | fox2detroit.com | D | 63 | — | – | TLS1.3 | — | — | |
| 11713 | france.fr | D | 63 | — | – | TLS1.3 | — | — | — |
| 11714 | fsfe.org | D | 63 | — | – | TLS1.3 | — | — | |
| 11715 | gatsbyjs.com | D | 63 | — | – | TLS1.3 | — | — | |
| 11716 | getfirebug.com | D | 63 | — | – | TLS1.3 | — | — | |
| 11717 | ghost.org | D | 63 | — | – | TLS1.3 | — | — | |
| 11718 | gov.br | D | 63 | — | – | TLS1.3 | — | — | |
| 11719 | gp.se | D | 63 | — | – | TLS1.3 | — | — | — |
| 11720 | grapheneos.org | D | 63 | — | – | TLS1.3 | — | — | |
| 11721 | helpscoutdocs.com | D | 63 | — | – | TLS1.3 | — | — | |
| 11722 | hexo.io | D | 63 | — | – | TLS1.3 | — | — | |
| 11723 | highlightjs.org | D | 63 | — | – | TLS1.3 | — | — | |
| 11724 | ibb.co | D | 63 | — | – | TLS1.3 | — | — | — |
| 11725 | icanhascheezburger.com | D | 63 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | — | 193 d |
| 11726 | icann.org | D | 63 | — | – | TLS1.3 | — | — | — |
| 11727 | icom.museum | D | 63 | — | – | TLS1.3 | — | — | |
| 11728 | imagemagick.com | D | 63 | — | – | TLS1.3 | Let's Encrypt | — | 53 d |
| 11729 | imooc.com | D | 63 | — | – | TLS1.3 | — | — | — |
| 11730 | influence.co | D | 63 | — | – | TLS1.3 | — | — | — |
| 11731 | iserv.de | D | 63 | — | – | TLS1.3 | — | — | |
| 11732 | iswlegal.com | D | 63 | — | – | TLS1.3 | — | — | |
| 11733 | iucr.org | D | 63 | — | – | TLS1.3 | Let's Encrypt | — | 34 d |
| 11734 | japan-guide.com | D | 63 | — | – | TLS1.3 | — | — | |
| 11735 | jotform.com | D | 63 | — | – | TLS1.3 | — | — | — |
| 11736 | journalofaccountancy.com | D | 63 | — | – | TLS1.3 | — | — | |
| 11737 | juegosfanaticos.com | D | 63 | — | – | TLS1.3 | — | — | — |
| 11738 | junit.org | D | 63 | — | – | TLS1.3 | — | — | |
| 11739 | kaiserpermanente.org | D | 63 | — | – | TLS1.3 | — | — | — |
| 11740 | kaist.ac.kr | D | 63 | — | – | TLS1.3 | — | — | — |
| 11741 | kanzlei-hasselbach.de | D | 63 | — | – | TLS1.3 | — | — | — |
| 11742 | karger.com | D | 63 | — | – | TLS1.3 | — | — | — |
| 11743 | kas.de | D | 63 | — | – | TLS1.3 | — | — | — |
| 11744 | kernel.org | D | 63 | — | – | TLS1.3 | — | — | — |
| 11745 | khronos.org | D | 63 | — | – | TLS1.3 | — | — | |
| 11746 | knightfrank.com | D | 63 | — | – | TLS1.3 | — | — | — |
| 11747 | kroger.com | D | 63 | — | – | TLS1.3 | — | — | — |
| 11748 | ku.edu | D | 63 | — | – | TLS1.3 | — | — | — |
| 11749 | kubernetes.io | D | 63 | — | – | TLS1.3 | — | — | |
| 11750 | kumc.edu | D | 63 | — | – | TLS1.3 | — | — | — |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.