SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-05
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 1501 | gstatic.com | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 56 d |
| 1502 | gu.se | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 71 d |
| 1503 | guardian.co.uk | A | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | — | 121 d |
| 1504 | guggenheim.org | A | 100 | — | – | TLS1.3 | Let's Encrypt | 85 d | |
| 1505 | gulfnews.com | A | 100 | — | – | TLS1.3 | Google Trust Services | 90 d | |
| 1506 | gutenberg.net.au | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 88 d |
| 1507 | gwangju.ac.kr | A | 100 | — | – | TLS1.3 | Thawte TLS RSA CA G1 | — | 124 d |
| 1508 | gwi.com | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 88 d |
| 1509 | habitat.org | A | 100 | — | – | TLS1.3 | Entrust OV TLS Issuing RSA CA 2 | 127 d | |
| 1510 | hacettepe.edu.tr | A | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 151 d |
| 1511 | hackerearth.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 116 d |
| 1512 | hackster.io | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 41 d |
| 1513 | hankooki.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 79 d |
| 1514 | hankookilbo.com | A | 100 | — | – | TLS1.3 | Thawte TLS RSA CA G1 | — | 127 d |
| 1515 | hannover.de | A | 100 | — | – | TLS1.3 | ZeroSSL ECC DV SSL CA 2 | — | 88 d |
| 1516 | harborfreight.com | A | 100 | — | – | TLS1.3 | DigiCert EV RSA CA G2 | — | 75 d |
| 1517 | hardened-php.net | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 45 d |
| 1518 | hasbro.com | A | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | — | 62 d |
| 1519 | hashicorp.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 48 d |
| 1520 | hateblo.jp | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 51 d |
| 1521 | hatenablog.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 51 d |
| 1522 | hatenablog.jp | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 51 d |
| 1523 | hbr.org | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 147 d | |
| 1524 | hccnet.nl | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 59 d |
| 1525 | he.net | A | 100 | — | – | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | — | 115 d |
| 1526 | headspace.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 141 d |
| 1527 | health.gov.au | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 33 d |
| 1528 | healthdirect.gov.au | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 174 d | |
| 1529 | healthyplace.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 96 d |
| 1530 | heartbleed.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 87 d |
| 1531 | heinonline.org | A | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 177 d |
| 1532 | helpnetsecurity.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 170 d |
| 1533 | helpscout.net | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 156 d |
| 1534 | henan.gov.cn | A | 100 | — | – | TLS1.3 | WoTrus RSA OV SSL CA 2 | — | 95 d |
| 1535 | henkel-adhesives.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 197 d |
| 1536 | heraldo.es | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 175 d |
| 1537 | hermanmiller.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 35 d |
| 1538 | hermes.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 88 d |
| 1539 | hermitagemuseum.org | A | 100 | — | – | TLS1.3 | GlobalSign GCC R46 AlphaSSL CA 2025 | — | 152 d |
| 1540 | hesk.com | A | 100 | — | – | TLS1.3 | GlobalSign GCC R6 AlphaSSL CA 2025 | — | 83 d |
| 1541 | hetzner.de | A | 100 | — | – | TLS1.3 | Thawte TLS RSA CA G1 | — | 154 d |
| 1542 | hgtv.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 175 d |
| 1543 | hi.is | A | 100 | — | – | TLS1.3 | GlobalSign RSA OV SSL CA 2018 | — | 144 d |
| 1544 | hi5.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 182 d |
| 1545 | historyplace.com | A | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 178 d |
| 1546 | hket.com | A | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 63 d |
| 1547 | hklaw.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 66 d |
| 1548 | hkust.edu.hk | A | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | — | 39 d |
| 1549 | hl7.org | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 127 d |
| 1550 | hln.be | A | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 105 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.