SSL Grade Leaderboard: Top 100 Websites
Scanned from 20,000 top global websites · Updated 2026-11-07
| # | Domain | Grade | Score | 30d trend | Δ | TLS | Issuer | HSTS | Expires |
|---|---|---|---|---|---|---|---|---|---|
| 4801 | foodwatch.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 82 d | |
| 4802 | footlocker.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 75 d | |
| 4803 | footlocker.id | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 175 d | |
| 4804 | forbo.com | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 151 d | |
| 4805 | forbrukerradet.no | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 60 d | |
| 4806 | fordham.edu | A+ | 100 | — | – | TLS1.3 | InCommon RSA OV SSL CA 3 | 49 d | |
| 4807 | form.run | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 85 d | |
| 4808 | formsite.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 69 d | |
| 4809 | formstack.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 70 d | |
| 4810 | forrester.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 60 d | |
| 4811 | fortinet.com | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 49 d | |
| 4812 | fortnumandmason.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 63 d | |
| 4813 | forvismazars.com | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 82 d | |
| 4814 | fosdem.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 72 d | |
| 4815 | foundation.app | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 81 d | |
| 4816 | fourfourtwo.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 79 d | |
| 4817 | foursquare.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 69 d | |
| 4818 | fourthwall.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 42 d | |
| 4819 | fox.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 59 d | |
| 4820 | fox13now.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 116 d | |
| 4821 | fox17online.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 116 d | |
| 4822 | foxbaltimore.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 77 d | |
| 4823 | foxhis.com | A+ | 100 | — | – | TLS1.3 | RapidSSL TLS RSA CA G1 | 46 d | |
| 4824 | foxit.com | A+ | 100 | — | – | TLS1.3 | Go Daddy Secure Certificate Authority - G2 | 88 d | |
| 4825 | foxweather.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 79 d | |
| 4826 | fpif.org | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 62 d | |
| 4827 | frame.io | A+ | 100 | — | — | TLS1.3 | Let's Encrypt | 29 d | |
| 4828 | framer.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 60 d | |
| 4829 | france.tv | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 64 d | |
| 4830 | france24.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 80 d | |
| 4831 | francebleu.fr | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 44 d | |
| 4832 | francecompetences.fr | A+ | 100 | — | – | TLS1.3 | GandiCert | 161 d | |
| 4833 | fredhutch.org | A+ | 100 | — | – | TLS1.3 | Thawte TLS RSA CA G1 | 63 d | |
| 4834 | free-codecs.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 53 d | |
| 4835 | freep.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 53 d | |
| 4836 | freepik.com | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 63 d | |
| 4837 | freepik.es | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 63 d | |
| 4838 | freiheit.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 54 d | |
| 4839 | fresha.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 145 d | |
| 4840 | freshworks.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M04 | 162 d | |
| 4841 | friendlycaptcha.com | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 72 d | |
| 4842 | fronius.com | A+ | 100 | — | – | TLS1.3 | Sectigo Public Server Authentication CA OV R36 | 153 d | |
| 4843 | froxlor.org | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 63 d | |
| 4844 | fruits.co | A+ | 100 | — | – | TLS1.3 | Google Trust Services | 83 d | |
| 4845 | fsb-tcfd.org | A+ | 100 | — | – | TLS1.3 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 84 d | |
| 4846 | fstoppers.com | A+ | 100 | — | – | TLS1.3 | Amazon RSA 2048 M01 | 99 d | |
| 4847 | ft.com | A+ | 100 | – | TLS1.3 | Amazon RSA 2048 M01 | 188 d | ||
| 4848 | ftc.gov | A+ | 100 | — | – | TLS1.3 | GeoTrust TLS RSA CA G1 | 94 d | |
| 4849 | fun-mooc.fr | A+ | 100 | — | – | TLS1.3 | Let's Encrypt | 72 d | |
| 4850 | futuremarketinsights.com | A+ | 100 | — | – | TLS1.3 | RapidSSL TLS RSA CA G1 | 175 d |
Track grade changes for your domains
Sign up free, watch your domains and get alerted the moment a grade drops.
FAQ
How often is the SSL leaderboard updated?
Watched domains are scanned daily; the top-20K leaderboard refreshes full snapshots every Sunday.
How is the SSL grade calculated?
Protocol versions, cipher strength, certificate validity, HSTS and OCSP stapling are weighted into a 0-100 score, mapped to grades from A+ to F.
What does an A+ SSL rating mean?
A near-perfect TLS setup: TLS 1.3 enabled, strong cipher suites, full forward secrecy (PFS) and correctly deployed HSTS.
Methodology
CertH grades each domain via pure TLS handshakes (no server access required): certificate validity, key strength, protocol versions, HSTS and OCSP stapling are scored with a deduction model (100 minus itemized penalties) into a 0-100 score mapped to six grades from A+ to F. Daily snapshots accumulate into an auditable health trend.
What is an SSL grade?
An SSL grade (A+ through F) evaluates a website's overall TLS configuration: protocol versions, cipher strength, certificate validity and trust chain, HSTS and OCSP stapling. A higher grade means stronger resistance to man-in-the-middle attacks and data breaches.
Why track certificate health over time?
Expired certificates, CA switches and configuration regressions can silently drag a grade down. CertH daily snapshots record those changes so you can spot risk before failures, with auditable history as evidence.