CertH certH

SSL Grade Leaderboard: Top 100 Websites

Scanned from 20,000 top global websites · Updated 2026-11-06

12,269Domains
32%A+ share (3944)
94.8Avg score
↑ 115Improved this month
#DomainGradeScore30d trendΔTLSIssuerHSTSExpires
3151theiia.orgA100—–TLS1.3Let's Encrypt—87 d
3152theinformation.comA100—–TLS1.3Google Trust Services—45 d
3153thekurzweillibrary.comA100—–TLS1.3Let's Encrypt—38 d
3154thelist.comA100—–TLS1.3Amazon RSA 2048 M01—180 d
3155thelocal.deA100—–TLS1.3Google Trust Services—82 d
3156thelocal.frA100—–TLS1.3Google Trust Services—81 d
3157thelocal.itA100—–TLS1.3Google Trust Services—83 d
3158thelocal.seA100—–TLS1.3Google Trust Services—83 d
3159thelondonneurocognitiveclinic.co.ukA100—–TLS1.3Let's Encrypt—86 d
3160themeholy.comA100—–TLS1.3Let's Encrypt—38 d
3161themehorse.comA100—–TLS1.3Let's Encrypt—31 d
3162themerex.netA100—–TLS1.3Google Trust Services—80 d
3163thenewslens.comA100—–TLS1.3Google Trust Services—57 d
3164thenewstribune.comA100—–TLS1.3Google Trust Services—65 d
3165thenounproject.comA100—–TLS1.3Amazon RSA 2048 M01—111 d
3166theoutline.comA100—–TLS1.3Amazon RSA 2048 M04—97 d
3167thepaper.cnA100—–TLS1.3GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1—78 d
3168thepetitionsite.comA100—–TLS1.3Let's Encrypt—37 d
3169theportugalnews.comA100—–TLS1.3Sectigo Public Server Authentication CA DV R36—69 d
3170therealdeal.comA100—–TLS1.3Amazon RSA 2048 M01—129 d
3171theringer.comA100—–TLS1.3Google Trust Services—67 d
3172thespinoff.co.nzA100—–TLS1.3Google Trust Services—57 d
3173thestate.comA100—–TLS1.3Google Trust Services—64 d
3174thetimes.co.ukA100—–TLS1.3Amazon RSA 2048 M04—134 d
3175thetimes.comA100—–TLS1.3Amazon RSA 2048 S18—196 d
3176thetradedesk.comA100—–TLS1.3Amazon RSA 2048 M04—73 d
3177theweek.co.ukA100—–TLS1.3Let's Encrypt—49 d
3178theweek.inA100—–TLS1.3DigiCert Global G3 TLS ECC SHA384 2020 CA1—185 d
3179theworlds50best.comA100—–TLS1.3Let's Encrypt—44 d
3180thieme-connect.comA100—–TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA1—72 d
3181thieme-connect.deA100—–TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA1—72 d
3182thinkgeek.comA100—–TLS1.3Amazon RSA 2048 M01—178 d
3183thinkprogress.orgA100—–TLS1.3Amazon RSA 2048 M01—160 d
3184thinkupthemes.comA100—–TLS1.3Let's Encrypt—85 d
3185thinkwithgoogle.comA100—–TLS1.3Google Trust Services—55 d
3186thirteen.orgA100—–TLS1.3Amazon RSA 2048 M01—142 d
3187thisdaylive.comA100—–TLS1.3Amazon RSA 2048 M01—117 d
3188thisislondon.co.ukA100—–TLS1.3Let's Encrypt—55 d
3189thisismoney.co.ukA100—–TLS1.3DigiCert Global G3 TLS ECC SHA384 2020 CA1149 d
3190thomann.deA100—–TLS1.3RapidSSL TLS RSA CA G1—122 d
3191thomascook.comA100—–TLS1.3Let's Encrypt—76 d
3192thomasnet.comA100—–TLS1.3Amazon ECDSA 256 M04—104 d
3193threejs.orgA100—–TLS1.3Let's Encrypt—56 d
3194thrillist.comA100—–TLS1.3GlobalSign Atlas R3 DV TLS CA 2025 Q4—65 d
3195thueringen.deA100—–TLS1.3Let's Encrypt—79 d
3196thumbtack.comA100—–TLS1.3Amazon RSA 2048 M04—117 d
3197tianqi.comA100—–TLS1.3Let's Encrypt—70 d
3198tianyancha.comA100—–TLS1.3GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1—128 d
3199tib.euA100—–TLS1.3GEANT TLS ECC 1—60 d
3200ticketone.itA100—–TLS1.3Let's Encrypt—61 d
64 / 244

Track grade changes for your domains

Sign up free, watch your domains and get alerted the moment a grade drops.

FAQ

How often is the SSL leaderboard updated?

Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.

How is the SSL grade calculated?

Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.

What does an A+ SSL rating mean?

A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.

Methodology

CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.

What is an SSL grade?

An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.

Why track certificate health over time?

Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.