SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-07
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 4101 | bestecasinosechtgeld.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 81 d | |
| 4102 | bestwestern.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 58 d | |
| 4103 | bethesda.net | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 131 d | |
| 4104 | betsson.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 144 d | |
| 4105 | betterhelp.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 125 d | |
| 4106 | bettycrocker.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 85 d | |
| 4107 | beyonce.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 52 d | |
| 4108 | beyondblue.org.au | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 67 d | |
| 4109 | bfl.ai | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 69 d | |
| 4110 | bfn.de | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 168 d | |
| 4111 | bgbl.de | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV E36 | 72 d | |
| 4112 | bibliocommons.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 182 d | |
| 4113 | bicycling.com | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q4 | 196 d | |
| 4114 | bigfishgames.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 50 d | |
| 4115 | bikeradar.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 62 d | |
| 4116 | bild.de | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 79 d | |
| 4117 | binance.info | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 121 d | |
| 4118 | bing.com | A+ | 100 | – | TLS1.3 | Microsoft TLS G2 RSA CA OCSP 02 | 80 d | ||
| 4119 | bioeg.de | A+ | 100 | — | – | TLS1.3 | GEANT TLS RSA 1 | 92 d | |
| 4120 | biography.com | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q4 | 196 d | |
| 4121 | bioone.org | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | 34 d | |
| 4122 | biospace.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 176 d | |
| 4123 | bipm.org | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA DV R36 | 78 d | |
| 4124 | birmingham.ac.uk | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 39 d | |
| 4125 | bis.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 70 d | |
| 4126 | bitbucket.io | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 153 d | |
| 4127 | bitbucket.org | A+ | 100 | — | – | TLS1.3 | Amazon ECDSA 256 M01 | 47 d | |
| 4128 | bitcoin.org | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 57 d | |
| 4129 | bitkom.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 50 d | |
| 4130 | bitly.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 91 d | |
| 4131 | bittorrent.com | A+ | 100 | — | – | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | 102 d | |
| 4132 | bitwarden.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 29 d | |
| 4133 | bk.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 57 d | |
| 4134 | bl.uk | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 91 d | |
| 4135 | bleacherreport.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 55 d | |
| 4136 | bleedingcool.com | A+ | 100 | — | – | TLS1.3 | Starfield TLS Intermediate CA DV - R1v1 | 68 d | |
| 4137 | blogdumoderateur.com | A+ | 100 | — | – | TLS1.3 | GandiCert | 181 d | |
| 4138 | bloomberg.com | A+ | 100 | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 84 d | |||
| 4139 | blr.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 154 d | |
| 4140 | bluenile.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 145 d | |
| 4141 | bluestacks.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 70 d | |
| 4142 | bluewin.ch | A+ | 100 | — | – | TLS1.3 | SwissSign RSA TLS OV ICA 2022 - 1 | 63 d | |
| 4143 | blum.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 56 d | |
| 4144 | bmc.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 181 d | |
| 4145 | bms.com | A+ | 100 | — | – | TLS1.3 | GlobalSign Atlas R46 DV TLS CA 2026 Q3 | 56 d | |
| 4146 | bmwblog.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 46 d | |
| 4147 | bnef.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 84 d | |
| 4148 | bnl.gov | A+ | 100 | — | – | TLS1.3 | InCommon Intermediate CA - OVG2C | 97 d | |
| 4149 | boconcept.com | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 141 d | |
| 4150 | boe.es | A+ | 100 | — | – | TLS1.3 | FNMT-RCM | 76 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.