SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-06
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 2801 | sciencebuddies.org | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 167 d |
| 2802 | sciencedirect.com | A | 100 | TLS1.3 | Google Trust Services | — | 78 d | ||
| 2803 | sciencehistory.org | A | 100 | — | – | TLS1.3 | Let's Encrypt | 62 d | |
| 2804 | sciencesconf.org | A | 100 | — | – | TLS1.3 | GEANT TLS RSA 1 | — | 175 d |
| 2805 | sciencesetavenir.fr | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 47 d |
| 2806 | sciencing.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 124 d |
| 2807 | scikit-learn.org | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 80 d |
| 2808 | scispace.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 175 d |
| 2809 | scoop.co.nz | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 114 d |
| 2810 | scopus.com | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 73 d |
| 2811 | scotland.gov.uk | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 49 d |
| 2812 | scottcountyin.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 55 d |
| 2813 | scpr.org | A | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | — | 98 d |
| 2814 | screencast-o-matic.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 78 d |
| 2815 | screencast.com | A | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q4 | — | 78 d |
| 2816 | screenconnect.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 135 d |
| 2817 | scrum.org | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 153 d |
| 2818 | scrumguides.org | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 77 d |
| 2819 | sdu.dk | A | 100 | — | – | TLS1.3 | GEANT TLS RSA 1 | — | 189 d |
| 2820 | se.net | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 62 d |
| 2821 | search.ch | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 65 d |
| 2822 | search.google | A | 100 | — | – | TLS1.3 | Google Trust Services | 55 d | |
| 2823 | search.google.com | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 55 d |
| 2824 | search.rakuten.co.jp | A | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 122 d |
| 2825 | searchmetrics.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 120 d |
| 2826 | searxng.org | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 82 d |
| 2827 | seatgeek.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 31 d |
| 2828 | seatguru.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 139 d |
| 2829 | seattlechildrens.org | A | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 62 d |
| 2830 | seattlepi.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | 75 d | |
| 2831 | seattleu.edu | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 132 d | |
| 2832 | security.org | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 179 d |
| 2833 | securityintelligence.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 35 d |
| 2834 | securitylab.ru | A | 100 | — | – | TLS1.3 | GlobalSign GCC R3 DV TLS CA 2020 | — | 129 d |
| 2835 | seeedstudio.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 89 d |
| 2836 | sega.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 80 d |
| 2837 | segment.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 117 d |
| 2838 | sejm.gov.pl | A | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | — | 53 d |
| 2839 | seld.be | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 72 d |
| 2840 | selenium.dev | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 74 d |
| 2841 | seleniumhq.org | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 32 d |
| 2842 | self.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 166 d |
| 2843 | selfhtml.org | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 80 d |
| 2844 | seloger.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 80 d |
| 2845 | semafor.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 58 d |
| 2846 | semanticscholar.org | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 91 d |
| 2847 | semrush.com | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 38 d |
| 2848 | semver.org | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 70 d |
| 2849 | senac.br | A | 100 | — | – | TLS1.3 | Thawte TLS RSA CA G1 | — | 62 d |
| 2850 | senato.it | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 100 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.