SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-07
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 3851 | afm.nl | A+ | 100 | — | – | TLS1.3 | GlobalSign GCC R46 OV TLS CA 2025 | 105 d | |
| 3852 | africanews.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 184 d | |
| 3853 | afsc.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 34 d | |
| 3854 | aft.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 59 d | |
| 3855 | aftenposten.no | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 152 d | |
| 3856 | afternic.com | A+ | 100 | — | – | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | 43 d | |
| 3857 | agenziaentrate.gov.it | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 30 d | |
| 3858 | ageuk.org.uk | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 50 d | |
| 3859 | agh.edu.pl | A+ | 100 | — | – | TLS1.3 | GEANT TLS RSA 1 | 111 d | |
| 3860 | agoda.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 51 d | |
| 3861 | agorapulse.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 182 d | |
| 3862 | agweb.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 57 d | |
| 3863 | ahk.de | A+ | 100 | — | – | TLS1.3 | D-TRUST BR CA 1-20-1 2020 | 176 d | |
| 3864 | ahrefs.com | A+ | 100 | TLS1.3 | Google Trust Services | 42 d | |||
| 3865 | aia.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 46 d | |
| 3866 | aicpa-cima.com | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 155 d | |
| 3867 | aig.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 54 d | |
| 3868 | aimultiple.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 165 d | |
| 3869 | ainonline.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 65 d | |
| 3870 | aip.org | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 129 d | |
| 3871 | airandspaceforces.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 55 d | |
| 3872 | airasia.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 87 d | |
| 3873 | airberlin.com | A+ | 100 | — | – | TLS1.3 | Thawte TLS RSA CA G1 | 111 d | |
| 3874 | airbnb.ca | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 83 d | |
| 3875 | airc.cn | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 52 d | |
| 3876 | aircanada.com | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 106 d | |
| 3877 | aireuropa.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 109 d | |
| 3878 | airforce.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 96 d | |
| 3879 | airnewzealand.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 195 d | |
| 3880 | airtable.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 81 d | |
| 3881 | ajg.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 83 d | |
| 3882 | akamai.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 165 d | |
| 3883 | akniga.org | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 173 d | |
| 3884 | aktuality.sk | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 59 d | |
| 3885 | akzonobel.com | A+ | 100 | — | – | TLS1.3 | GlobalSign GCC R46 OV TLS CA 2025 | 139 d | |
| 3886 | al-monitor.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 43 d | |
| 3887 | ali213.net | A+ | 100 | — | – | TLS1.3 | Encryption Everywhere DV TLS CA - G2 | 109 d | |
| 3888 | alibaba.com | A+ | 100 | — | – | TLS1.3 | GlobalSign GCC R46 OV TLS CA 2025 | 139 d | |
| 3889 | alignable.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 88 d | |
| 3890 | all-inkl.com | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 43 d | |
| 3891 | allaboutvision.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G3 TLS ECC SHA384 2020 CA1 | 173 d | |
| 3892 | allenai.org | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 85 d | |
| 3893 | allianz.com | A+ | 100 | — | – | TLS1.3 | Amazon ECDSA 384 M04 | 55 d | |
| 3894 | allianz.de | A+ | 100 | — | – | TLS1.3 | Amazon ECDSA 384 M01 | 194 d | |
| 3895 | alpinelinux.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 55 d | |
| 3896 | alternativeto.net | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 73 d | |
| 3897 | alzheimers.org.uk | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 49 d | |
| 3898 | ama-assn.org | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 90 d | |
| 3899 | aman.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 67 d | |
| 3900 | amazon.ae | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 116 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.