CertH certH

SSL Grade Leaderboard: Top 100 Websites

Scanned from 20,000 top global websites · Updated 2026-11-05

12,269Domains
32%A+ share (3944)
94.8Avg score
↑ 116Improved this month
#DomainGradeScore30d trendΔTLSIssuerHSTSExpires
1451google.snA100—–TLS1.3Google Trust Services—56 d
1452google.soA100—–TLS1.3Google Trust Services—56 d
1453google.srA100—–TLS1.3Google Trust Services—56 d
1454google.stA100—–TLS1.3Google Trust Services—56 d
1455google.tdA100—–TLS1.3Google Trust Services—56 d
1456google.tgA100—–TLS1.3Google Trust Services—56 d
1457google.tkA100—–TLS1.3Google Trust Services—56 d
1458google.tlA100—–TLS1.3Google Trust Services—56 d
1459google.tmA100—–TLS1.3Google Trust Services—56 d
1460google.tnA100—–TLS1.3Google Trust Services—56 d
1461google.toA100—–TLS1.3Google Trust Services—56 d
1462google.ttA100—–TLS1.3Google Trust Services—56 d
1463google.vgA100—–TLS1.3Google Trust Services—56 d
1464google.vuA100—–TLS1.3Google Trust Services—56 d
1465google.wsA100—–TLS1.3Google Trust Services—56 d
1466googleadservices.comA100—–TLS1.3Google Trust Services—56 d
1467googleapis.comA100—–TLS1.3Google Trust Services—56 d
1468googleblog.comA100TLS1.3Google Trust Services—56 d
1469googlecode.comA100—–TLS1.3Google Trust Services—56 d
1470googlegroups.comA100—–TLS1.3Google Trust Services—56 d
1471googleplus.comA100—–TLS1.3Google Trust Services—56 d
1472googlesource.comA100—–TLS1.3Google Trust Services—56 d
1473googlesyndication.comA100—–TLS1.3Google Trust Services—56 d
1474googletagmanager.comA100TLS1.3Google Trust Services—56 d
1475googleusercontent.comA100TLS1.3Google Trust Services—56 d
1476gouvernement.frA100—–TLS1.3GandiCert—157 d
1477govdelivery.comA100—–TLS1.3Let's Encrypt—84 d
1478governo.itA100—–TLS1.3DigiCert Global G3 TLS ECC SHA384 2020 CA1—168 d
1479govoritmoskva.ruA100—–TLS1.3Let's Encrypt57 d
1480grab.comA100—–TLS1.3Amazon RSA 2048 M04—92 d
1481grabcad.comA100—–TLS1.3Amazon RSA 2048 M04—118 d
1482grammarly.comA100—–TLS1.3Amazon RSA 2048 M01—63 d
1483grammy.comA100—–TLS1.3Amazon RSA 2048 M04—127 d
1484gramota.ruA100—–TLS1.3Let's Encrypt—56 d
1485granicus.comA100—–TLS1.3Let's Encrypt84 d
1486grants.govA100—–TLS1.3HydrantID Server CA O1—156 d
1487graphviz.orgA100—–TLS1.3Let's Encrypt—64 d
1488gratisafhalen.beA100—–TLS1.3Google Trust Services—58 d
1489graziadaily.co.ukA100—–TLS1.3Amazon RSA 2048 M01—72 d
1490greeka.comA100——TLS1.3Let's Encrypt—33 d
1491greenhouse.ioA100—–TLS1.3Let's Encrypt—68 d
1492greenpeace.org.ukA100—–TLS1.3Starfield TLS Intermediate CA DV - R1v1—70 d
1493grepmed.comA100—–TLS1.3Amazon RSA 2048 M04—45 d
1494greyhound.comA100—–TLS1.3Amazon RSA 2048 M01—75 d
1495grist.orgA100—–TLS1.3Google Trust Services—53 d
1496grow.googleA100—–TLS1.3Google Trust Services56 d
1497growkudos.comA100—–TLS1.3Let's Encrypt—38 d
1498grundfos.comA100—–TLS1.3Let's Encrypt—31 d
1499grunge.comA100—–TLS1.3Amazon RSA 2048 M01—181 d
1500gs1.orgA100—–TLS1.3GeoTrust TLS RSA CA G1—101 d
30 / 244

Track grade changes for your domains

Sign up free, watch your domains and get alerted the moment a grade drops.

FAQ

How often is the SSL leaderboard updated?

Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.

How is the SSL grade calculated?

Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.

What does an A+ SSL rating mean?

A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.

Methodology

CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.

What is an SSL grade?

An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.

Why track certificate health over time?

Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.