SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-06
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 2551 | pocketcasts.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 76 d |
| 2552 | pod.link | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 70 d |
| 2553 | podio.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 183 d |
| 2554 | podman.io | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 74 d |
| 2555 | poetryfoundation.org | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 47 d |
| 2556 | pokemongolive.com | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 79 d |
| 2557 | polar.com | A | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 139 d | |
| 2558 | policies.google.com | A | 100 | TLS1.3 | Google Trust Services | — | 55 d | ||
| 2559 | poliziadistato.it | A | 100 | — | – | TLS1.3 | Let's Encrypt | 74 d | |
| 2560 | polkadot.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 67 d |
| 2561 | polytechnique.fr | A | 100 | — | – | TLS1.3 | GEANT TLS ECC 1 | — | 92 d |
| 2562 | pons.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 43 d |
| 2563 | popmatters.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 41 d |
| 2564 | popsugar.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 53 d |
| 2565 | pornhubcasino.io | A | 100 | — | — | TLS1.3 | Encryption Everywhere DV TLS CA - G2 | — | 28 d |
| 2566 | portafolio.co | A | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 162 d |
| 2567 | portland.gov | A | 100 | — | – | TLS1.3 | Let's Encrypt | 57 d | |
| 2568 | portlandoregon.gov | A | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 92 d |
| 2569 | post-gazette.com | A | 100 | — | – | TLS1.3 | RapidSSL TLS RSA CA G1 | — | 84 d |
| 2570 | poste.it | A | 100 | — | – | TLS1.3 | GlobalSign GCC R46 EV TLS CA 2025 | — | 136 d |
| 2571 | posteezy.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 64 d |
| 2572 | postimees.ee | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 81 d |
| 2573 | postnl.nl | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 59 d |
| 2574 | potofu.me | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 40 d |
| 2575 | potterybarn.com | A | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 142 d |
| 2576 | powermag.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | 79 d | |
| 2577 | pr.tn | A | 100 | TLS1.3 | Let's Encrypt | — | 81 d | ||
| 2578 | pragmaticplay.com | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 42 d |
| 2579 | pravmir.ru | A | 100 | — | – | TLS1.3 | GlobalSign GCC R46 AlphaSSL CA 2025 | 108 d | |
| 2580 | premierleague.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 92 d | |
| 2581 | president.gov.ua | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 84 d |
| 2582 | pressandjournal.co.uk | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 80 d |
| 2583 | presscustomizr.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 56 d |
| 2584 | pressgazette.co.uk | A | 100 | — | – | TLS1.3 | Let's Encrypt | 88 d | |
| 2585 | pressofatlanticcity.com | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 47 d |
| 2586 | pri.org | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 176 d |
| 2587 | pricegrabber.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 194 d |
| 2588 | princehotels.co.jp | A | 100 | — | – | TLS1.3 | GlobalSign GCC R46 OV TLS CA 2025 | — | 147 d |
| 2589 | princess.com | A | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 169 d | |
| 2590 | privacy.org.nz | A | 100 | — | – | TLS1.3 | Let's Encrypt | 67 d | |
| 2591 | pro.sony | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 80 d |
| 2592 | proboards.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 40 d |
| 2593 | prometric.com | A | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | — | 46 d |
| 2594 | promosimple.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 88 d |
| 2595 | proofpoint.com | A | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | — | 191 d |
| 2596 | proquest.com | A | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 119 d |
| 2597 | prosieben.de | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 184 d |
| 2598 | protothema.gr | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 74 d |
| 2599 | provenexpert.com | A | 100 | — | – | TLS1.3 | Google Trust Services | 57 d | |
| 2600 | proza.ru | A | 100 | — | – | TLS1.3 | GlobalSign GCC R46 DV TLS CA 2025 | — | 184 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.