CertH certH

SSL Grade Leaderboard: Top 100 Websites

Scanned from 20,000 top global websites · Updated 2026-11-07

12,269Domains
32%A+ share (3943)
94.8Avg score
↑ 114Improved this month
#DomainGradeScore30d trendΔTLSIssuerHSTSExpires
4451dailymotion.comA+100—–TLS1.3ZeroSSL RSA DV SSL CA 252 d
4452dailyprogress.comA+100—–TLS1.3Google Trust Services85 d
4453dailysabah.comA+100—–TLS1.3GoDaddy TLS Intermediate CA DV - R1v1167 d
4454dailytelegraph.com.auA+100—–TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA1112 d
4455dak.deA+100—–TLS1.3GlobalSign GCC R46 OV TLS CA 2025164 d
4456dal.caA+100—–TLS1.3RapidSSL TLS RSA CA G137 d
4457dallascowboys.comA+100—–TLS1.3Let's Encrypt83 d
4458dallasfed.orgA+100—–TLS1.3Let's Encrypt34 d
4459danone.comA+100—–TLS1.3Sectigo Public Server Authentication CA OV R3644 d
4460dantri.com.vnA+100—–TLS1.3GlobalSign GCC R46 AlphaSSL CA 2025160 d
4461darkhorse.comA+100—–TLS1.3Sectigo Public Server Authentication CA OV R36144 d
4462darmstadt.socialA+100—–TLS1.3Let's Encrypt75 d
4463darpa.milA+100—–TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA1106 d
4464data.govA+100—–TLS1.3Let's Encrypt86 d
4465data.gov.ukA+100—–TLS1.3GlobalSign RSA OV SSL CA 201852 d
4466databricks.comA+100—–TLS1.3Amazon RSA 2048 M04173 d
4467datadoghq.comA+100—–TLS1.3DigiCert Global G2 TLS RSA SHA256 2020 CA1139 d
4468dataprotection.ieA+100—–TLS1.3Sectigo Public Server Authentication CA DV R3650 d
4469datarobot.comA+100—–TLS1.3Let's Encrypt49 d
4470datatilsynet.dkA+100—–TLS1.3Let's Encrypt88 d
4471datatilsynet.noA+100—–TLS1.3RapidSSL TLS RSA CA G1134 d
4472datenschutz.deA+100—–TLS1.3Let's Encrypt53 d
4473datev.deA+100—–TLS1.3Thawte TLS RSA CA G1124 d
4474daum.netA+100—–TLS1.3Thawte TLS RSA CA G1110 d
4475dayforcehcm.comA+100—–TLS1.3GeoTrust TLS RSA CA G1154 d
4476dazn.comA+100—–TLS1.3Amazon RSA 2048 M0172 d
4477dbnl.orgA+100—–TLS1.3GEANT TLS ECC 192 d
4478dbs.comA+100—–TLS1.3Let's Encrypt87 d
4479dc.comA+100—–TLS1.3GlobalSign Atlas R46 DV TLS CA 2026 Q3163 d
4480dcu.ieA+100—–TLS1.3GEANT TLS RSA 193 d
4481dd-wrt.comA+100—–TLS1.3RapidSSL TLS ECC CA G1125 d
4482ddai.infoA+100—–TLS1.3Google Trust Services52 d
4483dea.govA+100—–TLS1.3DigiCert Global G3 TLS ECC SHA384 2020 CA1153 d
4484deadspin.comA+100—–TLS1.3Google Trust Services62 d
4485debian.orgA+100TLS1.3Let's Encrypt66 d
4486decanter.comA+100—–TLS1.3GlobalSign Atlas R46 DV TLS CA 2026 Q487 d
4487deel.comA+100—–TLS1.3Amazon RSA 2048 M04172 d
4488deeplearning.aiA+100——TLS1.3Let's Encrypt0 d
4489deezer.comA+100—–TLS1.3GandiCert85 d
4490defense.govA+100—–TLS1.3DigiCert Global G3 TLS ECC SHA384 2020 CA1111 d
4491defenseone.comA+100—–TLS1.3GeoTrust TLS RSA CA G1154 d
4492defensie.nlA+100—–TLS1.3DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1133 d
4493dejure.orgA+100—–TLS1.3Let's Encrypt84 d
4494delawareonline.comA+100—–TLS1.3Let's Encrypt86 d
4495delish.comA+100—–TLS1.3GlobalSign Atlas R46 DV TLS CA 2026 Q4196 d
4496democratandchronicle.comA+100—–TLS1.3Let's Encrypt82 d
4497denhaag.nlA+100—–TLS1.3DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1160 d
4498denic.deA+100—–TLS1.3Let's Encrypt54 d
4499dentsplysirona.comA+100—–TLS1.3Go Daddy Secure Certificate Authority - G230 d
4500denver7.comA+100—–TLS1.3Amazon RSA 2048 M04116 d
90 / 244

Track grade changes for your domains

Sign up free, watch your domains and get alerted the moment a grade drops.

FAQ

How often is the SSL leaderboard updated?

Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.

How is the SSL grade calculated?

Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.

What does an A+ SSL rating mean?

A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.

Methodology

CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.

What is an SSL grade?

An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.

Why track certificate health over time?

Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.