SSL 安全排行榜
扫描自 20,000 个全球热门域名 · 更新于 2026-11-08
12,269收录域名
32%A+ 占比 (3944)
94.8平均分
↑ 111本月改善域名
| # | 域名 | 等级 | 分数 | 30 天趋势 | 涨跌 | TLS | 签发机构 | HSTS | 到期 |
|---|---|---|---|---|---|---|---|---|---|
| 8851 | bom.gov.au | A | 95 | — | – | TLS1.2 | Corporation Service Company RSA OV SSL CA 2 | 169 天 | |
| 8852 | boredpanda.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 112 天 |
| 8853 | bosch.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 76 天 |
| 8854 | bosch.de | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 181 天 | |
| 8855 | bostonglobe.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 63 天 |
| 8856 | bovadacasino.io | A | 95 | — | — | TLS1.2 | Encryption Everywhere DV TLS CA - G2 | — | 26 天 |
| 8857 | bowdoin.edu | A | 95 | — | – | TLS1.2 | InCommon Intermediate CA - OVG2C | — | 183 天 |
| 8858 | bradley.edu | A | 95 | — | – | TLS1.2 | GlobalSign GCC R46 OV TLS CA 2025 | 145 天 | |
| 8859 | brandeis.edu | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 139 天 |
| 8860 | breastcancer.org | A | 95 | — | – | TLS1.2 | Let's Encrypt | 75 天 | |
| 8861 | brinkster.com | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA DV R36 | — | 140 天 |
| 8862 | bris.ac.uk | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | — | 159 天 |
| 8863 | brisbanetimes.com.au | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | 152 天 | |
| 8864 | bristol.ac.uk | A | 95 | — | – | TLS1.2 | Sectigo Public Server Authentication CA OV R36 | — | 159 天 |
| 8865 | bristolpost.co.uk | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 57 天 |
| 8866 | britannica.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 79 天 |
| 8867 | broadcom.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 133 天 | |
| 8868 | bsc.es | A | 95 | — | – | TLS1.2 | GEANT TLS RSA 1 | — | 173 天 |
| 8869 | bsky.app | A | 95 | – | TLS1.2 | Amazon RSA 2048 M04 | 97 天 | ||
| 8870 | buaa.edu.cn | A | 95 | — | – | TLS1.2 | GlobalSign GCC R46 DV TLS CA 2025 | — | 180 天 |
| 8871 | budget.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 84 天 | |
| 8872 | buffalo.edu | A | 95 | — | – | TLS1.2 | InCommon ECC Server CA 2 | 38 天 | |
| 8873 | builtwith.com | A | 95 | — | – | TLS1.2 | Let's Encrypt | 33 天 | |
| 8874 | bundesarchiv.de | A | 95 | — | – | TLS1.2 | D-TRUST BR CA 2-23-1 2023 | 112 天 | |
| 8875 | bureauveritas.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 189 天 |
| 8876 | business-standard.com | A | 95 | — | – | TLS1.2 | GeoTrust TLS RSA CA G1 | 118 天 | |
| 8877 | business.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 144 天 |
| 8878 | business.gov.au | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 63 天 | |
| 8879 | businessday.co.za | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 140 天 |
| 8880 | businessinsider.com | A | 95 | – | TLS1.2 | GlobalSign Atlas R3 DV TLS CA 2026 Q1 | 128 天 | ||
| 8881 | businessnewsdaily.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 91 天 |
| 8882 | buy.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 95 天 |
| 8883 | by.ru | A | 95 | — | — | TLS1.2 | Let's Encrypt | — | 1 天 |
| 8884 | ca.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 133 天 |
| 8885 | cadillac.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 125 天 | |
| 8886 | caeb.cn | A | 95 | — | — | TLS1.2 | Encryption Everywhere DV TLS CA - G2 | — | 10 天 |
| 8887 | caixabank.es | A | 95 | — | — | TLS1.2 | COMODO RSA Extended Validation Secure Server CA | 4 天 | |
| 8888 | caixin.com | A | 95 | — | – | TLS1.2 | WoTrus RSA OV SSL CA 2 | 186 天 | |
| 8889 | caixinglobal.com | A | 95 | — | – | TLS1.2 | WoTrus RSA OV SSL CA 2 | 105 天 | |
| 8890 | callofduty.com | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | — | 179 天 |
| 8891 | cambridge-news.co.uk | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | — | 57 天 |
| 8892 | cambridgeinternational.org | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 39 天 | |
| 8893 | canadiantire.ca | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 147 天 | |
| 8894 | cancer.gov | A | 95 | — | – | TLS1.2 | DigiCert Global G2 TLS RSA SHA256 2020 CA1 | 126 天 | |
| 8895 | canlii.org | A | 95 | — | – | TLS1.2 | Let's Encrypt | — | 58 天 |
| 8896 | canneslions.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | 135 天 | |
| 8897 | capcom.com | A | 95 | — | – | TLS1.2 | RapidSSL TLS RSA CA G1 | — | 130 天 |
| 8898 | capital.fr | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 35 天 | |
| 8899 | careerexplorer.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M01 | 193 天 | |
| 8900 | cargill.com | A | 95 | — | – | TLS1.2 | Amazon RSA 2048 M04 | — | 78 天 |
追踪你域名的评分变化
免费注册监控台,关注域名并在评分下降时第一时间收到告警。
常见问题
排行榜多久更新一次?
关注域名每日扫描更新;Top 20K 榜单域名每周日刷新完整快照。
SSL 评分是如何计算的?
综合协议版本、加密套件强度、证书有效期、HSTS 与 OCSP 装订等因子加权为 0-100 分,再映射为 A+ 至 F 六个等级。
A+ 评级意味着什么?
近乎完美的 TLS 配置:启用 TLS 1.3、强加密套件、完全前向保密(PFS),并正确部署 HSTS。
评分方法论
CertH 通过纯 TLS 握手探测(无需服务器权限)对每个域名评分:证书有效期、密钥强度、协议版本、HSTS、OCSP 装订等因子按「100 分起逐项扣分」制计算为 0-100 分并映射 A+ 至 F 六个等级。历史快照每日累积,构成可审计的健康度趋势。
什么是 SSL 评分等级?
SSL 评分(A+ 至 F)综合评估网站的 TLS 配置:协议版本、加密套件强度、证书有效期与信任链、HSTS 与 OCSP 装订等因子。评分越高,网站抵御中间人攻击与数据泄露的能力越强。
为什么证书健康度值得持续追踪?
证书过期、CA 更换、配置回退都可能让评分在无人注意时下滑。CertH 每日快照把每次变化记录下来,让你在故障发生前发现风险,并保留可审计的历史证据。