CertH certH

SSL Grade Leaderboard: Top 100 Websites

Scanned from 20,000 top global websites · Updated 2026-11-08

12,269Domains
32%A+ share (3944)
94.8Avg score
↑ 111Improved this month
#DomainGradeScore30d trendΔTLSIssuerHSTSExpires
12101jnskss.comF0—–TLS1.2Encryption Everywhere DV TLS CA - G2—0 d
12102jubaowu.com.cnF0—–TLS1.2ZeroSSL RSA Domain Secure Site CA—0 d
12103keepvid.comF0—–TLS1.2RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1—0 d
12104kr.uaF0—–TLS1.2ISP Host—0 d
12105ky.govF0—–TLS1.0Entrust Certification Authority - L1K—0 d
12106kytwx.cnF0—–TLS1.3Let's Encrypt—0 d
12107kytwx.comF0—–TLS1.3Let's Encrypt—0 d
12108leiphone.comF0—–TLS1.2DNSPod DV TLS RSA CA 2025—0 d
12109lemondeinformatique.frF0—–TLS1.2cl1.itnewsinfo.com—0 d
12110lingxiao.ac.cnF0—–TLS1.3Let's Encrypt—0 d
12111lpages.coF0—–TLS1.3Let's Encrypt—0 d
12112lsncds.comF0—–TLS1.2Let's Encrypt—0 d
12113lublin.plF0—–TLS1.2info.man.lublin.pl—0 d
12114makalu.com.cnF0—–TLS1.2Encryption Everywhere DV TLS CA - G1—0 d
12115mambike.comF0—–TLS1.2Encryption Everywhere DV TLS CA - G2—0 d
12116man.ac.ukF0—–TLS1.3Sectigo Public Server Authentication CA OV R36—0 d
12117mantoo.com.cnF0—–TLS1.2Encryption Everywhere DV TLS CA - G1—0 d
12118mdydt.netF0—–TLS1.2Encryption Everywhere DV TLS CA - G1—0 d
12119medc.xyzF0—–TLS1.2TrustAsia TLS RSA CA—0 d
12120mh1994.comF0—–TLS1.2Encryption Everywhere DV TLS CA - G1—0 d
12121mpintl.cnF0——TLS1.2Let's Encrypt—0 d
12122muvizu.comF0—–TLS1.2Let's Encrypt—0 d
12123mymovies.itF0—–TLS1.3SSL.com RSA SSL subCA—0 d
12124nbskfyy.comF0—–TLS1.3vTrus DV SSL CA G2—0 d
12125nkrdpcrgp.comF0—–TLS1.3RapidSSL TLS RSA CA G1—0 d
12126nnlgjt.comF0—–TLS1.2Encryption Everywhere DV TLS CA - G1—0 d
12127no-ip.orgF0—–TLS1.2Let's Encrypt—0 d
12128nycgo.comF0—–TLS1.3Go Daddy Secure Certificate Authority - G2—0 d
12129paralympic.orgF0—–TLS1.3Thawte TLS RSA CA G1—0 d
12130persee.frF0—–TLS1.2Sectigo RSA Organization Validation Secure Server CA—0 d
12131petians.comF0—–TLS1.2Let's Encrypt—0 d
12132php-editors.comF0—–TLS1.3E8—0 d
12133pocoo.orgF0—–TLS1.2Let's Encrypt—0 d
12134presstv.irF0—–TLS1.3Let's Encrypt—0 d
12135qbnz.comF0—–TLS1.3CAcert Class 3 Root—0 d
12136qifu66.comF0—–TLS1.2RapidSSL Global TLS RSA4096 SHA256 2022 CA1—0 d
12137refinitiv.comF0——TLS1.2COMODO RSA Organization Validation Secure Server CA—0 d
12138rehabsh.comF0—–TLS1.2Encryption Everywhere DV TLS CA - G1—0 d
12139rnkey.comF0—–TLS1.2SSL Secure Site CA—0 d
12140rnkeysoft.comF0—–TLS1.2SSL Secure Site CA—0 d
12141rosminzdrav.ruF0—–TLS1.2Sectigo RSA Domain Validation Secure Server CA—0 d
12142salute.gov.itF0—–TLS1.2TI Trust Technologies OV CA—0 d
12143schwise.comF0—–TLS1.3WoTrus RSA DV SSL CA 2—0 d
12144signonsandiego.comF0—–TLS1.2Go Daddy Secure Certificate Authority - G2—0 d
12145slanrf.comF0—–TLS1.2sslTrus (RSA) DV CA—0 d
12146smartlight.ccF0—–TLS1.2Encryption Everywhere DV TLS CA - G2—0 d
12147snzg.cnF0—–TLS1.2Encryption Everywhere DV TLS CA - G1—0 d
12148socrf.comF0—–TLS1.2sslTrus (RSA) DV CA—0 d
12149st-and.ac.ukF0—–TLS1.3GEANT OV RSA CA 4—0 d
12150studio.siteF0—–TLS1.3R3—0 d
243 / 244

Track grade changes for your domains

Sign up free, watch your domains and get alerted the moment a grade drops.

FAQ

How often is the SSL leaderboard updated?

Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.

How is the SSL grade calculated?

Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.

What does an A+ SSL rating mean?

A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.

Methodology

CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.

What is an SSL grade?

An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.

Why track certificate health over time?

Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.