SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-04
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 1251 | glose.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 43 d |
| 1252 | gmail.com | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1253 | gmo.media | A | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | — | 64 d |
| 1254 | gmpg.org | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 73 d |
| 1255 | gmu.edu | A | 100 | — | – | TLS1.3 | InCommon RSA Server CA 2 | 112 d | |
| 1256 | gob.mx | A | 100 | — | – | TLS1.3 | GlobalSign GCC R46 OV TLS CA 2025 | — | 138 d |
| 1257 | gobiernodecanarias.org | A | 100 | — | – | TLS1.3 | Let's Encrypt | 66 d | |
| 1258 | gocomics.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 62 d |
| 1259 | godaddy.com | A | 100 | TLS1.3 | Google Trust Services | — | 81 d | ||
| 1260 | goethe.de | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 59 d |
| 1261 | gofund.me | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 154 d |
| 1262 | golang.org | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1263 | golf.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | 71 d | |
| 1264 | goneo.de | A | 100 | — | – | TLS1.3 | Certum DV TLS G2 R39 CA | — | 158 d |
| 1265 | gonzaga.edu | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 63 d |
| 1266 | goo.su | A | 100 | — | – | TLS1.3 | GlobalSign GCC R6 AlphaSSL CA 2025 | — | 69 d |
| 1267 | goodmancasino.io | A | 100 | — | — | TLS1.3 | Encryption Everywhere DV TLS CA - G2 | — | 30 d |
| 1268 | goodmorningamerica.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 82 d |
| 1269 | google.ac | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1270 | google.ad | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1271 | google.ae | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1272 | google.al | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1273 | google.am | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1274 | google.as | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1275 | google.at | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1276 | google.az | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1277 | google.ba | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1278 | google.be | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1279 | google.bf | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1280 | google.bg | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1281 | google.bi | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1282 | google.bj | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1283 | google.bs | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1284 | google.bt | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1285 | google.by | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1286 | google.ca | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1287 | google.cat | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1288 | google.cd | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1289 | google.cf | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1290 | google.cg | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1291 | google.ch | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1292 | google.ci | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1293 | google.cl | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1294 | google.cm | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1295 | google.cn | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1296 | google.co.ao | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1297 | google.co.bw | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1298 | google.co.ck | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1299 | google.co.cr | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1300 | google.co.id | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.