SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-06
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 2751 | runtastic.com | A | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 139 d |
| 2752 | runwayml.com | A | 100 | — | — | TLS1.3 | Let's Encrypt | — | 22 d |
| 2753 | russia.ru | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 66 d |
| 2754 | rust-lang.org | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 45 d |
| 2755 | rutube.ru | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 53 d |
| 2756 | rwaq.org | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 92 d |
| 2757 | ryerson.ca | A | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 153 d |
| 2758 | rzp.io | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 142 d |
| 2759 | s3.eu-west-1.amazonaws.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 137 d |
| 2760 | safety.google | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 55 d |
| 2761 | safeway.com | A | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | — | 31 d |
| 2762 | sagaftra.org | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 59 d |
| 2763 | sainsburys.co.uk | A | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA EV R36 | 119 d | |
| 2764 | saksfifthavenue.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 169 d |
| 2765 | sakura.ne.jp | A | 100 | — | – | TLS1.3 | JPRS DV RSA CA 2024 G1 | — | 115 d |
| 2766 | salesforce-sites.com | A | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 162 d |
| 2767 | salesforce.com | A | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 155 d | |
| 2768 | salford.ac.uk | A | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 35 d |
| 2769 | salk.edu | A | 100 | — | – | TLS1.3 | Let's Encrypt | 81 d | |
| 2770 | salliemae.com | A | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 175 d | |
| 2771 | salon.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 167 d |
| 2772 | salonemilano.it | A | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 127 d | |
| 2773 | salsalabs.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 60 d |
| 2774 | sandiego.edu | A | 100 | — | – | TLS1.3 | InCommon Intermediate CA - OVG2C | 184 d | |
| 2775 | sandiegocounty.gov | A | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 92 d |
| 2776 | sandiegozoo.org | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 29 d |
| 2777 | sanluisobispo.com | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 57 d |
| 2778 | sanrio.co.jp | A | 100 | — | – | TLS1.3 | GlobalSign RSA OV SSL CA 2018 | — | 156 d |
| 2779 | sante.fr | A | 100 | — | – | TLS1.3 | DigiCert G3 TLS EU ECC P-384 SHA384 2022 CA1 | — | 115 d |
| 2780 | sapo.pt | A | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 189 d |
| 2781 | saramin.co.kr | A | 100 | — | – | TLS1.3 | Sectigo RSA Domain Validation Secure Server CA | — | 93 d |
| 2782 | saskatchewan.ca | A | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 31 d |
| 2783 | sat1.de | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 185 d |
| 2784 | savvas.com | A | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | — | 149 d |
| 2785 | sb.by | A | 100 | — | – | TLS1.3 | GlobalSign GCC R6 AlphaSSL CA 2025 | — | 128 d |
| 2786 | sberbank.ru | A | 100 | — | – | TLS1.3 | Russian Trusted Sub CA | — | 264 d |
| 2787 | sbn.it | A | 100 | — | – | TLS1.3 | ZeroSSL RSA DV SSL CA 2 | — | 83 d |
| 2788 | sc.edu | A | 100 | — | – | TLS1.3 | InCommon RSA Server CA 2 | — | 151 d |
| 2789 | scalawine.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 43 d |
| 2790 | scarabwins.org | A | 100 | — | — | TLS1.3 | Encryption Everywhere DV TLS CA - G2 | — | 28 d |
| 2791 | schema.org | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 55 d |
| 2792 | schlichtungsstelle-bgg.de | A | 100 | — | – | TLS1.3 | D-TRUST BR CA 2-23-1 2023 | — | 121 d |
| 2793 | schneider-electric.com | A | 100 | — | – | TLS1.3 | Thawte TLS RSA CA G1 | — | 79 d |
| 2794 | scholar.google.com | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 55 d |
| 2795 | scholasticahq.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 85 d |
| 2796 | schueco.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 62 d |
| 2797 | sciam.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 100 d |
| 2798 | science.org.au | A | 100 | — | – | TLS1.3 | Let's Encrypt | 74 d | |
| 2799 | science20.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 76 d |
| 2800 | scienceblogs.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 45 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.