SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-07
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 3501 | vol.at | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 56 d |
| 3502 | volga.news | A | 100 | — | – | TLS1.3 | GlobalSign GCC R3 DV TLS CA 2020 | — | 100 d |
| 3503 | volkskrant.nl | A | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 109 d |
| 3504 | volkswagenag.com | A | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | — | 160 d |
| 3505 | volny.cz | A | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | — | 137 d |
| 3506 | volunteermatch.org | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 28 d |
| 3507 | vonage.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 81 d |
| 3508 | voodoowins.org | A | 100 | — | — | TLS1.3 | Encryption Everywhere DV TLS CA - G2 | — | 27 d |
| 3509 | vox-cdn.com | A | 100 | — | – | TLS1.3 | GlobalSign Atlas R3 DV TLS CA 2026 Q2 | — | 66 d |
| 3510 | vtb.ru | A | 100 | — | – | TLS1.3 | Russian Trusted Sub CA | — | 231 d |
| 3511 | vtv.vn | A | 100 | — | – | TLS1.3 | GlobalSign GCC R46 OV TLS CA 2025 | — | 170 d |
| 3512 | vu.edu.au | A | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 181 d |
| 3513 | vudu.com | A | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 120 d |
| 3514 | vueling.com | A | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 55 d |
| 3515 | vutbr.cz | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 87 d |
| 3516 | w.soundcloud.com | A | 100 | TLS1.3 | Amazon RSA 2048 M01 | — | 132 d | ||
| 3517 | w3techs.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 70 d |
| 3518 | w3w.co | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 87 d |
| 3519 | wa.gov.au | A | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 30 d | |
| 3520 | wada-ama.org | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 157 d |
| 3521 | walkerplus.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 159 d |
| 3522 | wallonie.be | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 56 d |
| 3523 | wamu.org | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 180 d |
| 3524 | wanadoo.fr | A | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 57 d |
| 3525 | wandb.ai | A | 100 | — | – | TLS1.3 | Google Trust Services | — | 46 d |
| 3526 | wanfangdata.com.cn | A | 100 | — | – | TLS1.3 | DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1 | — | 131 d |
| 3527 | wantedly.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 194 d |
| 3528 | wapo.st | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 86 d |
| 3529 | warnerbros.com | A | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 OV TLS CA 2026 Q4 | — | 186 d |
| 3530 | wasabisys.com | A | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 132 d |
| 3531 | washingtoninstitute.org | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 36 d |
| 3532 | washingtonpost.com | A | 100 | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 133 d | ||
| 3533 | washu.edu | A | 100 | — | – | TLS1.3 | Let's Encrypt | 57 d | |
| 3534 | wate.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | 70 d | |
| 3535 | watson.ch | A | 100 | — | – | TLS1.3 | Thawte TLS RSA CA G1 | — | 84 d |
| 3536 | wavy.com | A | 100 | — | – | TLS1.3 | Let's Encrypt | 70 d | |
| 3537 | waz.de | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 163 d |
| 3538 | wazambaslots.org | A | 100 | — | — | TLS1.3 | Let's Encrypt | — | 21 d |
| 3539 | wbd.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 180 d |
| 3540 | wbs-law.de | A | 100 | — | – | TLS1.3 | Let's Encrypt | — | 59 d |
| 3541 | wdc.com | A | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | — | 114 d |
| 3542 | wdr.de | A | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | — | 113 d |
| 3543 | we.tl | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 102 d |
| 3544 | weathernews.jp | A | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 112 d |
| 3545 | weatherspark.com | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 136 d |
| 3546 | webaim.org | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 179 d |
| 3547 | weber.com | A | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | — | 189 d |
| 3548 | webexhibits.org | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | — | 88 d |
| 3549 | webflow.io | A | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | — | 99 d |
| 3550 | webinar.ru | A | 100 | — | – | TLS1.3 | GlobalSign GCC R3 DV TLS CA 2020 | — | 42 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.