CertH certH

SSL Grade Leaderboard: Top 100 Websites

Scanned from 20,000 top global websites · Updated 2026-11-08

12,269Domains
32%A+ share (3944)
94.8Avg score
↑ 111Improved this month
#DomainGradeScore30d trendΔTLSIssuerHSTSExpires
12151surtime.comF0—–TLS1.2RapidSSL TLS RSA CA G1—0 d
12152syxtvip.comF0—–TLS1.3Let's Encrypt—0 d
12153taikeapp.comF0—–TLS1.2LiteSSL ECC CA 2025—0 d
12154thesundaytimes.co.ukF0—–TLS1.2Let's Encrypt—0 d
12155timesonline.co.ukF0—–TLS1.2Let's Encrypt—0 d
12156tm-cc.comF0—–TLS1.3Encryption Everywhere DV TLS CA - G2—0 d
12157ub.esF0—–TLS1.2GEANT OV RSA CA 4—0 d
12158vic.gov.auF0—–TLS1.3Amazon RSA 2048 M01—0 d
12159virginmoneygiving.comF0—–TLS1.2Entrust OV TLS Issuing RSA CA 2—0 d
12160voluntime.cnF0——TLS1.2Encryption Everywhere DV TLS CA - G2—0 d
12161waltongroup.cnF0—–TLS1.3Encryption Everywhere DV TLS CA - G1—0 d
12162webcom.comF0—–TLS1.2COMODO RSA Domain Validation Secure Server CA—0 d
12163webgarden.comF0—–TLS1.2AlpiroSSL ECC DV CA—0 d
12164whsgqc.comF0—–TLS1.3E8—0 d
12165wingingmodel.comF0——TLS1.2Encryption Everywhere DV TLS CA - G1—0 d
12166wstfls.comF0—–TLS1.2Encryption Everywhere DV TLS CA - G2—0 d
12167xinjiang.gov.cnF0—–TLS1.3CFCA OV OCA—0 d
12168xmhns.comF0——TLS1.2RapidSSL Global TLS RSA4096 SHA256 2022 CA1—0 d
12169xmjunli.comF0—–TLS1.3TrustAsia DV TLS RSA CA 2024—0 d
12170xmlsoft.orgF0—–TLS1.3libvirt.org—0 d
12171xnfhtech.comF0—–TLS1.2Encryption Everywhere DV TLS CA - G2—0 d
12172xsks9.comF0——TLS1.2RapidSSL Global TLS RSA4096 SHA256 2022 CA1—0 d
12173xwdzcz.comF0——TLS1.2LiteSSL RSA CA 2025—0 d
12174xy51.cnF0—–TLS1.2Encryption Everywhere DV TLS CA - G2—0 d
12175yileui.comF0—–TLS1.3JoySSL DV TLS G2 R33 CA—0 d
12176yingdai.onlineF0—–TLS1.2Encryption Everywhere DV TLS CA - G1—0 d
12177you-fuli.comF0—–TLS1.3E8—0 d
12178ytuobao.comF0——TLS1.2Encryption Everywhere DV TLS CA - G2—0 d
12179zhangyi123.comF0—–TLS1.2Encryption Everywhere DV TLS CA - G2—0 d
12180zhedinglaw.comF0—–TLS1.2Encryption Everywhere DV TLS CA - G1—0 d
12181zjzdlo.comF0—–TLS1.2Encryption Everywhere DV TLS CA - G1—0 d
12182zwdj.topF0—–TLS1.2Sectigo RSA Domain Validation Secure Server CA—0 d
12183zwdj.vipF0—–TLS1.2Sectigo RSA Domain Validation Secure Server CA—0 d
12184zzhy.orgF0—–TLS1.2Encryption Everywhere DV TLS CA - G2—0 d
244 / 244

Track grade changes for your domains

Sign up free, watch your domains and get alerted the moment a grade drops.

FAQ

How often is the SSL leaderboard updated?

Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.

How is the SSL grade calculated?

Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.

What does an A+ SSL rating mean?

A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.

Methodology

CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.

What is an SSL grade?

An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.

Why track certificate health over time?

Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.